Privacy and security
How Process Templates for Jira handles your data: Forge platform, Cloud Fortified, EU data residency, no personal data stored, encrypted in transit.
Atlassian Forge
Process Templates for Jira is a Forge app. Forge is Atlassian’s serverless platform for Marketplace apps, so the app’s code runs inside Atlassian’s own infrastructure. The app reads and writes your Jira data through Atlassian’s APIs.
Template definitions are stored on a dedicated backend we operate, hosted with DigitalOcean in Frankfurt, Germany (EU). See the Data residency section below for details.
Cloud Fortified
The app carries the Cloud Fortified badge, which is Atlassian’s highest reliability and security tier for Marketplace Cloud apps. Cloud Fortified requires:
- An incident-response SLA with Atlassian, with defined response times.
- Periodic security reviews by Atlassian.
- Participation in Atlassian’s coordinated vulnerability disclosure programme.
- Operational maturity (monitoring, logging, on-call rotation).
Cloud Fortified is the only Atlassian-attested certification we hold. We do not currently hold SOC 2 or ISO 27001.
Atlassian Bug Bounty programme
Process Templates for Jira participates in the Atlassian Marketplace Bug Bounty programme. Independent security researchers continuously probe the app for vulnerabilities, and reported issues are resolved within Atlassian-defined timelines.
Data collection
The app stores only the template metadata required to make templates work: the field definitions, the variables, the sub-task structure, and the issue links between templated parent and child issues. We do not store personal data about your users beyond what is already in their Jira profile, which the app reads through Atlassian’s APIs.
We do not sell or share data with third parties. The app has no advertising or tracking integrations.
Data residency
Template data is stored on our backend, hosted with DigitalOcean in EU data centres in Frankfurt, Germany. Keeping data in the EU supports the data-protection expectations of EU customers.
Encryption
All traffic between Jira Cloud, the Forge runtime, and our backend is encrypted with industry-standard TLS. Cloudflare sits in front of the marketing site at jira-templates.com for an additional layer during browser interactions.
GDPR
We are GDPR-aware and respect data-subject requests. To access or erase the template data we hold, send a request through the support portal and we will action it on our backend. Uninstalling the app revokes its access to your Jira site.
Vulnerability management
We run periodic security reviews of the app, apply security patches promptly, and follow Atlassian’s mandatory security disclosure requirements for Cloud Fortified vendors.
Questions
If you have a security or privacy question that is not covered above, open a ticket on the support portal. We answer privacy questions within one business day.
Ready to template your Jira?
Install Process Templates for Jira on the Atlassian Marketplace. Free up to 10 users.