Security Statement

Date: April 27, 2016

1. Overview.

QMetry Test Manager for JIRA uses the QMetry hosted service to store JIRA data and render QMetry data. The QMetry hosted service is provided by cloud services.

Each incoming web request is authenticated and authorized before access to customer data is allowed.

QMetry’s hosted service uses secure cloud components. QMetry is responsible for provisioning, monitoring, and managing the virtual servers, and for providing support to QMetry Test Manager for JIRA subscribers.

2. Data Storage and Facilities.

The QMetry hosted service uses cloud components and infrastructure for data storage.

3. Stored JIRA data.

QMetry Test Manager for JIRA uses JIRA APIs to query data from selected projects. QMetry stores, in its own database, all test steps, executions and attachments related to testing.

4. People and Access.

QMetry’s support and monitoring teams access application data only for purposes of application health monitoring and performing system or application maintenance, and upon customer request for support purposes. Only authorized QMetry employees and consultants have access to application data.

QMetry users are authenticated using Atlassian Connect JWT authentication. QMetry will get JIRA current user information which will be used for access control. Customers are responsible for maintaining the security of their own JIRA login information.

5. Backups.

QMetry application database full backups are performed once per day and are retained for 31 days