PowerUps data security

[Phil Janssens]

Hello,

Can someone confirm if data is shared with 3rd party suppliers when Power-Ups are used ? Or will all data be stored on the Trello servers ? Even additional data that is required for the Power-Ups ?

Thank you !

[Rasmus Wulff Jensen]

Custom data is stored in the Trello Cards, but a 3rd party Power-Up essentially has full access to your board data (and could if evil store them on their own server/share them)... That is the Power but also the vulnerability of the system and you should only use PowerUps if you trust the 3rd party... All Power-Ups go to an approval procedure by Trello, but I would say such a review can not catch everything. 

Trello has this technical page on the subject, but aimed at developers: https://developer.atlassian.com/cloud/trello/guides/power-ups/security/

Reddit post on the topic: https://www.reddit.com/r/trello/comments/1210o0z/are_free_power_ups_safe_to_use/