Portal Sub-tasks / Docs / Security and data

Security and data

Last updated 11/11/2026

Portal Sub-tasks is built so customers see the progress of their own requests and nothing more.

Who can see what

Only their own requests. A customer sees sub-tasks only on requests they can already open on the portal. Requests they cannot open show nothing.
Only allowed fields. Summary and status, plus due date, percent done and key if an administrator switches them on. Descriptions, comments, attachments, assignees, reporters and other people fields are never sent to the portal, whatever the settings.
Only switched-on projects. Every service project starts switched off.
Only administrators change settings. The settings page requires the Administer Jira permission.

The app stores only your per-project settings (on/off, visible fields, internal label, comment mode and text) inside your Atlassian site. They are removed when you uninstall.
It runs on Atlassian Forge and makes no external network calls - no analytics, no telemetry, no third parties.