FAQ: Data Privacy and Data Residency
- Belinda Felpel
- Christoph Schönnenbeck
We take security and privacy seriously. On this page we aim to answer the most frequently asked questions concerning the handling of data in the BPMN and DMN Modeler apps. If you still have questions or any other concern, then do not hesitate to get in touch via our Support Desk.
Contents
Confluence Cloud
Which data is stored or processed by the app?
Your BPMN and/or DMN diagrams are not stored by us. Instead, the corresponding files are attached as Confluence page Attachements to your Confluence sites and therefore stored as part of your Confluence instance by Atlassian.
For certain services provided by our apps (e.g., PDF Rendering), diagrams are sent to our servers securely for processing and are deleted afterwards completely.
We do store data that is strictly necessary to deliver certain features. This includes technical IDs of Confluence content such as page IDs or space keys. Additionally, we store technical IDs of diagrams. Some features, e.g. the process net, require the storage of additional data such as the names of specific diagrams or of elements therein. This data is stored and encrypted at rest.
End users might choose to enter personal information into free text fields such as the diagram name or within diagrams themselves. However, as these diagrams represent business objects, this should not be the case.
Technical data (such as identifiers, Confluence Cloud ID, license information and others) that are needed to validate a licensed installation and to perform a secure communication with Confluence are transmitted and stored encrypted at rest.
As usual, our apps for Confluence Cloud necessitate communication between end users' browsers and the apps' backend servers to function. To serve these requests, the end users' IP addresses are processed.
Where are my process models and decision tables stored?
All models are saved solely as Confluence page attachments. They are not saved on any servers hosted by viadee.
Where is this data stored?
The data we store is saved in a Google Firestore database that is hosted in GCP multi-region eur3 (Europe: europe-west1 (Belgium), europe-west4 (Netherlands) europe-north1 (Finland)).
Data is encrypted at rest with security standard aes-256-gcm and we have enabled full-disk encryption.
Which backup possibilities do I have?
Backups of Confluence Cloud data such as page attachments are part of your arrangements with Atlassian.
For the data that is stored by viadee, we perform security backups every 7 days. These backups are held for another 14 days and are stored securely with GCP. After this time, the data will deleted and cannot be recovered.
Where are the app servers located?
We are operating application servers in Germany, USA, and China (Hong Kong). Requests are always routed to the nearest cluster via DNS routing, meaning that e.g. customers from Europe will always communicate with our servers in Germany (Frankfurt).
Where can I find viadee's privacy policy?
You find the privacy policy for our products and services at https://www.viadee.de/en/privacypolicy/.
Confluence Data Center
Where is my data stored and processed?
All data storage and processing takes place within your Confluence Data Center installation.
In particular, your BPMN or DMN models are fully stored and processed within your own systems.
Which additional resources are used?
We want to provide users with up to date help and manual materials. Therefore, links to these materials and update information e.g. on new features are regularly obtained by the app from an external resource. We host these resources in the form of a Google Cloud Bucket in the EU under https://storage.googleapis.com/viadee-atlassian-plugins-prod-storage-bucket.
Please note that when retrieving the data mentioned above, we necessarily process the users IP adresses. These adresses are not processed any further.