Overview
Gifted Foxes provides application for Atlassian Cloud Products which are based off the Atlassian Forge platform, which is an Atlassian hosted service.
Our cloud applications may store customer data in the corresponding Atlassian Cloud Product necessary to perform requested functionality, any customer data stored temporarily is removed as soon as it is no longer necessary.
We do not store or extract any customer data outside of the Atlassian Cloud ecosystem, apart from information necessary for us to sell to, or support your use of our products.
You should be aware of the Atlassian Cloud Product Security Statement.
Facilities
GIfted Foxes applications are hosted by Atlassian on Atlassian Infrastructure, which Atlassian manage the security of that infrastructure. Our applications do not currently store any user data separately from the Atlassian application, or on other infrastructure.
Atlassian’s Forge is a platform that lets developers build applications and integrations for a selection of Atlassian’s Cloud products, including Jira and Confluence. When we build a Forge application, Atlassian takes care of the infrastructure, including security considerations.
We also utilise Atlassian’s Cloud SaaS applications including Jira, Confluence and Bitbucket which we use to develop and support our applications.
Certification
Atlassian’s own certifications should be considered, which are found in the Atlassian Cloud Product Security Statement.
Gifted Foxes will work with Atlassian to be certified as a Cloud Security Compliant vendor with Atlassian.
You can learn more about Atlassian’s Marketplace Apps Trust programs.
People and Access
GIfted Foxes adopts the least-priviledge concept along with requiring multi-factor authentication where it is available.
Gifted Foxes provides access for a limited number of vetted and trusted team members to the production environments for the purposes of maintaining our cloud applications and assisting our customers.
We strongly believe in the shared responsibility model, whereby Customers are responsible for maintaining the security of their own login information or other security details or sensitive information.
Data Storage
Our applications do not store customer data outside the Atlassian Could, within their corresponding Atlassian Cloud Product.
Gifted Foxes may store information about you as a client, which includes information necessary for us to sell to, or support your use of our products.
Please refer to our Privacy Policy for further details.
Data Retention
Gifted Foxes develops solutions with the Forge platform which uses Atlassian’s Functions-As-A-Service (FaaS) model, which ensures that client data remains in client instances and does not need to be handled outside of their Atlassian cloud tenancy or system boundary.
Client data handled by us for the purposes of delivering our services is described in our Privacy Policy.
Backup data may be stored for up to 3 years on a Gifted Foxes owned Amazon Web Services account, or on a Gifted Foxes owned Google account.
Backups
We recommend our clients familiarise themselves with the Atlassian Cloud Security Shared Responsibilities model for resilience, and work with them to find best practise approaches to backing up and managing their instance data, within their own environments.
Gifted Foxes keeps multiple cloud backups of customer data related to sales and support for up to 3 years as described in the Data Retention section of this document.
Security Incident Policy
Gifted Foxes takes every care to protect customer data from incidents (either accidentally or deliberately) to avoid a data protection breach that could compromise security. For more information, please contact us for our Security Incident Policy via our Support team.
Security bug fix policy
Bug Severity – Critical
SLA – Within 10 business days of being reported
Bug Severity – High
SLA – Within 3 weeks of being reported
Bug Severity – Medium
SLA – Within 6 weeks of being reported
Privacy
Gifted Foxes is a pro-privacy company. We aim to store as little personal data as possible and will not give away your personal information. That being said, there is still some data we need to collect in order to provide our services.
Please see our Privacy Policy for more information.