Data Security and Privacy

Owned by Alena Mekhnina - Marcalle
Last updated: Jan 14, 2018

Cloud Security Statement


Effective as of April 11, 2017.

Overview

ObiWanSoft LLC add-ons are hosted and delivered by the great hosting service digitalocean.  digitalocean is responsible for the security of its actual data centers and the cloud solution.  ObiWanSoft LLC is responsible for monitoring, managing and securing the ObiWanSoft LLC Cloud.

Facilities

Digitalocean manages the data centers that host the ObiWanSoft LLC Cloud.  For more information about security at those data centers, see https://www.digitalocean.com.

ObiWanSoft LLC Cloud data is hosted in the United States.

Certification

Digitalocean Web Services manages the security of the cloud.  Digitalocean has been certified by third-party organizations, and manages many compliance programs to comply with laws and regulations.  A list of such certifications and compliance statements can be found at:

https://www.digitalocean.com.

ObiWanSoft LLC is certified as a Cloud Security Compliant vendor with Atlassian [https://developer.atlassian.com/market/programs-and-features/cloud-security-program].

Data Storage

In the ObiWanSoft LLC Cloud, data at rest is encrypted using industry standard encryption.  Additionally, all communications with the ObiWanSoft LLC Cloud are protected with HTTPS using TLS.

The automatic subtasks add-on saves the subtasks's information details on the solution's database, but not the information contained on the parent types that trigger the creation of the subtasks.

The add-on makes calls to the Jira instance to get the following information: 

  1. Project names and IDs
  2. Parent issues names and IDs
  3. Sub task names and IDs

The add-on also receives notifications from Jira on the following actions: 

  1. Issue is created on the instance
  2. Project name is changed
  3. Issue type name is changed 

Aside from these items, the add-on does not process nor save any other information from the Jira instance. 

People and Access

Within ObiWanSoft LLC, only a few members of our Cloud Team have access to the production environment for the purposes of maintaining our cloud services and assisting our customers.  Additionally, we monitor all access to ObiWanSoft LLC Cloud.

Customers are responsible for maintaining the security of their own login information.

Backups

Customer data is backed up once per day, and is encrypted.

Privacy

ObiWanSoft LLC understands the importance of ensuring the privacy of your personally identifiable information. For more information, please see our Privacy Statement.