Data security is critical for all our clients and we have architected Plandek from the ground up to be secure. Plandek’s key data sources are workflow management tools (e.g. Jira); code repos. (e.g. Git); and CI/CD tools (e.g. Jenkins). Plandek only stores metadata about the development process and avoids the storage of data which may hold sensitive IP (as such Plandek does NOT store data such as ticket descriptions, source code, commit messages, attachments or comments). Examples of metadata stored include transitions of issues, the time of commits and pull requests. All-access to your toolsets is performed over encrypted connections. Plandek uses read-only accounts and will never change data in the source systems. All-access credentials which are held are encrypted with Google Key Management Service, giving us the ability to monitor decryptions and revoke and rotate keys regularly.