Security

Last Updated: October 29, 2026

This document applies to Planyway for Jira Cloud. For other Planyway products, see Security.

Your trust is our most important asset. This statement describes how Planyway («we», «us», “Rsoftware”) protects data in Planyway for Jira Cloud.

Architecture

Planyway for Jira Cloud is built on the Atlassian Forge platform. The app runs in the Atlassian infrastructure. Jira data and the app data are stored in Jira and in the Forge storage and are protected by Atlassian security controls: https://www.atlassian.com/trust/security. Jira project and issue content is not copied to Planyway servers.

The app accesses Jira only through Atlassian APIs within the permissions (scopes) approved by your Jira site administrator during installation.

Data Collection

Our overriding policy is to collect as little information as possible. Planyway receives usage and diagnostic data, limited user and account information, and information you choose to submit through surveys, feedback, newsletters, and support. Jira content, tokens and secrets are masked before usage and diagnostic data leaves the app. Details are in Planyway and GDPR.

Data Encryption

All data is encrypted in transit using TLS 1.2 or higher. Data stored by our service providers is encrypted at rest.

User Authentication

Users authenticate with their Atlassian account. Planyway does not store user names or passwords.

Operational Management

Access to Planyway production resources and diagnostic data is limited to lead developers, DevOps and security engineers.

Disclosure

Planyway maintains a policy of full event disclosure for security incidents that affect user data. In the event of a security incident affecting your data, we will notify you.

Engagement

If you find a security issue with our Service, please contact us at support@planyway.com.

Changes

We may update this Security Statement as we make security improvements. We encourage you to periodically review this page.