ScriptRunner Connect: Security & Trust

We’re ISO 27001 certified across our managed services. We’ve also been issued the SOC 2 Type 2 audit report, which demonstrates that we’re effectively protecting our organisational and customer data within the data centres we use and our information systems.

Utilising AWS services hosted in Ireland (eu-west-1) or Oregon (us-west-2), we use V8 Isolates technology for the secure isolation of script invocations. Data logs are retained for six months and can only be accessed by the ScriptRunner Connect team. Analytical logs are kept indefinitely and can be accessed by the broader Adaptavist Group (PII data is anonymised).

We provide data encryption at rest and in transit. Sensitive info, like end-user authentication, is additionally encrypted using AWS KMS symmetric encryption with key rotation (256-bit AES-GCM). We employ a multitude of monitoring systems and the team runs automated tests periodically to detect incidents proactively.