Atlassian/JIRA Add-on data governance

Robert_Smit March 13, 2018

Hi,

I'm looking into installing a few add-ons for a project that has a high level of data sensitivity; to the level of descriptive titles in user stories that might be labeled as sensitive data.

The description (on the install prompt) of these add-ons read as follows:

"...may store your data on Impetus Technologies, Inc.'s server so it can integrate with your JIRA instance.

  • Administer JIRA
  • Administer JIRA spaces
  • Administer JIRA projects
  • Delete JIRA data
  • Write data to JIRA
  • Read JIRA data"

Does the company get access to all the project data through an API? And will project data be stored on their servers as well? I'm asking because this might create a liability for us and our customers. I also read that Atlassian encourages 3rd party developers to participate in their data security program but for this plug-in they don't.

Thanks in advance! :)

Kinds regards,

Robert

0 answers

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events