...
JEMHC received webhook data for every IssueEvent in Jira (over SSL). JEMHC stores this event data in unencrypted form in the JEMHC database, retaining only the most recent events (
This data should ideally be encrypted, https://thepluginpeople.atlassian.net/browse/JEMHC-34 will track that).JEMHC will by default attach files added to issues to outbound emails.
JEMHC will by default store in the JEMHC database, the full email content of recently sent mail.
After sending email, JEMHC retains a recent history of the event, this includes email addresses and subject, currently stored in clear. https://thepluginpeople.atlassian.net/browse/JEMHC-35 will track the encryption of summary.
External Storage
JEMHC has an External Storage feature, enabling customers to store attachment data in the cloud rather than their Jira (with limited resources). The way various storage services expose links to their content impacts the potential risk of using that service: e.g. a link to the resource is access to the resource (Dropbox Basic) vs a time-limited link (Dropbox Pro) , Amazon S3 buckets enable signed public URL's that self-expire.
Registration and Feedback
...