Information Security Policy

The purpose of this policy is to define web application security assessments within Stratus Add-ons web application.

The policy covers all data handled by the application and employees of Stratus Add-ons.

Ensure all information is encrypted in compliance with Atlassian’s security requirements for cloud apps.
Frequently search for potential security vulnerabilities in the code and ensure proper security standards and best practices have been met.
Avoid storing any information, which includes but is not limited to usernames, identifiers, passwords, emails, diagram markup etc.
Ensure all Stratus Add-ons employees have been properly trained to enforce this policy.

This policy is reviewed annually and is kept up to date with requirements stated by Atlassian.