Data Security and Privacy Statement

Jira data residency and privacy overview

This statement applies to Risk Register for Jira Server and Risk Register for Jira Cloud. It does not cover the ProjectBalm website or ProjectBalm Support website.

What data is stored?

Risk Register for Jira Server does not transfer your data from the machine that hosts Jira Server. All data remains in the database management system configured for Jira Server.

Risk Register for Jira Cloud stores the following Jira site and app configuration information on ProjectBalm systems:

  • Jira Cloud instance identifier

  • Jira Cloud base URL

  • Support Entitlement Number (SEN)

  • Jira Cloud version

  • Atlassian app framework version

  • OAuth 2.0 client ID for Risk Register

  • Risk Register app status

  • Risk model definitions, including model element names, IDs and descriptions

  • Project-specific configuration, including project ID, risk issue type ID and risk register name

Customer risk data remains in Jira

ProjectBalm does not store risk issue keys, risk names, risk details, impact values, probability values or risk assessments. This information remains in the customer’s Jira Cloud instance.

For troubleshooting, Risk Register for Jira Cloud stores technical logs for up to 30 days.

Where is the data stored?

Data stored by ProjectBalm is hosted on a secure server in Frankfurt, Germany. The ProjectBalm database is not exposed directly to the internet and is located in a network-isolated environment accessible only to the Risk Register application and authorised administrators.

People and access

Only authorised ProjectBalm staff can access logs and database-stored configuration data.

Backups

ProjectBalm regularly backs up data stored by Risk Register for Jira Cloud. Backup protections are at least as comprehensive as the protections applied to the live database.

Privacy

ProjectBalm stores data only as a direct consequence of operating the Risk Register for Jira Cloud app and only for that purpose. ProjectBalm will not sell or release that data to anyone, except where disclosure is required by law.

Service exit

When a customer uninstalls Risk Register for Jira Cloud, ProjectBalm automatically sanitises its computing resources of tenant data.

Search