Legal
Security – Custom Field Cleanup & Where-Used for Jira
The app is built on Atlassian Forge and carries Atlassian’s “Runs on Atlassian” status. Its code runs on Atlassian’s infrastructure, and its data is stored only in Atlassian’s Forge SQL for your site. The app has no servers of its own and sends no data outside Atlassian.
- Access: only Jira administrators can open the app. Moving fields to the trash, and restoring them, runs with the permissions of the admin who confirms it, and is recorded in the app’s audit log.
- Authentication: handled entirely by Atlassian. The app holds no passwords, API tokens or other secrets.
- Data: stored in Atlassian-hosted Forge storage, encrypted and backed up by Atlassian, and held in your Jira site’s data-residency location. See our privacy notice for what is stored and logged.
- Logs: kept by Atlassian for 30 days. Your admins can turn off our access to them in Atlassian Administration.
- Our side: Neirfeno Limited is a one-person company. Access to our Atlassian developer account is limited to our director and protected with two-step verification.
- Incidents: we tell Atlassian within 48 hours of finding a security incident, and affected customers without undue delay.
- Report a vulnerability: contact@neirfeno.com.
- We hold no SOC 2 or ISO 27001 certification.