XPORTER FOR JIRA CLOUD SECURITY AND PRIVACY STATEMENT
Xporter for JIRA is a powerful exporting tool that is tightly integrated with JIRA Cloud. Following the need for data communication between JIRA Cloud and Xporter for JIRA, that is hosted on a separate hardware and software, in this document you will find the terms of how Xporter for JIRA Cloud uses and stores data.
1. DATA STORAGE
Our Cloud was designed and developed precisely for Xporter for JIRA Cloud. The application runs on separate compute nodes than that on which the data is stored. Hardware or software failure of the application node is recovered automatically using hot standbys. The application data is stored in different dedicated nodes with real-time replication. A minimum of three copies of the data is replicated across availability zones and continuously backed up.
The Xporter for JIRA Cloud is hosted using Amazon Web Services (AWS) and the MongoDB Atlas Services (also hosted in AWS). Only authorized personnel can have access to the data centers, as verified by biometric identity verification measures. Physical security measures include on-premises security, guards, closed circuit video monitoring, man traps and additional intrusion protection measures.
3. PEOPLE AND ACCESS
The hosted application data can be accessed by our support team only for reasons related with performing system or application maintenance and data recovery. Only the application data is authorized to be accessed by Xpand IT employees. The connections to the servers are possible only for the authorized Xpand IT computers.
The Xporter for JIRA Cloud was developed to be accessible only with appropriate credentials, this means that one customer cannot access to another customer data without the authentication access to the other customer’s JIRA Cloud. Each customer has the responsibility of maintaining the security of the own JIRA Cloud.
4. STORED JIRA DATA
Xporter for JIRA Cloud uses JIRA REST API to get data from JIRA Cloud and export that data into several formats. The Xporter for JIRA Cloud database stores the configuration parameters, templates, and the generated documents. The generated documents are secured by authentication tokens and retained for a maximum of 10 minutes. After 10 minutes, documents are removed from the database.
All the backups done by Xporter for JIRA Cloud are encrypted. These are executed once per day and are retained for 30 days.
6. DATA RETENTION
When the license of the customer dotes or ends, the data is retained for 30 days and then, it is removed. The subscriptions’ renewals can be done within this 30 days in which customers can still access the data.
In case of a customer wants a permanent removal of data from the system, it will take around 15 days from the request date (done to Xpand IT). This process does not include the removal of data from backups materials.