Data protection

Owned by Nigel Rochford
Last updated: Aug 22, 2023 by Victor Lee
2 min read

Crumbs is an Atlassian Connect app for Jira Cloud. 

Atlassian Connect is a framework for building apps for Atlassian Cloud products. Apps can extend the product's user interface, access the APIs, and respond to events.

Data storage

End-user data

All customer data is stored locally with the Jira cloud tenant (i.e. within the infrastructure that runs your Atlassian site). For more information on where and how data is stored in Jira, please refer to Atlassian's Trust centre.

Crumbs makes use of two mechanisms to store data:

  1. Issue properties - to facilitate synchronization with Jira Service Management, Crumbs uses an issue property to store linked organization IDs. An issue property is a type of entity property which allows apps to add key/value stores to Jira issues.

  2. Assets - Crumbs primarily stores customer information in assets using Atlassian's Asset Platform. This makes it possible to store and view asset information in Jira Cloud.

Atlassian's Assets API allows authenticated users to create, update, delete and find assets stored in the Assets Platform. This means that it is possible for developers to store, view, and edit information about customers in Crumbs using this API.

Application lifecycle data

Application lifecycle data is stored within New Verve's AWS infrastructure in Ireland (EU West).

Specifically, we utilise Amazon DynamoDB, a fully managed non-relational database service that provides fast and predictable performance with seamless scalability. Crumbs' database table(s) store the following information:

  • clientKey - an identifier used to uniquely identify your Jira Cloud site

  • baseUrl - the URL of your Jira Cloud site

  • oauthClientId - OAuth client ID, used for user impersonation

  • sharedsecret - a shared secret used to create and validate JWT tokens for use in API calls between Jira and Crumbs

Data processing

When a Crumbs end-user adds, updates, or deletes data using the Crumbs user interface, the data is processed by New Verve's AWS infrastructure in Ireland (EU West). 

Specifically, we utilise the following services:

  • AWS Lambda, an event-driven, serverless computing platform provided by Amazon as part of Amazon Web Services. Crumbs uses Lambda functions to create, edit, and remove assets in Jira Cloud.

  • Amazon API Gateway, an AWS service for creating, publishing, maintaining, monitoring, and securing REST, HTTP, and WebSocket APIs at any scale. Crumbs utilises API Gateway to ensure the secure transfer of data when executing API calls. 

Security

As an Atlassian Connect app, Crumbs connects uses HTTPS and JSON Web Tokens (JWT) authentication to secure communication between it, Jira Cloud, and the end-user.

All customer data in Crumbs is encrypted at rest and in transit within Jira Cloud. Refer to Atlassian's Trust centre for more details on Jira Cloud security.