This article covers one of the major concerns with any migration tool: handling of data.
WikiTraccs handles data securely.
Big Picture
WikiTraccs is a console application that connects to both Confluence and SharePoint Online during the Confluence to SharePoint migration.
It downloads content like pages and attachments from Confluence to a local directory. It processes this locally stored data and uploads it to SharePoint Online.
Where does WikiTracc run? Is it a cloud service?
WikiTraccs is not a cloud service. WikiTraccs is a .NET-based console application that runs on a Windows workstation of your choosing.
The workstation WikiTraccs runs on can be any machine: your VPN-connected laptop at home, an on-premises server, a cloud VM - as long as it can connect to and authenticate with both Confluence and SharePoint Online it will work.
And because this question sometimes comes up: No, WikiTraccs does not need to run on the Confluence server.
Where does WikiTraccs store data? Is data being sent somewhere?
WikiTraccs stores data locally on the workstation it is running on.
This locally stored data includes:
- page contents
- attachments
- log files
- cached data and temporary files
There is no cloud storage involved, apart from SharePoint Online as migration target. Other migration tools use Azure or third-party storage solutions as temporary storage location before data is being moved to SharePoint Online. WikiTraccs does not do that. It directly uploads to SharePoint.
The data never leaves the workstation, except for SharePoint Online, which is the target of the migration.
This article has details on where WikiTraccs stores data on the migration machine: File Storage.
What level of encryption is used for data at rest?
Data at rest in the context of WikiTraccs is content stored on the workstation that is used to perform the migration and to run WikiTraccs. This data is not encrypted and can potentially be accessed by users of this workstation, depending on file system access permissions.
How is data transmission secured?
Connections use TLS version 1.2. For Confluence, some clients run their instance disconnected from the internet and connect via HTTP from their internal network, which WikiTraccs allows.
WikiTraccs uses the Confluence REST API as well as the SharePoint Online API and Microsoft Graph, when it comes to transmitting migrated content.
A complete list of endpoints used by WikiTraccs is shown in the Endpoint Reference.
Can WikiTraccs access all my data?
WikiTraccs can access only what the configured source and target identities are authorized to access. The exact boundary depends on the authentication mode.
For Confluence, WikiTraccs uses the effective access of the source account or token. If that identity can see only one space, WikiTraccs can retrieve only that space. Page restrictions can further limit which pages are visible.
For SharePoint delegated authentication, access is the intersection of the signed-in user’s site permissions and the delegated scopes on the Entra ID application. A migration account that is Site Owner only on the migration sites limits WikiTraccs to those sites.
For SharePoint certificate authentication, there is no signed-in user. Access is determined by the application’s permissions. Sites.Selected can limit the app to sites that received an explicit grant.
See Required permissions for SharePoint Online for the supported permission combinations and their tradeoffs.
Can Wiki Transformation Project or Heinrich access my data?
No, unless you actively send it to me.
Where can I get an architectural overview, like, a diagram?
Please have a look at the Security article, which dives deeper.