Security By Design
Digital Rose provides enterprise-grade signature solutions for the Atlassian ecosystem. Our architecture is built on a "Privacy-First" principle: we do not store your data. Our apps are engineered to keep your sensitive documents and audit trails where they are safest, within your own Atlassian Cloud environment. With no data stored outside of the Atlassian Cloud, we significantly reduce the attack surface and ensure that your compliance posture remains under your direct control.
Our signature processing services leverage a robust, distributed architecture that utilizes world-class infrastructure providers to ensure high availability and rigorous security:
Primary Storage (Atlassian)
All document content, metadata, and eSignature records are stored natively within your Atlassian site. We utilize Atlassian’s encrypted storage layers, inheriting their global compliance certifications (ISO 27001, SOC 2, HIPAA).
Secure Processing (Render.com)
To handle high-performance cryptographic operations and signature processing, we utilize Render.com in isolated US and Europe regions. This tier acts as a stateless processing engine; it performs the necessary computations to apply and secure your signatures and then immediately stores the data into your Atlassian cloud. No customer data is permanently stored in Render.com.
Encrypted Connectivity
Communication between your Atlassian site and our processing tier is secured via industry-standard TLS encryption. By utilizing the managed certificate authorities of our infrastructure partners, we ensure that every byte of data is protected by the same high-trust encryption used by global financial institutions.
No Data Access, Maximum Integrity
Our eSign Support team has no access to your signature or document content. Because everything is stored securely in your own Atlassian cloud site, only you have access to it. Our transactional have no permanent data store. Our reliance on the established, audited certificate and security frameworks of Atlassian and Render.com allows us to focus our expertise on the integrity of the signature process, providing you with a seamless, compliant, and highly secure signature experience without the risks associated with third-party data silos.
