Data Security and Privacy Statement

Owned by Daniel Wester
Mar 29, 2021
3 min read

Overview

This document is in addition to the 55 Degrees Privacy document, the 55 Degrees Product EULA and the DPA (available upon request) provided by 55 Degrees and explains how Portfolio forecaster stores the data it captures. This document will be updated as new features are added to Portfolio forecaster.

Data storage terms and data storage location

  • Portfolio forecaster retrieves data from the customer Jira instance (for example yourinstance.atlassian.net) using the Atlassian provided rest API.

  • Jira Cloud: In addition to this, 55 Degrees, may in the future, maintain a database that contains basic information about the instances using our preferred vendors (see below). If this occurs - we’ll inform you of this through release notes and this page.

  • At no point is any customer-specific data retrieved and stored on any 55 Degrees servers.

  • We do not store any user data (personal information or any similar data) in either the Jira instance or in the 55 Degrees database).

  • Any configuration done by the end user is stored as an user property in the Jira instance.

  • Please read the product documentation for further details.

Preferred Vendors

Jira Cloud: At this time, 55 Degrees utilizes 1 vendors to provide the functionality within Portfolio Forecaster:

  • DigitalOcean (utilizing the Frankfurt and Amsterdam DataCenters)

  • Amazon AWS (S3 Global)

Jira Server/ Jira Data Center: All actions happen on your local instance and the user’s browser.

Logging

Jira Cloud: We make use of sentry.io to collect any javascript errors in the browser. For more details about their security&legal statements - please see https://docs.sentry.io/product/security/

Jira Server/ Jira Data Center: At this time. we do not collect any logs in an automated fashion and rely on the user to assist in any troubleshooting.

Account removal and data retention

This section explains how a customer can close an account and completely remove their data from our service.

  • Jira Cloud: A customer can uninstall the Portfolio Forecaster app from their Jira instance. At this point, and if applicable, any data contained with the 55 Degrees database is removed. Any data stored on the user object will continue to persist on the user entity in Jira Cloud’s database.

  • Jira DataCenter and Jira Server: There is currently no database usage.

  • Please read the product documentation for further details.

Data portability

This section explains if and how a customer can extract their data from your service.

  • The Portfilio forecaster app does not create any new data but rather analyses and visualizes it. Because of this there is no data stored on our services.

  • Please read the product documentation for further details.

Application and infrastructure security

This section explains what security measures we've taken in our application and infrastructure.

  • The 55 Degrees support team accesses app data only for purposes of application health monitoring, performing system updates, application maintenance, and/or upon customer request for support purposes.

  • Only authorized 55 Degrees employees to have access to customer data.

  • Customers are responsible for maintaining the security of their own Confluence and JIRA Cloud login information.

  • Communication between the Cloud products and the 55 Degrees servers are done using web requests. All web requests are digitally signed, authenticated, and authorized.

  • 55 Degrees' servers are only accessible through secure protocols (e.g. https and/or ssh).

  • Please read the product documentation for further details.

Security disclosure

This section explains how and under what circumstances we notify our customers about security breaches or vulnerabilities and indicate how a user or security researcher should disclose a vulnerability found in our add-on to us.

  • Security breaches or vulnerabilities with the proposed solution of the problem are published on our website.

  • Customers can report security breaches or vulnerabilities using support@55degrees.se e-mail address.

  • Please read the product documentation for further details.

Privacy

Data collected during the use of our add-on will not be shared with third parties except if required by law.