Question for the community. How does Jira handle confidential information such as HIPAA? I have a request to build a service request system for HR and they are concerned about confidentiality on a SaaS platform.
Hi @Andy Rosengard ,
you might want to read up in the Trust center. Mainly about HIPAA there is a specific part.
https://www.atlassian.com/trust/compliance/resources/hipaa
Other than that there is a lot more info about security and confidentiality.
You can get pretty creative with the security. We have both project and Issue level security on out HR setup. Sadly, they migrated back to their HRIS for a "one system approach". I'm hoping when we move to the cloud, we will have more opportunity to integrate. Here is a helpful article about security and how granular you can get!
Configure issue security schemes | Atlassian Support
Hi Andy,
Just re-afirming hat Dirk and Tim have suggested.
When we do this for clients, HR is normally its own seperate project, which is locked down to those who have authority, and then inside the project, Issue level security is used to lock data down even further.
Regards
Mark
It looks like you're new here. Sign in or register to get started.
