Add-on scope - Read , Write, Delete

[Sachin Thomas]

We are trying to add a addon (Draw.IO) on Cloud, to our account. However, it displays the the addon can 

Read	Read data from the host application
Write	Write data to the host application
Delete	Delete data from the host application

Just wanted to know how we can make sure that our data is secure and the addon company is not able to modify or access our data/code on Jira at anytime. Most companies like us will use such apps to define their key & secure processes.

Your earliest feedback is much appreciated.

[David Benson _draw_io_]

draw.io is using the permissions to read, write and delete attachments, not issues.  The diagrams are stored as attachments. Unfortunately, there's no more granular permissions to request.