Agile Cards is built with safety and security in mind. Here are a few facts which will help you understand its architecture and that using Agile Cards should no impact on your security whatsoever.
...
Template settings
Agile Cards stores only the data related to the templates configured for its usage:
- names of the templates
- user key of the last person that has modified the template,
- user key of a template owner,
- template settings configurable through the Agile Cards interface
...
The code of Agile Cards is downloaded from Atlassian Marketplace directly to Jira and is never served from any third party servers. This means that all the fundamental safety mechanisms applied by Atlassian to your Jira code and data are also applied to Agile Cards code and data. All the configuration data of Agile Cards is stored on Jira and never leaves it.
Agile Cards for Jira Cloud
Agile Cards Cloud server is hosted on Amazon Web Services (AWS). All the configuration data is also stored in AWS. We stick to the following security guidelines while working with Cloud infrastructure:
- All external incoming or outgoing connections (or connection that go via public network) are made using secure protocol (for example: https,ssh).
If secure protocol cannot be used the sensitive content must be protected by other means. - Every connection, that is crossing network border(external or internal), is protected by at least one security measure (certificate, token, etc).
- No security measure can be used to cross multiple network borders.
For example, if we protect connections to Cloud internal external network using Certificate A, then it cannot be used to protect connections to Spartez Cloud internal network.
How does Agile Cards synchronization work?
Agile Cards synchronization algorithm is written in JavaScript. This means that the photo is processed entirely within the browser, and no part of the photo is sent outside of the device you have used to access the Agile Cards. In particular, no part of the photo is processed on your Jira server and no data about the content of the photo is ever sent over to Spartez server.
...