OVERALL RATINGS
INSTALLS
1
SUPPORT
- Partner Supported
TRUST SIGNALS
Key highlights of the appWho changed Jira configuration, kept for years, provable to an auditor
Prove the log was not altered
Every record is sealed into a SHA-256 hash chain. One button recomputes the whole chain and names the first record that does not match, so a later edit or deletion is detectable rather than deniable.
Hand the auditor one file
One self-contained HTML file: the period, a summary by category, the result of the integrity check over the whole chain, and the full log. No external links, so it opens with no internet.
Keep it for years, not 180 days
Jira keeps its own audit log for 180 days, which does not cover an annual audit cycle. You choose how long per-record detail is kept, and the app says plainly that compaction is not reversible.
Supporting media
More details
Jira keeps its own audit log for 180 days, requires a paid plan, and truncates its CSV export at 10,000 rows, which does not cover an annual audit cycle. Witness records changes to workflows, permission and notification schemes, fields, screens, issue types and projects, and keeps them for as long as you choose. Three capture channels cover for each other: Jira product events, Jira’s own audit log, and an hourly configuration snapshot compared line by line with the previous one. Every record is sealed into a SHA-256 hash chain, so a later alteration is detectable and the whole chain can be recomputed from the formula printed in the auditor report. Export the full log as CSV or JSON Lines with no row limit. Runs on Atlassian: no external services, and no scope that lets the app change your configuration.
Resources
App documentation
Comprehensive set of documentation from the partner on how this app works
Privacy and Security
Privacy and security questionnaire has been filled by the partner
Privacy policy
Atlassian's privacy policy is not applicable to the use of this app. Please refer to the privacy policy provided by this app's partner.
Partner privacy policySecurity program
This app is not part of the Marketplace Bug Bounty program.
Integration permissions
Witness: Configuration Audit Log integrates with your Atlassian app
Version information
Version 2.9.0•for Jira Cloud
- Release date
- Sep 1st 2026
- Summary
- First release: who changed Jira configuration, kept for years, provable
- Details
First release. Witness records who changed what in your Jira configuration and keeps it for as long as you need — not 180 days.
- Three capture channels: product events, Jira’s audit log, and hourly configuration snapshots with a line-by-line diff.
- Every record is sealed into a SHA-256 hash chain. One button checks the whole log and names the first record that does not match.
- Export the full log as CSV or JSON Lines with no row limit.
- One-click auditor report: a self-contained HTML file with the period, a summary, the integrity result and the full log.
- Optional daily digest as an issue in a project you choose.
- Runs on Atlassian: no external services, read-only access to configuration.
- Payment model
- Paid via Atlassian
- License type
- Commercial