Security Statement
Information below applies to the Issue Templates Agent for the Jira Cloud app.
Last updated
Was this helpful?
Information below applies to the Issue Templates Agent for the Jira Cloud app.
Last updated
Was this helpful?
We are committed to improving our security posture. That’s why we created this page to answer basic questions about security in the Issue Templates Agent.
Since Oct 2023, we've been SOC2 type II compliant to meet the highest and most professional standards.
This app takes part in !
is built on the platform. The app connects to Jira using . It’s written in React and TypeScript.
What customer data does the app process?
We process accountIds, email addresses, display name and customer data. We also process Jira look and feel settings for viewing and formatting dates. We have the access to Jira Settings. Additionally, if the user shares the information of their time zone and language settings, we do process these details as well.
What data does the app store?
The app stores templates data.
Where are the data stored?
All data are stored on the Atlassian infrastructure. Templates data is stored in The app configuration and templates are stored via .
What permission does the app require?
Permission
Usage
Endpoint(s) in methods
manage:jira-configuration
Creating Template custom field if field doesn’t exist (done in upgrade tasks).
Creating a custom field context. Used when options are updated for template.
Getting mappings for a field in issue for particular project. Used when applying UI modification for the following field types: single select, multi select, checkboxes.
Getting custom field context for a project. Used when updating options for a template and during template deletion.
Getting custom field option for a context. Used when creating a custom field context and during template deletion.
Creating options for a custom field. Done during template creation and update.
Updating options for a custom field. Done during template update.
Deleting a custom field option. Done during template deletion.
Getting issue type screen schemes for projects. Done during adding Template field to create screens.
Getting issue type screen scheme items. Done during adding Template field to create screens.
Getting contexts for a custom field. Used for example when getting predefined options for the select field type.
Getting values for the priority field. Getting the format of dates from look&feel
manage:jira-project
Adding template field to create screens for particular projects. This process involves getting list of screen schemes, tabs for a screen, fields for a tab, adding a field to a screen tab and moving a screen tab field.
storage:app
Saving plugin related data in the Storage. For example, custom field config is saved in the Storage and this data is used on create issue screen when reading what kind of fields are supported by our app for UI modifications. Another example is that we save templates names in the Storage so when someone is creating or updating a template we can verify if such template already exists.
read:jira-work
Getting a custom field option. Done during template update and deletion.
Getting UI modifications to display in the table.
Updating UI modifications when template is updated.
Creating UI modifications when template is created.
Getting supported fields to display in the field selector while creating/updating template.
Getting the JQL search auto complete suggestions for the labels field.
Getting components for a project.
Getting versions for a project. Getting projects Verifying if the user has admin permissions, so we can view sections only for admins Used for geeting issues in context (creating an issue structure and for parent field in templates) Getting the details of issues in bulk Verification of the template field in team-managed projects
read:jira-user
Getting a user for a user picker field.
Getting users for a user picker field for handling multi selection.
Getting users for a user picker field with specific search conditions.
write:jira-work
Required for loading and applying UI modifications on the create issue screen. Add watchers to the issue based on the template. Create the structure of issues based on a definition in template
Does the app encode all data in transit and at rest?
Yes.
Does the app support data residency?
Does the app have a data retention policy?
Does the app have a data backup policy?
g
Yes, thanks to using the Atlassian Forge platform. Here is the official announcement from Atlassian:
Yes. Upon written request, Appsvio and Atlassian will delete all End User Personal Data (including copies). More information is available in .
Yes. More information is available in
If you have any questions about the security, e-mail .