Advancedwspace

Data and Security

2 min read

At Advanced Workspace, earning and keeping your trust is our top priority. Advanced Filters & Gadgets is built on Atlassian’s Forge developer platform, so your data is handled to the same standards of security and compliance as Atlassian’s own products.

By building on Atlassian’s SOC 2 aligned infrastructure, we ensure your data is encrypted, access-controlled, monitored and backed up according to industry best practice. This page sets out our approach to security, residency and compliance.

Built on Atlassian #

Forge is Atlassian’s cloud app development platform. Apps run on infrastructure that Atlassian provisions, manages, monitors and scales — not on servers of ours.

Advanced Filters & Gadgets carries the Runs on Atlassian badge. That means:

  1. The app uses Atlassian-hosted compute and storage exclusively.
  2. It supports data residency matching the residency of the host Atlassian product.
  3. You are in control of data egress, such as analytics and logs, and can block it entirely at any time.

More on the program: Runs on Atlassian.

What the app stores, and what it doesn’t #

i
No work item data is ever copied out of Jira. Advanced Filters & Gadgets stores only the reporting configuration you build — filter definitions, controls, metrics, views and queues. Every work item shown in a gadget is read live from Jira, in the viewer’s own browser, using their own Jira session.

Two consequences worth understanding:

  • Jira’s permissions are never widened. A filter you may not use in Jira returns nothing here either, and each viewer only ever sees the work items Jira already lets them see.
  • There is nothing to keep in sync. Because nothing is copied, nothing can go stale or leak through a cached snapshot.

The app holds read access to Jira work and users, plus its own app storage. It has no write access to Jira — it cannot create, edit or transition a work item, and it cannot change a Jira filter’s query or its sharing.

Data residency #

Advanced Filters & Gadgets is hosted on Atlassian infrastructure, with its data stored there, and supports data residency in the same regions as the host product. Forge handles hosting, pinning and migration between supported locations.

  • Install the app on an Atlassian product pinned to a location, and the app is automatically located there too.
  • Migrate that product’s data to a different location, and the app’s data migrates with it.

More on the topic: Forge data residency.

Forge and SOC 2 compliance #

Building on Forge means customers benefit from Atlassian’s SOC 2 controls and compliance posture.

Data security and availability #

  • Data stored in Forge app storage is encrypted at rest using AES-256 (SOC 2 — CC 6.1).
  • All data stored by Atlassian on behalf of apps is backed up and can be restored in the event of an incident (SOC 2 — CC 5.3, A 1.1).

Vulnerability management #

  • The Forge platform infrastructure is hardened to provide a secure runtime for apps, preventing the bypassing of security controls (SOC 2 — CC 6.6).
  • Regular scanning identifies and remediates security misconfiguration vulnerabilities (SOC 2 — CC 7.1).

Access control #

  • Access to Forge system components and related storage is strictly limited to authorized users (SOC 2 — CC 6.1–6.3).
  • Strong password policies and authentication configurations are enforced for all access points (SOC 2 — CC 6.1–6.3).

Physical security #

  • Forge leverages cloud service providers with rigorous physical protections, controlled facility access and redundancy measures (SOC 2 — CC 6.4, CC 6.5).

Network security #

  • Data in transit is encrypted using TLS 1.2 or higher (SOC 2 — CC 6.7).
  • Network configurations permit only authorized connections to Forge system components (SOC 2 — CC 6.6).

Monitoring and alerting #

  • The platform is continuously monitored to detect degraded performance, security incidents or abuse events, with alerts raised for prompt action (SOC 2 — CC 7.2, A 1.1).

Your data, under your control #

Jira administrators can export a full configuration backup at any time, restore from one, or permanently delete everything the app stores — see Back up, restore and delete app data. Uninstalling the app removes its data from your site.

Questions #

You can explore our Trust Center for more on our security practices, compliance certifications, subprocessors and ongoing commitment to transparency.

For security questionnaires, compliance documentation or anything not covered here, contact us at our help center or support@advancedwspace.com.

Table Of Contents