Jira server encryption at rest

Question

Hi,

Around JIRA encryptions can you confirm the following:

-          Attaching client confidential and private information to JIRA when logging issue only authorized teams members can see this info

-          Is there encryption on the JIRA that once client confidential information is stored that the data at rest or where is stored is encrypted,

Thanks,

Ozhan

ALBERTO EXPOSITO GOMEZ · Answer

Can you try this addon?

https://marketplace.atlassian.com/plugins/com.devoog.jira.plugin.encrypted/server/overview

Ryan Kennedy · Answer

We are an Atlassian Solution Partner and we've just released a solution called Team Secrets - it protects sensitive file attachments in JIRA with end-to-end encryption for attachment uploads and 2 factor verification for downloads.

https://marketplace.atlassian.com/plugins/io.teamsecrets.jira.prod/cloud/overview

We'd love to hear any feedback you might have!

Damian Wheeler _Otago_ · Answer

Depends what you mean by attached for one thing. If you put text into the Jira issue then you should ensure that the database you use is configured to encrypt the data at rest. Oracle can do this for instance.

If you are attaching documents, then they live on the application server filesystem. That relys on keeping the server secure and the directory structure (Jira Home directory and sub directories). Not encrypted unless you are using an encrypted filesystem, but even then it isn't the same.

From the web interface, yes only the users who are authorised will see A) the project, b) the issues within and c) notifications, provided that the project's security scheme and privileges are configured correctly.