This policy applies to the owner of Reinwok and to every contractor who works for Reinwok. Our main control is architectural: we build apps so that we hold as little customer data as possible.
1 Where Your Data Lives
- Atlassian Cloud apps: built on Atlassian Forge. They run on Atlassian's infrastructure, your data stays there, and we cannot access it. Hosting, encryption, backups and physical security are Atlassian's. See the Atlassian Trust Center.
- Atlassian Data Center apps: run on your own servers. We receive no data from them.
- monday.com apps: we hold account IDs and the app data linked to them, encrypted in transit and at rest. No names or emails.
2 Access
- Each person gets only the access their work needs. Access is removed the day an engagement ends.
- Accounts used to build, publish and support our apps use unique passwords and multi-factor authentication.
- Support staff see only what you choose to send us. They cannot open your Atlassian site.
- Work devices use disk encryption, a screen lock and automatic security updates.
3 Secure Development
- Every change is tested in a separate environment before it reaches production.
- All changes are recorded in version control and can be rolled back.
- We keep third-party libraries up to date and fix vulnerabilities within the timeframes the marketplaces require.
- We follow the security requirements for Atlassian Marketplace and monday.com apps.
4 Artificial Intelligence
Our apps do not send customer data to AI services, and we do not use customer data to train AI models.
5 People
- Contractors work under a written agreement with confidentiality terms.
- Everyone reads this policy and our Code of Conduct when they start and once a year.
6 Incident Response
Report a vulnerability or incident to [email protected]. The owner leads every incident.
- Assess: within 1 business day we confirm the report and rate it high, medium or low.
- Contain: we disable the affected feature, release or account.
- Notify: if your data is affected, we tell you without undue delay and within 48 hours of becoming aware of it. We also notify Atlassian or monday.com as their rules require.
- Fix: we release a fix and confirm it works.
- Review: we record the cause and what we changed to prevent a repeat.
7 Business Continuity
- Atlassian apps keep running on Atlassian's or your own infrastructure even if Reinwok's own systems are unavailable.
- Source code is kept in a hosted version control service, with a second copy elsewhere.
- If the owner is unavailable, a designated second person has the access needed to keep support running and release urgent fixes.
- We review this plan once a year.
Last Updated: November 2026
Reviewed once a year by the owner of Reinwok.