Does service desk provide data encryption at rest and when transferring data?

[Alex Hoffman]

I was wondering if service desk provides data encryption at rest and data encryption when transferring. 

[Daniel Eads]

Hi Alex,

We definitely provide encryption at rest. From our Security Practices page:

Encryption at rest

Data drives on servers holding customer data and attachments in Jira Software Cloud, Jira Service Desk Cloud, Jira Core Cloud, Confluence Cloud, Statuspage, OpsGenie, and Trello use full disk, industry-standard AES-256 encryption at rest. Bitbucket does not offer encryption at rest for repositories at this time.

For encryption at rest, specifically we encrypt customer data that is stored on a disk such as Jira issue data (details, comments, attachments) or Confluence page data (page content, comments, attachments). Data encryption at rest helps guard against unauthorized access and ensures that data can only be access by authorized roles and services with audited access to the encryption keys.

We also use TLS 1.2 for encryption in transit! Again from the security practices page linked above:

Encryption in transit

All customer data stored within Atlassian cloud products and services is encrypted in transit over public networks using Transport Layer Security (TLS) 1.2+ with Perfect Forward Secrecy (PFS) to protect it from unauthorized disclosure or modification. Our implementation of TLS enforces the use of strong ciphers and key-lengths where supported by the browser.

Given our Cloud infrastructure a poke with the Qualys SSL Labs test if you like!

Cheers,
Daniel