Security

Introduction

The PassMan Enterprise App is designed to integrate the PassMan standalone password management system with Jira, enabling seamless access to and visualization of certain password vault features within the Jira environment. The app primarily provides an interface from which users can launch the password manager (PassMan) and view e.g. frequently used websites through embedded iframe windows within Jira. Users can find additional details on the functionality and data handling policies of the PassMan standalone password management solution on the official PassMan website.

Functionality in Jira

In addition to launching the standalone password vault, the connector app enables users to securely insert login credentials stored in PassMan into Jira issues and Confluence pages without revealing sensitive information. These links grant login access to the designated systems without the need to manually input passwords. The browser extension facilitates direct login through these secure links. More information about the extension’s privacy and security is available on the respective browser Web Store's Privacy & Security page.

End-User Data Processing, Storage, and Data Residency

The PassMan Enterprise App does not process, store, or host end-user data independently. All user data, including credentials and usage data, remains within the standalone PassMan system. As a result, no data residency requirements are applicable to the app itself, and data related to the app is not stored or processed by any third-party systems or within Jira’s infrastructure.

Compliance with Privacy Laws

Since the connector app does not process, manage, or retain user data, Company/Organization does not act as a ‘data controller’ or ‘data processor’ under the General Data Protection Regulation (GDPR) for this app. Additionally, Company/Organization is neither a ‘business’ nor a ‘service provider’ under the California Consumer Privacy Act of 2018 (CCPA) concerning this application.

Security and Privacy for Embedded Features

For users concerned about security related to features embedded within Jira (such as iframe views of frequently accessed websites), the connector app only functions as an interface and does not collect or process any data accessed or displayed in these embedded windows. The app does not interact with or store any authentication or browsing data for sites accessed through this feature.

Access to Customer Data

Since all data access is strictly contained within the PassMan standalone vault (and browser extension), Company/Organization personnel do not have access to any customer data managed through this app. Additionally, any application logs generated by the app remain anonymous, ensuring no identifiable information is captured, stored, or accessible by Company/Organization.

Issue Detection

Production issues are typically discovered through monitoring and support tickets, allowing us to address any problems promptly and efficiently. We ensure that all customer data and operational environments are secure and functional at all times.

Additional Information

For further details regarding PassMan’s data handling policies and general privacy practices, users can visit the PassMan official website.