eazyBI for Confluence Cloud Security Statement

eazyBI for Confluence

Overview

eazyBI for Confluence Cloud uses the eazyBI hosted service (eazybi.com) to store imported Confluence data and render eazyBI reports. The eazyBI hosted service is provided by the company eazyBI SIA.

Each eazyBI account's imported data are stored in a separate database schema and are isolated from other customer data. Each incoming web request is authenticated and authorized before access to customer data is allowed.

eazyBI is hosted on Google Cloud Platform. eazyBI is responsible for provisioning, monitoring, and managing the virtual servers, and for providing support to eazyBI for Confluence Cloud subscribers.

eazyBI information security practices, policies, procedures, and operations meet the SOC 2 standards for security. Our SOC 2 covers all five Trust Service Principles: security, availability, processing integrity, confidentiality, and privacy. The Data Processing Agreement describes how we process and protect your data.

Data Storage and Facilities

The eazyBI hosted service uses Google Cloud Platform for data storage. By default, eazyBI uses the Google Cloud Platform europe-west1 data center in Belgium. Customers can request storing of imported Confluence data in a different available data residency region.

Stored Confluence data

eazyBI for Confluence Cloud uses Confluence content search REST API to import data from selected spaces, as well as store page view event webhooks in selected spaces and search performed event webhooks. eazyBI stores in its own database just the dimension and measure data which are visible in the Analyze tab's Confluence cube – page title, type, labels, creator, creation and update dates, page views by viewers, search queries. eazyBI does not store detailed page content, comments, and attachments.

Usage of User Email Addresses

eazyBI for Confluence Cloud uses user email addresses for sending transactional emails in the following cases:

• When source data import into eazyBI fails with an error. The eazyBI account owner and the source data import creator will receive an email notification about this error and a link to the corresponding source data page.
• When a user has created a dashboard email subscription, then emails with the dashboard as a PDF attachment will be sent according to the specified schedule.

People and Access

eazyBI support team accesses application data only for purposes of application health monitoring and performing system or application maintenance, and upon customer request for support purposes. Only authorized eazyBI employees have access to application data.

eazyBI users are authenticated using Atlassian Connect JWT authentication. eazyBI will get Confluence Cloud's current user information, which will be used for access control. Customers are responsible for maintaining the security of their own Confluence Cloud login information.

Backups

eazyBI application database full backups are performed once per day and are retained for ten days. All backup data are encrypted. Backups are stored in the same Google Cloud Platform region as the stored data.

Privacy

For more information, please see our Privacy Policy.

Effective as of December 29, 2023.