Confidential Information

[Andy Rosengard]

Question for the community. How does Jira handle confidential information such as HIPAA? I have a request to build a service request system for HR and they are concerned about confidentiality on a SaaS platform. 

[Dirk Ronsmans]

Hi @Andy Rosengard ,

you might want to read up in the Trust center. Mainly about HIPAA there is a specific part. 

https://www.atlassian.com/trust/compliance/resources/hipaa

Other than that there is a lot more info about security and confidentiality. 

[Tim Jansmann]

You can get pretty creative with the security.  We have both project and Issue level security on out HR setup.  Sadly, they migrated back to their HRIS for a "one system approach".  I'm hoping when we move to the cloud, we will have more opportunity to integrate. Here is a helpful article about security and how granular you can get! :)

Configure issue security schemes | Atlassian Support

[Mark Higgins]

Hi Andy,

Just re-afirming hat Dirk and Tim have suggested.

When we do this for clients, HR is normally its own seperate project, which is locked down to those who have authority, and then inside the project, Issue level security is used to lock data down even further.

Regards

Mark