how clean sensitive info from Jira cloud (completely), it this possible?

[Dima Astahov]

Hi all,

Helping one org with their Jira Cloud where one remote customer saw a  ticket and didn't like some $$ details posted there, so he asked Jira Admin to remove it from comments.

So comments and summary was edited and  customer is happy now, but I  think that it's still recorded in some history table and can be reviewed, right ?  

What is secure way to completely erase some info from Jira cloud?  Can I maybe just somehow delete whole ticket ?  I could not find what is protection level for Jira cloud, I don't think there is any.

Appreciate your help.

Thanks

Dima

[Ravina · Accepted solution]

Hi @Dima Astahov There is no easy way to delete the issue history from the ticket, but there are some possible ways to hide the same as mentioned in the below documents.

if you require this for only specific projects and not global then you need to do some custom development to achieve the same.

https://jira.atlassian.com/browse/JRACLOUD-67300

https://confluence.atlassian.com/jirakb/how-to-hide-the-history-tab-in-the-issue-panel-702710334.html

If it's only for few issues then you either archive those issues or delete as well if data is no longer required, the other workaround is if you already removed the sensitive data from the ticket then you can clone that ticket this will preserve the issue data and remove all the issue's history, comments, activity tab details, etc from the issue and later you can delete the original issues and keep using this clone ticket where issue history from original ticket is removed, this way issue data is also preserve and sensitive data is also no longer shown in the issue history.

[Dima Astahov]

Thanks Ravina.

Uff. I think this could be brand new line of business, as it's quite common for users to add attachments or copy/paste email into the tickets without knowing what is inside.

I just was told that Jira cloud is pretty secure to be HIPPA compliant, I'm going to check how it  can be applied to my domain which is different area.  

Best

D