Manage data security policy rules

A data security policy helps you keep your organization’s data secure by letting you govern how users, apps, and people outside of your organization can interact with Confluence pages, Jira issues, and other content. What is a data security policy?

Policy rules are security controls that are available to be configured as part of a policy. When a policy rule is added to a policy and the policy is activated, the security control is enforced on the data covered by the policy.

Data security policies are additive, which means any product, space, project, or classification level that is included in more than one policy is subject to all the policy rules specified by all the policies that data. Where there is a conflict, we enforce the most restrictive rule. This means rules that block a behavior will always override a rule set to allow.