Confidential and personal content

[Eric McLean]

I store sensitive information that is shared with our company CEO.  It seems that our administrators are able to view my content.

Is there any way to prevent this?

Thanks in advance.

[Jack Brickey]

You can attach encrypted content and provide the key to the intended audience thru other channels.

[Eric McLean]

But no way to Encrypt automatically inside Confluence I suppose? 

[Jack Brickey]

Correct. If the method I offer isn't workable then the only recourse is to accept that the admins can access and discuss this with them as Nic suggests or fina another method of sharing sensitive info.

[Nic Brough -Adaptavist-]

If you could encrypt it inside Confluence, then an admin can get to it.  Might be convoluted, but they could get to a decrypted version of it in several ways.

[Eric McLean]

Really?  Sorry I asked, in both cases. 

[Nic Brough -Adaptavist-]

A system administrator cannot do their job without (inadvertently) gaining access to everything.  You can obfuscate it a lot, and make it a bit more difficult in many ways, but ultimately, someone with system admin rights will always be able to get to your data.

You have to trust your administrators with the information you have in the systems they run.

[Eric McLean]

Trust is not security :) 

[Nic Brough -Adaptavist-]

True, but irrelevant. 

Jack has mentioned the only solution - keep the data in a system the administrators can't use.

[Eric McLean]

"True, but irrelevant."

In your opinion, perhaps. 

"Jack has mentioned the only solution - keep the data in a system the administrators can't use."

No he didnt. He suggested we should trust them.  There is a difference. 

[Eric McLean]

Really?  Sorry I asked, in both cases.