3rd-party plugin and protection our privacy data

[Oleksandr Kram]

Hello.

We use Jira Software (Cloud).

We want to use plugin to integrate our repository server with jira:

https://marketplace.atlassian.com/apps/1220080/smart-git-integration-for-jira%3Fhosting=cloud&tab=overview?tab=overview&hosting=cloud

https://marketplace.atlassian.com/apps/1224213/gitea-integration-for-jira?hosting=cloud&tab=reviews

We faced that plugin try to connect to our server from not Atlassian ip address.

Is it safe to allow make copy our data to 3rd-party servers?

How we could make sure about protection our privacy data?

[marc -Collabello--Phase Locked- · Accepted solution]

Hi @Oleksandr Kram , each plugin on the Atlassian Marketplace has their own terms of service and privacy policy.  These policies are set by the plugin vendor.

Also most plugins are hosted outside of Atlassian infrastructure and thus will have separate IP addresses.

One indication of how vendors handle security issues is to look if they are "Cloud Security Participant".