Certifications

	Cloud Fortified The Cloud Fortified Apps Program aims to serve our largest customers and those with more business-critical operating requirements for apps. How it works - Cloud Fortified Apps: Stay Safe with SaaSJet What Atlassian Developer says - read more

	Marketplace Security Bug Bounty Program A bug bounty program is one of the most powerful post-production tools to help detect vulnerabilities in applications and services. What Atlassian Developer says - read more

	Security Assessments The term “security assessment” refers to any activity intended to determine, evaluate, or test the security features and controls of Atlassian’s products and services. What Atlassian Help says - read more

	SaaSJet is a Platinum Marketplace Partner What does “Platinum partner” mean? According to annual gross sales ("Purchase Price" in Marketplace reports), a minimum $1M annual gross sales comprised a minimum of 35% from the cloud. How we became a Premium partner - our history of success What Atlassian Developer says - read more

Security

	System and Organization Controls - SOC 2 SOC 2 reports are independent third-party examination reports demonstrating how an organization achieves key compliance controls and objectives. What Atlassian says about Trust Service Criteria (TSC) - read more SaaSJet is SOC 2 Type 2 compliant - read more

	CAIQ-Lite CAIQ Lite is a simplified version of the Consensus Assessments Initiative Questionnaire (CAIQ), which is designed to assess the security posture of cloud service providers. Atlassian requires all Platinum, Gold, and Silver Marketplace Partners to complete the CAIQ-Lite questionnaire, which it then reviews. What Atlassian says about the security of the cloud ecosystem - read more

	Security Contact If at any time you have concerns or are uncertain whether your security research is consistent with this policy, please contact us at security@saasjet.com

Support

	Working hours: Mon-Fri 24hrs GMT+3 Phone: +1 888 396 0501 Book a demo session: click to schedule an online free demo Support portal: click to create a ticket Help: Read the documentation

We understand that data security is of utmost importance to our users. The information below outlines the types of data stored by Smart Jira Forms, associated security measures, and storage periods, addressing your data privacy concerns.

Data storage

• Data Stored in our MongoDB Database

  • Form Templates: We store the structure of your created form templates. This includes field names, types, and configuration settings.

  • Non-Task-Bound Form Submissions: If you use the "Share a form from the add-on page" feature, submission data not directly linked to a Jira task is stored.

  • User ID: We associate a unique User ID with form submissions and drafts to facilitate tracking and management within our system.

• Data Stored within Jira

  • Task-Related Submissions and Drafts: When you directly submit forms to Jira tasks, form data, and drafts are stored within the Jira system.

Data Retention Period

• Add-on Information: (Text, Atlassian ID) Stored until you or an authorized user deletes it.

• Deactivated/Terminated Accounts: Data remains accessible for team members/users until no longer needed.

• Uninstalled App: By standard data is stored for 90 days to allow renewal. After that, your form data is automatically deleted.

  • Uninstall with Early Removal: Contact support@saasjet.com to request deletion before 90 days.

Data Security

Data is secured by:

• Encryption: Protecting your data in transit and storage.

• Strict Access Controls: Limiting database access to authorized personnel only.

• System Updates and Monitoring: Keeping everything up-to-date and watchful for any issues.

Add-on internal restrictions

Smart Jira Forms allows to limit access to form content and settings editing, as well as viewing and downloading responses in the issue where the form was added, in the new issue that the form created, and of course in the add-on Response tab. However, those restricted users can still add a form to an issue and fill it out. If a user lacks access to the form, it appears disabled for them, but they can still see its name. Read more about this feature.

Changes to Policy

Any significant changes that occur in our data security and retention practices will be communicated on our website.

Read about the SaaSJet Privacy Policy ->