Creativas is SOC 2 Type II compliant since December 2024. For more information, please visit our
Trust Center
Overview
Smart Terms for Jira app (the “App”) is part of the Bug Bounty Program, which helps detect security vulnerabilities faster and increases the overall security level for our customers.
Secure development
We follow the best practices and frameworks to ensure the highest level of security in our software:
- Regular security training for developers to learn about common vulnerabilities and threats
- Code review for security vulnerabilities
- Regular updates of the dependencies
- Software Composition Analysis (SCA) to detect vulnerabilities in our codebase
Employee Access to Customer Data
The App’s team does not have access to user data. In cases where they have to access the user data in order to perform support services or to respond to an incident, we will ask for your consent. Our employees connect to the infrastructure via secure communication channels with several levels of protection.
Working on a support issue, we only access the minimum data needed to resolve the issue.
Network and Application Security
The App is hosted on your systems and does not collect any data.
Pentests and Vulnerability Scanning
Smart Terms uses third-party security tools to continuously scan for vulnerabilities and participate in the Atlassian Marketplace Bug Bounty Program for crowdsourcing vulnerability discovery.
Incident Response
Smart Terms implements an Incident Response Policy for handling security events which includes escalation procedures, rapid mitigation, and post-mortem. All employees are informed of our policies.
Reporting An Issue
We appreciate your input and feedback on our security, as well as responsible disclosure.
In case you've identified a security concern, please create a request in our support system. We'll work with you to ensure we understand and address the issue promptly.
