Cloud Security Statement

Effective as of April 11, 2017.

Overview

Aneto Software LLC add-ons are hosted and delivered by the great hosting service digitalocean.  digitalocean is responsible for the security of its actual data centers and the cloud solution.  Aneto Software LLC is responsible for monitoring, managing and securing the Aneto Software LLC Cloud.

Facilities

Digitalocean manages the data centers that host the Aneto Software LLC Cloud.  For more information about security at those data centers, see https://www.digitalocean.com.

Aneto Software LLC Cloud data is hosted in the United States.

Certification

Digitalocean Web Services manages the security of the cloud.  Digitalocean has been certified by third-party organizations, and manages many compliance programs to comply with laws and regulations.  A list of such certifications and compliance statements can be found at:

https://www.digitalocean.com.

Aneto Software LLC is certified as a Cloud Security Compliant vendor with Atlassian [https://developer.atlassian.com/market/programs-and-features/cloud-security-program].

Data Storage

In the Aneto Software LLC Cloud, data at rest is encrypted using industry standard encryption.  Additionally, all communications with the Aneto Software LLC Cloud are protected with HTTPS using TLS.

The automatic subtasks add-on saves the subtasks's information details on the solution's database, but not the information contained on the parent types that trigger the creation of the subtasks.

The add-on makes calls to the Jira instance to get the following information: 

1. Project names and IDs
2. Parent issues names and IDs
3. Sub task names and IDs

The add-on also receives notifications from Jira on the following actions: 

1. Issue is created on the instance
2. Project name is changed
3. Issue type name is changed 

Aside from these items, the add-on does not process nor save any other information from the Jira instance. 

People and Access

Within Aneto Software LLC, only a few members of our Cloud Team have access to the production environment for the purposes of maintaining our cloud services and assisting our customers.  Additionally, we monitor all access to Aneto Software LLC Cloud.

Customers are responsible for maintaining the security of their own login information.

Backups

Customer data is backed up once per day, and is encrypted.

Privacy

Aneto Software LLC understands the importance of ensuring the privacy of your personally identifiable information. For more information, please see our Privacy Statement.