Compliance Glossary for Confluence

Can I add Word documents?

Yes. Production version 6 accepts only .docx with the exact Word MIME type. It opens a bounded ZIP package, requires word/document.xml, and extracts non-empty paragraph text, including table-cell paragraphs. It records paragraph count, hashes and stores source bytes, and indexes exact approved-term matches. It does not interpret layout, headers, footers, comments, tracked changes, embedded objects, signatures, meaning, or legal validity.

Last verified against production v6 · 24 October 2026
Upload controlled evidence after a Word upload: artifact and revision IDs, two usages, retention class regulatory-record until 14 October 2033
A Word file stored as controlled evidence with its retention date. Staging demo data.

At a glance

InputCurrent actionOutputBoundary
.docx and exact Word MIME typeValidate the allow-listed pairAccepted Word inputLegacy .doc and macro-enabled .docm are unsupported.
DOCX packageInspect the first local ZIP header, decompress entries, and require word/document.xmlParseable primary document bodyA declared first-entry encryption flag and malformed packages fail. No broader authenticity validation runs.
Expanded packageCount entries and bytesBounded parser inputMaximum: 20,000 entries and 100 MiB expanded bytes.
Primary word/document.xmlJoin w:t text within each non-empty w:pPlain text and paragraphCountExtracted text cannot exceed 2 MiB. Paragraph breaks become new lines.
Approved baseline termsCount exact, case-insensitive token matchesRevision-specific usage observationsMaximum catalog: 5,000 terms. Each term count is capped at 100,000. Definition fit remains unchecked.
File identity and upload contextRecord name, extension, MIME type, uploader, capture time, and parser metadataArtifact provenance and immutable revisionProvenance does not establish document correctness or approval.
Source bytesCalculate SHA-256 and append a content-addressed frozen-content objectObject Store content plus SQL hash and object-key referencesRaw bytes are not stored in SQL evidence records.
Retention class and Retention untilValidate an allowed class and future timestampRetention class, retention date, legal-hold flag, deletion state, and archive state on the artifact recordUpload has no legal-hold control, so the flag is always off. Nothing enforces the date.
File up to 350 KiBSend one direct resolver requestPersisted or duplicate resultBase64 transport remains bounded below Forge request limits.
File above 350 KiB and up to 25 MiBStage verified 256 KiB chunksFinal result after assembly and whole-file hash verificationMaximum: 100 chunks. Cleanup is attempted and reported after finalization.

How it works

  1. Open Enterprise evidence workspace.
  2. Find Upload controlled evidence.
  3. Under Evidence file, select the DOCX file.
  4. Select a Retention class.
  5. Set Retention until.
  6. Select Upload evidence.
  7. Review the returned Artifact, Revision, and Usages values.
  8. Apply deletion and legal holds in your records system. The app stores the retention date but does not enforce it.

Example

A team uploads Policy.docx. Its primary document body contains the approved term “Risk” twice. The app stores the bytes in Object Store. It creates one immutable revision and one usage observation with mention count two. Uploading the same file again returns a duplicate result.

What this does not mean

Word support is limited to DOCX. Extraction reads paragraph text only from word/document.xml. It does not separately parse headers, footers, comments, footnotes, endnotes, relationships, embedded files, macros, fields, or signatures. It does not interpret tracked-change state or visual layout. Term matching finds literal tokens, not semantic agreement. The retention date is stored on the artifact record, but no workflow deletes or archives evidence when it passes. Uploads made before 6.9.0 have no stored date.

Related questions

Next step

Upload one controlled DOCX file. Review the returned artifact, revision, and usage count before relying on the evidence record.

View on Atlassian Marketplace
Verification basis: production v6 code, tests, manifest, and operations guidance. Verified 24 October 2026.