Security

How Customer Roster for Jira Service Management keeps your site and your customers’ data safe.

Runs on Atlassian

The app is built on Forge, Atlassian's app platform. It runs inside Atlassian's cloud, has no servers of its own, and sends no data outside Atlassian. Its data lives only in the app's Forge storage for your site.

Least access

The app asks Jira only for what it needs: manage customers and organizations, read Jira groups and users, read requests and add participants, read and write customer and organization detail values, and its own storage. It never edits requests' content, and it can't change permissions or delete accounts. Each permission and why it's needed is listed in the Marketplace listing's Privacy & Security tab.

Who does what

• Only Jira admins can open the admin page. Project admins can use it for their own project only, and only if a Jira admin turns that on.
• The app checks who is asking on every request, using Atlassian's own sign-in, and checks their Jira admin or project admin rights. It never trusts a user id sent from the page.
• Customer accounts are created with the permissions of the Jira admin who started the import, because Jira only lets a Jira admin create customers. The app records which admin that was. Everything else the app does as itself, only carrying out what an admin saved.
• Every import, rule change, sync, undo, clean-up, pause and settings change is written to the activity log with who did it and when.

Safe by design

• Silent by default: no customer is emailed unless an admin chose it, saw the count and confirmed.
• The app keeps an exact record of the members, project links and participants it added, and syncs only ever remove those.
• A domain on two organizations is a conflict, never a guess; public email domains such as gmail.com are refused unless a Jira admin turns that check off for one rule by typing the domain; the wrong-organization report flags customers who may see the wrong shared requests.
• Dry runs, previews, typed confirmations for anything that can't be undone, pause and undo stop mistakes from spreading.
• CSV files are checked row by row, kept only while the import needs them, and exports are made safe against spreadsheet formulas.
• Logs record ids and counts, never names or email addresses.
• No account deletion and no email-address changes, anywhere in the app.

Data

Stored only in Atlassian's Forge storage. Atlassian deletes it after you uninstall (it can be reconnected for 21 days by reinstalling). See Privacy.

Report a security issue

Email hello@goldstandardweb.com with "Security" in the subject. We treat security reports as critical and reply within 24 hours.