Paperlatch
Each one does a single job and stays out of the way of the people using it.
Our apps run on Forge, inside Atlassian, so your data stays in your own Atlassian site. We ask for the narrowest set of permissions an app needs to do its job, and you can check that on the Permissions tab of any of our listings rather than take our word for it.
Read confirmation and policy acknowledgement for Confluence. Readers confirm a page once; you get one dashboard covering every policy across every space, showing what is clear, what is outstanding, and who still needs chasing. Change the policy and everyone is asked again, while earlier rounds stay on record for your auditor.
Document approval for Confluence. Approvers approve or reject the exact page version they read; when the page is edited, it shows that it is no longer approved, and the earlier decisions stay on record. One list of what is waiting, with a CSV export. Approvers need only read access.
Small apps. Small permissions.
Every one of those is checkable on the Permissions tab of a Marketplace listing, which is the point of stating them this way rather than asking you to take our word for it.
The privacy policy lists exactly what is stored.
Email support@paperlatch.com on business days. We aim to reply within two business days. The documentation page answers the questions that come up most often, and says what to include so the first reply is a useful one.