Your Friends and Neighbors
Your Friends and Neighbors

📝 Data Processing Agreement (DPA)

Data usage clarity. Compliance you can trust.


🧾 What is a DPA?

A Data Processing Agreement defines how customer data is accessed, handled, and protected — especially in the context of GDPR, CCPA, and other privacy regulations.

Dynamic Score does not store any data outside Jira and does not transmit information to external systems.
This DPA section ensures full transparency and compliance.


🔍 Data Flow Overview

Data Accessed by Dynamic Score

Dynamic Score reads only the minimum data required to load and evaluate scoring:

  • Project (Space) properties
    → scoring configurations (dynamic-scoring-config)

  • Issue properties
    → previously saved scoring values (dynamic-scoring-values)

  • Issue metadata
    → issue key / ID (needed to save values)

  • User display name
    → only when saving an optional comment

Dynamic Score does not access issue fields, attachments, descriptions, or custom fields.


Data Stored by Dynamic Score

All storage happens inside your Jira Cloud environment only:

  • Project-level: scoring configuration JSON

  • Issue-level: selected values, score, risk label

There are no external servers, no external storage, and no 3rd-party services.


❌ Data NOT Used or Stored

Dynamic Score does not use:

  • External databases

  • Third-party APIs

  • Cookies or trackers

  • Analytics tools

  • Background data collection

Dynamic Score performs no profiling, no usage analytics, and no cross-site processing.


🌍 GDPR Alignment

Dynamic Score is naturally aligned with GDPR principles because all processing occurs inside Atlassian systems only.

GDPR Principle

How Dynamic Score Complies

Data Minimization

Reads only configuration + scoring metadata

Transparency

Full documentation of what is accessed and stored

Right to Access

Admins can view all project/issue properties directly

Right to Erasure

Uninstalling stops all processing immediately

Data Portability

Issue-level data is stored as JSON that can be exported

Lawful Basis

Processing is strictly user-triggered inside Jira

Dynamic Score never processes personal data beyond displayName (optional, for comment creation).


📜 Processor Details

Dynamic Score is provided by:
TypeSwitch
Kyiv, Ukraine
Email: support@typeswitch.net

As an Atlassian Marketplace Partner, we operate under:

  • Atlassian Marketplace Partner Agreement

  • Atlassian Cloud Terms

  • Atlassian Data Processing Addendum

Because we do not handle or store data off-platform, TypeSwitch does not act as a traditional data processor.


🛡 Security by Forge

Dynamic Score benefits from the security features of Atlassian Forge:

  • All compute runs inside Atlassian infrastructure

  • No external networking allowed

  • No secrets or tokens stored

  • Strong per-site isolation

  • Access is strictly bound by scopes in the manifest

  • OAuth2 authorization enforced for every Jira API call

All properties remain within your Jira site, encrypted at rest and in transit via Atlassian’s cloud.


✅ DPA Summary

Dynamic Score does not process or store personal or business data outside of Jira and is therefore not considered a data processor under typical GDPR definitions.

However, if your organization requires a signed DPA:

📩 support@typeswitch.net
We are happy to provide or sign a custom agreement upon request.

📝 Data Processing Agreement (DPA)