How does JIRA store Customer's Customer information ( PII in particular ) ?

[saurabhkl123]

How does JIRA store Customer's Customer information ?  Meaning that an Enterprise would have lot of customers and when they raise tickets and it get stored in JIRA service desk.. Then the PII information of there customers such as Firstname/Lastname/email/phone numbers etc.. also gets stored.   What are the process / compliance and bet security certifications involved ?

[Earl McCutcheon]

Hello,

For Specific security Certification  you'll need to evaluate it carefully with a view to your intended use within the desired certifications.  This ultimately meaning set up a test instance and perform an audit.

Focusing on the user permissions aspects of service desk, the articles linked below contain the primary user data availability of a customer account and internal user data visibility, for a comparison of Jira's capabilities for your desired compliance:

• Managing access to your service desk
• Setting up service desk users

Additionally there are add-ons designed specifically to hide PII information for increased sensitivity, PII Protector for Jira is one that I am aware of that might do the trick for you.

Regards,
Earl

[saurabhkl123]

Thanks But "PII Protector for JIRA" is not for cloud instance (SaaS) of Atlassian ?

Is there any such equivalent tool for PII Protection ?

[Earl McCutcheon]

Hello,

Thanks for the update and as this applies to cloud, check out the information at https://www.atlassian.com/legal & https://www.atlassian.com/trust

Regards,
Earl