The internal application that JetBrains uses to manage the data for YouTrack Cloud, Cloud Keeper, is only accessible to the YouTrack Support and JetBrains Operations teams. They undergo annual SOC 1 audits and have been successfully evaluated at the Moderate level for Federal government systems as well as DIACAP Level 2 for DoD systems. Since we cannot physically control the servers, we rely on the third-party certifications that have been undertaken by AWS.ĪWS has achieved ISO 27001 certification and has been validated as a Level 1 service provider under the Payment Card Industry (PCI) Data Security Standard (DSS). Access to these keys is restricted to the YouTrack Support and JetBrains Operations teams. There are several major implementations of ChaCha20, including Google's selection of ChaCha20 as a replacement for RC4 in TLS and its inclusion in OpenSSH.Ī unique encryption key is generated separately for each YouTrack Cloud instance. The database itself, including attachments, is encrypted with the ChaCha20 algorithm. The salted passwords are hashed using the SHA-256 cryptographic hash function. Each user's password is hashed with a different, randomized salt. YouTrack stores passwords in the database as salted hashes. This reduces the likelihood that your data is compromised even in situations where an attacker obtains unauthorized access. The databases that store information for hosted instances are encrypted. In 2017, JetBrains discontinued support for non-secure connections for YouTrack Cloud. Let’s Encrypt certificates use the SHA-2 cryptographic hash function to encrypt data in transit. Otherwise, your instance is secured with a TLS certificate that is automatically generated and signed by Let's Encrypt. For instances that use a custom domain, you have the option to use your own CA certificate. Encryption of Data in TransitĪll of the instances that are hosted on the *.youtrack.cloud and *. domains use HTTPS connections to secure data in transit. Your application data is always processed within the corresponding AWS zone and is never transferred outside this geographic region without your explicit permission. Amazon EBS volumes ensure consistent and low-latency performance. Each Amazon EBS volume is automatically replicated within its Availability Zone to protect your data from component failure, offering high availability and durability. All data is stored on the Amazon Elastic Block Store (Amazon EBS). We use Amazon Web Services (AWS) Cloud as the hosting provider. To move your instance to a different data center, submit a request to YouTrack Support. The current data center location is displayed on the Global Settings page. The location of the data center is chosen by the instance owner when the instance is started for the first time. Data Center LocationĪ new instance is created on the server with the lowest load and based on the customer preference of data center location: For more information, see Safeguard Your Installation. Even so, there are a number of things that you can do to protect your data. We monitor these servers around the clock to ensure their availability and security. The YouTrack Support team provides technical support to YouTrack Cloud subscribers. The JetBrains Operations team is responsible for provisioning, monitoring, and managing the servers that host YouTrack Cloud instances. When server activity reaches a certain level, we close this server for any new registrations. We permanently monitor each server load and activity to maintain well-balanced performance. The number of instances per server depends on several parameters, such as database size and number of online users. Each YouTrack Cloud instance is physically located on a server, hosted by Amazon Web Services (AWS). YouTrack Cloud is a hosting platform that is designed and used by JetBrains to deliver YouTrack as a service.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |