eazyBI for Jira Cloud Security Statement

eazyBI for Jira

Overview

eazyBI for Jira Cloud uses the eazyBI hosted service (eazybi.com) to store imported Jira data and render eazyBI reports. eazyBI hosted service is provided by company eazyBI SIA.

Each eazyBI account's imported data are stored in a separate database schema and are isolated from other customer data. Each incoming web request is authenticated and authorized before access to customer data is allowed.

eazyBI is hosted on Google Cloud Platform. eazyBI is responsible for provisioning, monitoring, and managing the virtual servers, and for providing support to eazyBI for Jira Cloud subscribers.

eazyBI information security practices, policies, procedures, and operations meet the SOC 2 standards for security. Our SOC 2 covers all five Trust Service Principles: security, availability, processing integrity, confidentiality, and privacy. The Data Processing Agreement describes how we process and protect your data.

Data Storage and Facilities

The eazyBI hosted service uses Google Cloud Platform for data storage. By default, eazyBI uses the Google Cloud Platform europe-west1 data center in Belgium. Customers can request storing of imported Jira data in a different available data residency region.

Stored Jira data

eazyBI for Jira Cloud uses Jira issues search REST API to import issue data from selected projects. eazyBI stores in its own database just the dimension and measure data which are visible in the Analyze tab's Issue cube – issue key, issue summary, project, component, issue type, status, priority, resolution, fix and affects versions, reporter, assignee, label, security level, issue created, due and resolved dates, original and remaining estimated hours, hours logged by user. In addition, selected custom fields and issue status transitions history (if selected in import options) are stored. eazyBI does not store detailed issue descriptions, comments, and attachments.

Usage of User Email Addresses

eazyBI for Jira Cloud uses user email addresses for sending transactional emails in the following cases:

• When source data import into eazyBI fails with an error. The eazyBI account owner and the source data import creator will receive an email notification about this error and a link to the corresponding source data page.
• When a user has created a dashboard email subscription, then emails with the dashboard as a PDF attachment will be sent according to the specified schedule.

People and Access

eazyBI support team accesses application data only for purposes of application health monitoring and performing system or application maintenance, and upon customer request for support purposes. Only authorized eazyBI employees have access to application data.

eazyBI users are authenticated using Atlassian Connect JWT authentication. eazyBI will get Jira Cloud's current user information, which will be used for access control. Customers are responsible for maintaining the security of their own Jira Cloud login information.

Backups

eazyBI application database full backups are performed once per day and are retained for ten days. All backup data are encrypted. Backups are stored in the same Google Cloud Platform region as the stored data.

Privacy

For more information, please see our Privacy Policy.

Effective as of December 29, 2023.