...
Data Processing
Our App stores data from Entra ID exclusively in Atlassian Storage API, such as Tenant ID, Client ID, Client Secretexclusively in a AWS DynamoDB instance from lovebyte.codes and in the Atlassian Jira App Properties. Additionally we save a instance reference to AWS DynamoDB, which is necessary to handle the App installation and deinstallation process. We adhere to Atlassian's encryption standards to ensure that your data is adequately protected.
...
In the event of security incidents or identification of vulnerabilities, we urge our customers to promptly contact our support team. We will take all necessary actions to address security issues as quickly as possible and ensure the integrity of your data.
Access to Data
We prioritize your data privacy. We do not have direct access to the data stored in the Atlassian Jira entities by our users. We do not store passwords or access tokens and within your Jira instance. While we store your email address, API token, and visibility settings in our database, they are protected with double encryption. Even if we could hypothetically look at your data, we have no means of accessing such sensitive information in its decrypted form.
This security policy is intended to instill confidence in our users regarding the security of our App. If you have any questions or concerns regarding security, please do not hesitate to contact our support team.
...