Cloud Security Statement

Cloud Security Statement

For our Jira / Confluence and monday.com cloud apps

Effective starting: September 09, 2025

About this document

About this document

This document is in addition to our Privacy Policy, Customer Agreement, Customer Agreement (monday.com) and Security Bug Fixing Policy provided by evolu software GmbH ("we", "us", "our") and explains how our cloud apps store data.

Data storage terms and data storage location for our Jira / Confluence apps

Data storage terms and data storage location

At no time will customer-specific data be retrieved and/or stored on any of our servers.

Jira / Confluence: All data is stored and processed on Atlassian's Forge platform. ( https://developer.atlassian.com/platform/forge/).
Any configuration made by the end user is stored in the Atlassian platform.

monday.com: All data is stored on mondayDB and monday storage. ( https://support.monday.com/hc/en-us/articles/11407684117266-Introducing-mondayDB https://developer.monday.com/apps/docs/mondaystorage).
All data is processed within your Browser or monday code ( https://developer.monday.com/apps/docs/hosting-your-app-with-monday-code ).

Account removal and data retention

Account removal and data retention

This section explains how a customer can close an account and completely remove their data from our service.

Jira / Confluence: When you remove one of our cloud applications from your Jira or Confluence instance, Atlassian Forge will automatically remove all data within 30 days as you have agreed with Atlassian.

monday.com: When the app is uninstalled, we receive an event from monday.com. Within the following 30 days, we will automatically send an event to monday.com, and the monday storage created for our app will be deleted by monday.com.

Data portability

Data portability

This section explains if and how a customer can extract their data from your service.

Jira / Confluence: All data is stored in the Atlassian platform. We are not able to extract data from the storage. Only the customer can extract data through the user interface provided by our apps or Atlassian.

monday.com: All data is stored in the monday.com platform. We are not able to extract data from the storage. Only the customer can extract data through the user interface provided by our apps or monday.com.

Security disclosure

Security disclosure

Security breaches or vulnerabilities with the proposed solution of the problem are published on our website or in the release notes.

Customers can report security breaches or vulnerabilities via email: security@evolu.software