Security

Last Updated: October 29, 2026

This document applies to Planyway for Jira Data Center. For other Planyway products, see Security.

This statement describes how Planyway («we», «us», “Rsoftware”) approaches security in Planyway for Jira Data Center.

Architecture

Planyway for Jira Data Center runs inside your organization’s Jira Data Center. Jira project and issue content and the app data are stored in your infrastructure and protected by your organization’s security controls. Jira project and issue content is not transmitted to Planyway.

Data shared with Planyway

Usage and diagnostic data is sent to Planyway only if your Jira system administrator enabled “Share usage and diagnostic data”. Jira project and issue content is not transmitted. Identifiers, tokens, secrets, and other potentially sensitive values that may occur in diagnostic telemetry are masked or removed before the telemetry leaves the app. Details are in Planyway and GDPR.

The security measures below apply to data shared with Planyway.

Data Encryption

Data is encrypted in transit using TLS 1.2 or higher. Data stored by our service providers is encrypted at rest.

Operational Management

Access to Planyway production resources and diagnostic data is limited to lead developers, DevOps and security engineers.

Disclosure

Planyway maintains a policy of full event disclosure for security incidents that affect user data. In the event of a security incident affecting data shared with us, we will notify you.

Engagement

If you find a security issue with our Service, please contact us at support@planyway.com.

Changes

We may update this Security Statement as we make security improvements. We encourage you to periodically review this page.