Security
A practical approach to application security
PezTech Software designs applications around least-privilege access and minimising the data required to provide each product's functionality.
Data minimisation
Products are designed to access and retain only the information required for their documented functionality. Approval Queue for JSM uses Atlassian Forge and does not copy Jira request or approval data to a separate PezTech-operated backend or database.
Authentication
Approval Queue uses the signed-in Jira user and Jira remains authoritative for request visibility and approval authorisation. The app does not require a customer personal access token or API token.
Credential handling
Passwords, credentials and API tokens should never be sent to PezTech Software by email.
Application permissions
Application permissions are intended to be limited to those required for the product to work. For Approval Queue, review the current Marketplace Privacy & Security information and the permissions presented during installation.
Dependency management
Application dependencies are kept deliberate and reviewed as part of product maintenance. Refer to each product's current documentation and Marketplace disclosures for product-specific information.
Vulnerability reporting
Report a suspected security or privacy issue to support@peztechsoftware.co.uk with a clear description and steps to reproduce it. Do not include credentials, Jira request content or information you are not authorised to share.