Add-ons Security Statement

Ugubi apps are available for Jira Data Center, for Jira Cloud as Atlassian Connect apps, and for Jira Cloud on Atlassian Forge. How your data is handled depends on which version you use.

Forge apps (Jira Cloud)

• Forge apps run entirely on Atlassian's Forge platform, inside Atlassian's cloud infrastructure.
• They do not store personal data and do not send any data to Ugubi servers or to third parties.
• App settings, if any, are kept in Atlassian Forge storage on your own site and contain no personal data.
• Ugubi staff have no access to your site's content.

Connect apps (Jira Cloud)

• We store the bare minimum needed for the app to work: the Atlassian Connect app registration entry and its secure registration token. Nothing else is persisted.
• Ugubi software does not store any customer data.
• Every incoming request is authenticated and authorized before it can reach our servers or the app, using Atlassian Connect authentication.
• Backups contain only Atlassian Connect app registration information, never customer data. All backup data is encrypted.

Data Center apps

• Data Center apps are installed and run inside your own Jira instance, on infrastructure that you control.
• Your Jira data stays on your servers. Ugubi does not host, store or have access to it.
• Security of the instance, including access, updates and backups, is managed by your organization.

People and access

For Connect apps, the Ugubi support team accesses server data only for application health monitoring, system or application maintenance, and on customer request for support purposes. Only authorized Ugubi employees have access to server data.

Customers are responsible for maintaining the security of their own Atlassian login information.

Questions and security reports

For security questions, or to report a potential vulnerability, please raise a request in our support portal. See also our Privacy Policy.