🎉 Broken Build achieves SOC 2 Type 2 Compliance: reinforcing trust and security

[#1]

Hey Atlassian Community! 👋

We're thrilled to announce a major milestone in our security journey: Broken Build has completed the SOC 2® Type 2 examination. This achievement represents our ongoing commitment to protecting your data and maintaining the highest standards of security, availability, and confidentiality.

What is SOC 2 Type 2?

SOC 2 (System and Organization Controls) is an independent examination that evaluates service organizations on their security controls and operational effectiveness. Unlike a simple point-in-time assessment, Type 2 reports provide reasonable assurance over an extended period, demonstrating that our controls aren't only designed well but also work consistently and effectively.

The examination focuses on three key trust service criteria:

• Security – Protection against unauthorized access

• Availability – System accessibility and functionality

• Confidentiality – Protection of sensitive information

Our SOC 2 Type 2 report confirms that Broken Build's systems and controls have been thoroughly tested and verified by an independent auditor throughout the examination period.

What this means for you

This compliance milestone delivers tangible benefits to our users:

✅ Enhanced data protection – Rigorously tested security controls safeguard your project data
✅ Operational reliability – Proven consistency in maintaining system availability and performance
✅ Vendor risk management – Simplified compliance requirements for your organization
✅ Transparent accountability – Independent verification of our security practices

Our broader security commitment

SOC 2 Type 2 is just one component of our comprehensive security framework. We're also proud to maintain:

🔒 Bug Bounty Program
We partner with security researchers to identify and address potential vulnerabilities before they can impact your data. This proactive approach helps us stay ahead of emerging threats.

☁️ Cloud Fortified
Our apps meet Atlassian's rigorous Cloud security requirements, ensuring seamless integration with your Atlassian ecosystem while maintaining enterprise-grade security standards.

🧩 Runs on Atlassian (Forge platform)

Our apps are Forge-based and run directly on Atlassian’s secure cloud infrastructure.
This architecture ensures data isolation, compliance, and reliability while reducing dependency on external hosting.

Transparency you can trust

Security isn't just about achieving compliance - it's about ongoing transparency and accountability. That's why we've made our security information easily accessible:

🔗 Visit our Trust Center
Explore our security documentation, compliance reports, and privacy policies in one centralized location.

📬 Have questions? Reach out to our Support team
Our team is ready to address any security-related questions or concerns.

This compliance milestone extends across our entire portfolio of Agile apps for Jira:

🔹 Individual Apps:

• Agile Velocity Charts

• Agile Cycle Time Charts

• Agile Burnup Burndown Charts

📦 Complete Solution:

• Agile Reports & Gadgets (Bundle) – Access all capabilities in one comprehensive package

Your trust drives everything we do. Achieving SOC 2 Type 2 compliance reinforces our dedication to protecting your data and maintaining the secure, reliable service you depend on. As we continue to innovate and expand our offerings, security remains at the core of every decision we make.

Thank you for being part of our journey!

Best regards,
The Broken Build Team