Versions Compared

Version Old Version 3 New Version 4
Changes made by

Christoph Schönnenbeck

Christoph Schönnenbeck

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

We take security and privacy seriously. On this page we aim to answer the most frequently asked questions concerning the handling of data in the BPMN and DMN Modeler apps. If you still have questions or any other concern, then do not hesitate to get in touch via our Support Desk.

Contents

Table of Contents
minLevel1
maxLevel6
include
outlinefalse
indent
stylenone
excludeContents
typelist
class
printabletrue

Confluence Cloud

Which data is stored or processed by the app?

  1. Your BPMN and/or DMN diagrams are not stored by us. Instead, the corresponding files are attached as Confluence page Attachements to your Confluence sites and therefore stored as part of your Confluence instance by Atlassian.

  2. For certain services provided by our apps (e.g., PDF Rendering), diagrams are sent to our servers securely for processing and are deleted afterwards completely.

  3. We do store data that is strictly necessary to deliver certain features. This includes technical IDs of Confluence content such as page IDs or space keys. Additionally, we store technical IDs of diagrams. Some features, e.g. the process net, require the storage of additional data such as the names of specific diagrams or of elements therein. This data is stored and encrypted at rest. Since these are user generated they might potentially contain sensitive or personal identifiable information. This data is stored encrypted at rest

    End users might choose to enter personal information into free text fields such as the diagram name or within diagrams themselves. However, as these diagrams usually represent business objects, this should usually not be the case.

  4. Usually, neither diagrams nor their names contain personal information, as BPMN and DMN models represent business objects. However, these models and their names contain text which is entered freely by end users, in which case this personal will also be processed by our apps and - in the case of names - potentially also be stored.

  5. Technical data (such as identifiers, cloud ID, license information and others) that are needed to validate a licensed installation and to perform a secure communication with Confluence are transmitted and stored encrypted at rest.

  6. As usual, our apps for Confluence Cloud necessitate communication between end users' browsers and the apps' backend servers to function. To serve these requests, the end users' IP addresses are processed.

Where are my process models and decision tables stored?

All models are saved solely as Confluence page attachments. They are not saved on any servers hosted by viadee.

Where is this data stored?

The data we store is saved in a Google Firestore database that is hosted in GCP multi-region eur3 (Europe: europe-west1 (Belgium), europe-west4 (Netherlands) europe-north1 (Finland)).

Data is encrypted at rest with security standard aes-256-gcm and we have enabled full-disk encryption.

Which backup possibilities do I have?

Please care for a regular Confluence Backups, as you models are included there as page attachments.

For the data that is stored by viadee, we perform security backups every 7 days. These backups are held for another 14 days and are stored securely with GCP. After this time, the data will deleted and cannot be recovered.

Where are the app servers located?

We are operating application servers in Germany, USA, and China (Hong Kong). Requests are always routed to the nearest cluster via DNS routing, meaning that e.g. customers from Europe will always communicate with our servers in Germany (Frankfurt).

How to configure Data Residency in Confluence Cloud?

How to configure Data Residency for Confluence Cloud and decide where your in-scope product data is hosted, is described by Atlassian at https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency/.

Where can I find viadee's privacy policy?

You find the privacy policy for our products and services at https://www.viadee.de/en/privacypolicy/.

Confluence Data Center

Where is my data stored and processed?

All data storage and processing takes place within your Confluence Data Center installation.

In particular, your BPMN or DMN models are fully stored and processed within your own systems.

Which additional resources are used?

  • We want to provide user with up to date help and manual materials. Therefore, links to these materials and update information e.g. on new features are regularly obtained by the app from an external resource. We host these resources in the form of a Google Cloud Bucket in EU under https://storage.googleapis.com/viadee-atlassian-plugins-prod-storage-bucket.
    Please note that when retrieving the data mentioned above, we necessarily process the users IP adresses. These adresses are not processed further by Google for their own purposes.