Where Accord runs
Accord is built on Atlassian Forge, the platform Atlassian provides for running apps inside Jira. Atlassian hosts the app and its stored review data. Accord does not operate a separate application server or database.
What Accord stores
Accord keeps only the information needed to organize reviews:
- the identifying numbers Jira uses for tickets, projects, and accounts;
- your review plans and forms;
- who a review is assigned to and when it is due; and
- scores, reviewer notes, and the status of each review.
Accord does not store ticket descriptions, comments, attachments, customer messages, customer email addresses, or complete copies of tickets.
Who can see information
Accord checks both the person’s role in Accord and their existing Jira access. Reviewers see work assigned to them. Support team members see only finished reviews of their own tickets. A ticket is shown only when the person can already open it in Jira.
Report a possible security problem
Email security@accordquality.com with:
- a short explanation of the problem and what it could affect;
- safe steps we can follow to see the problem;
- whether you believe anyone has already used the problem; and
- a safe way to contact you with questions.
What happens after you report it
We will confirm that we received a report that appears genuine, investigate it, and keep you informed when we need more information. Fixes and customer notifications will follow Atlassian’s security rules for Marketplace apps.