SOC2 Type II compliance is reiterated, and an attached report provides detailed insights into our adherence to security standards.
Data Processing and Deletion:
Our applications only process data when users interact with them. Even after uninstallation, data persists until periodic maintenance, at which point it is securely deleted.
End-User Data Processing/Storage:
We exclusively store data generated by user interactions with our applications.
The data resides on our cloud-native infrastructure, utilizing Google Cloud and AWS services
Data Handling with Jira Integration:
Our app interacts with Jira via REST API; we don't collect or store Jira data.
User-generated data (e.g., app settings, preferences) is stored in our Google Cloud Database.
Data retention after uninstallation is 90 days.
Regular penetration tests are conducted, and our apps are "Cloud Fortified," monitored, and audited by Atlassian.
Security Measures for User-Generated Data:
No personal or sensitive data is stored, hence no encryption is applied.
Daily automatic backups of user-generated data are implemented.
GDPR Compliance and Security Measures?
GDPR is not applicable as we don't store personal data.
SOC2 Type II compliance ensures robust security and data processing standards.
Additional Assurance and Reporting:
SOC2 Type II compliance is reiterated, and an attached report provides detailed insights into our adherence to security standards.