Confidential Information

Question for the community. How does Jira handle confidential information such as HIPAA? I have a request to build a service request system for HR and they are concerned about confidentiality on a SaaS platform.

3 answers

1 accepted

Suggest an answer

0 votes

Answer accepted

Hi Andy,

Just re-afirming hat Dirk and Tim have suggested.

When we do this for clients, HR is normally its own seperate project, which is locked down to those who have authority, and then inside the project, Issue level security is used to lock data down even further.

Regards

Mark

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

1 vote

Hi @Andy Rosengard ,

you might want to read up in the Trust center. Mainly about HIPAA there is a specific part.

https://www.atlassian.com/trust/compliance/resources/hipaa

Other than that there is a lot more info about security and confidentiality.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

0 votes

You can get pretty creative with the security. We have both project and Issue level security on out HR setup. Sadly, they migrated back to their HRIS for a "one system approach". I'm hoping when we move to the cloud, we will have more opportunity to integrate. Here is a helpful article about security and how granular you can get! :)

Configure issue security schemes | Atlassian Support