1. Cloud Security & Architecture
Our application is built exclusively on the Atlassian Forge platform. This means:
- No External Data Storage: We do not host or maintain external databases. All application data and processing occur within the Atlassian Cloud environment.
- Atlassian Managed Infrastructure: We leverage Atlassian’s multi-tenant cloud architecture, benefiting from their world-class security, encryption at rest, and physical data center protections.
2. Data Privacy and Residency
- Minimal Data Access: The app only accesses the information necessary to provide the custom field functionality in Jira.
- No PII Storage: We do not store Personally Identifiable Information (PII) or sensitive customer data on our own systems.
- Compliance: Since data remains within Atlassian’s boundary, your data residency settings in Jira are respected.
3. Internal Security Controls
- Access Management: Our development and support teams use Multi-Factor Authentication (MFA/2FA) for all internal systems and repository access.
- Automated Scanning: We use automated vulnerability scanning tools in our CI/CD pipeline to identify and mitigate security flaws before any code is deployed.
- Least Privilege: We follow the principle of least privilege for all internal administrative access.
4. Vulnerability Management & Incident Response
- Transparency: Any security updates, bug fixes, or critical changes are publicly documented in our Changelog.
- Reporting: We take security seriously. If a vulnerability is discovered, we aim to address it according to its severity level (Critical/High/Medium) following Atlassian’s Marketplace security guidelines.
5. Contact Information
For any security-related inquiries or to report a potential vulnerability, please contact our security team at:
- Email:
support@mbgroup.peorsoporte@mbgroup.pe