Work / Attestly / Terms

Attestly terms

Last updated 18 September 2026 · Applies to Attestly for Jira Cloud · help@8lax.com

1. The agreement

Your agreement with 8lax for Attestly consists of:

• the Bonterms Standard End User Agreement (Version 1.0), the "Standard Agreement"; and
• the Provider-Specific Terms on this page.

You enter into both when you first place an order for Attestly on the Atlassian Marketplace. Where they conflict, section 1.4 of the Standard Agreement decides which applies. Capitalised terms used here, such as Customer, Customer Data, Order and User, have the meaning the Standard Agreement gives them.

2. Who we are

The Provider is 8lax, the trading name of ФОП Литвин О. В., registered in Ukraine.

Our notice address under section 19.3 of the Standard Agreement is help@8lax.com.

3. What Attestly does, and what it does not

Attestly helps you run a user access review in Jira Cloud and keeps a record of it. It takes a snapshot of who can access your projects and how, has the reviewers you assign record a decision on each line, and exports an evidence pack.

• It does not change permissions in Jira. Attestly holds read-only access. A decision to remove someone's access is a record, and carrying it out in Jira is your responsibility. The evidence pack lists those removals so that someone can.
• It reports what Jira exposes to it. Organisation-level administration in Atlassian Administration is outside what an app on Atlassian's platform can read. Grants that apply to a whole population, such as everyone with product access, are reported as rules rather than as lists of people. The snapshot and the report say so where it applies.
• It does not certify compliance. Using Attestly does not by itself satisfy any standard, regulation or audit, and 8lax makes no representation that it does. Whether a review is sufficient is for you and your auditor to decide.
• Its evidence is tamper-evident, not immutable. Each entry in the evidence log carries a hash of the entry before it, so altering or removing one is detectable by anyone who checks the exported pack. Anyone able to write to the underlying storage could recompute the chain, and Attestly does not claim otherwise.

4. Customer Data

Attestly keeps Customer Data in Forge storage on your own Atlassian site. It sends nothing outside Atlassian's infrastructure, uses no sub-processor, and sends no Customer Data to any AI or language model. 8lax does not receive, host or have access to your Customer Data. The Attestly privacy policy sets out what the app reads, what it stores, and what 8lax can see in the app's logs.

Justifications and any other text your Users type into Attestly are Customer Data, and you are responsible for what they contain. They become part of an audit record, so they should hold nothing that does not belong in one.

5. When a subscription ends

If your subscription lapses or is not renewed, what you already have keeps working. Snapshots, reviews and evidence packs stay readable, exportable and verifiable, and you can still delete snapshots. Starting new work, such as a snapshot, a campaign or a decision, needs an active subscription.

Uninstalling Attestly deletes its data. Atlassian removes the app's storage from your site, including every evidence log. 8lax never holds a copy, so it cannot restore anything afterwards. Export the evidence packs you need to keep before you uninstall.

6. Support

Support for Attestly is by email at help@8lax.com, in English or Ukrainian. 8lax does not offer a service level agreement for Attestly.

7. Governing law

Section 19.2 of the Standard Agreement sets the Governing Law and Courts: the laws of the State of California and the courts in San Francisco, California. These Provider-Specific Terms do not change them.

8. Changes

Material changes to these Provider-Specific Terms will be published here with a new date and noted in Attestly's Marketplace release notes.

9. Contact

help@8lax.com for questions about these terms, notices, and anything else.