Encryption options

[Meta System S.p.A.]

we would like to understand what options exist for cryptography on Jira to encrypt sensitive data on issues and related attachments.

Thanks and best regards,

Maurizio

[Andy Heinzer]

Natively, Jira is not able to encrypt data such as issues/attachments.   Jira does have the ability for you to use issue-level security in order to further restrict users from seeing specific issues and their attachments beyond the scope that the standard permission schemes encompass on a per project basis.  But this isn't truly encryption, but rather an addition layer of permissions.

If that avenue is not what you are looking for, then I would recommend searching on our Atlassian Marketplace for Jira apps in relation to encryption.

I hope this helps.

Regards,
Andy

[Metin Savignano]

See my answer below (originally answered here, but wrong place).

[lauren]

Hi @Meta System S.p.A. ,

I just wanted to provide an update here. 

Customer data is encrypted in transit and at rest in Atlassian cloud products.

All customer data stored within Atlassian cloud products and services is encrypted in transit over public networks using Transport Layer Security (TLS) 1.2+ with Perfect Forward Secrecy (PFS) to protect it from unauthorized disclosure or modification.

Data drives on servers holding customer data and attachments in Jira Software Cloud, Jira Service Desk Cloud, Jira Core Cloud, Confluence Cloud, Statuspage, OpsGenie, and Trello use full disk, industry-standard AES-256 encryption at rest. To learn more, please see our Security Practices page.

We post updates related to security, privacy, compliance, and more in our Trust & Security group. Feel free to post related questions and feedback there! 

Best,

Lauren

[Metin Savignano]

What type of encryption are you exactly looking for? 

• Web communications encryption is supported via HTTPS
• Email encryption (for infos sent via notifications) is not supported in plain Jira, but this add-on adds support for S/MIME and PGP encryption.
• Encryption of data at rest (stored in the database) is available through additional add-ons

It also depends on which edition you use - server or cloud. In the cloud version, the options for adding low-level features like these are very limited for add-ons.

[Nigel Rochford]

We have just published an app that enables encryption of data in bulk across Jira issues. Check it out here! https://marketplace.atlassian.com/apps/1219237/zorro-anonymizer?hosting=server&tab=overview