Our apps* are created for Atlassian products and help our users and customers to automate or manage their tasks easier. Software (an app for Atlassian Confluence software is developed and maintained by Vertuna LLC).
|ConfiTemplates||We use Confluence REST APIs with READ and ACT_AS_USER scopes to render the contents of Confluence pages according to given configuration. Configuration is stored on Confluence server this software (add-on) is used|
|ConfiForms||ConfiForms needs the following app scopes: "READ", "WRITE", "DELETE", "ACT_AS_USER" (so, we can create and delete pages on behalf of the user in case if ConfiForms is setup to create pages)|
|HTML Include||HTML Include for Confluence needs the following scopes: "READ", "ACT_AS_USER". App does not change any data in your instance|
|AssetForms for Jira||We need to have the following scopes "READ", "WRITE", "DELETE", "ACT_AS_USER" (this is to verify your permissions)|
All communications are SSL secured (including to the database, when hosted in Digital Ocean, see below).
ConfiTemplates app is hosted on https://www.digitalocean.com/. Servers are located in NYC, USA. Access to the Vertuna servers and data is strictly limited only to Vertuna support team. Our support team periodically inspects servers and data stored to troubleshoot issues and monitor application performance.
ConfiForms app is hosted on https://www.digitalocean.com/. Servers are located in NYC, USA
HTML include for Confluence cloud is hosted on https://www.digitalocean.com/. Servers are located in NYC, USA
AssetForms for Jira cloud is hosted on https://www.digitalocean.com/. Servers are located in NYC, USA
We back up all data at least once every day and keep them for 30 days. Backups are stored on Digital Ocean servers in NYC (NYC1 region, USA). Daily backups for the database clusters are performed
We are part the Marketplace Bug Bounty Program (https://www.atlassian.com/licensing/marketplace#what-is-the-marketplace-bug-bounty-program)
Working on getting CAIQ Lite. https://cloudsecurityalliance.org/artifacts/caiq-lite/
Self assessments as per https://developer.atlassian.com/platform/marketplace/security-self-assessment-program/
Data collected (logs) during the use of any of our apps will not be shared with third parties except as required by the law. When you uninstall the add-on, all of the data you provided to us will be immediately removed (logs have a retention policy of 1 month, forms data has retention policy of 1 month).
Effective as of March 17, 2017.