Data, privacy and licensing

• EA Sphere stores its data only in Atlassian-hosted storage for your site and makes no calls outside Atlassian.
• EA Sphere stores Atlassian account IDs to attribute changes, verifications, notices, degradation updates, tabletop exercises (the person who planned each), the ending of degradations and exercises, exercise notes and renames of list values, severity levels and incident roles whose records are still being moved, and to record each person's acknowledgments and knowledge checks. It reports them to Atlassian weekly. Closed accounts are erased from records, change history, degradations, exercises, exercise notes, the note of renamed values still being moved and the history lines noted with a save until they are added; their acknowledgment records are deleted. The erasure takes its turn with people's saves, so a change saved meanwhile stands, and each closed account is erased once: no save can write it back afterwards. A run erases at most 2,000 accounts; any more are erased the following week.
• EA Sphere does not store names, email addresses or avatars from Atlassian profiles; display names are read from Jira when a page is shown. Names, email addresses and telephone numbers that people type, such as contacts, facilitators, participants, audience addresses and additional notice recipients, are stored as entered. EA Sphere's note of each save, kept for an hour, or longer while its effects are still to apply, identifies the person only by a one-way digest of their account ID.
• Administrators can export all data as a JSON file under Settings, Data, including each record's latest 200 changes, archived degradation updates, tabletop exercises, exercise notes and acknowledgments. The file is a copy for your own records; EA Sphere does not import it.
• Administrators can delete all data, settings included, under Settings, Data. On a large site, deleting all data takes a few minutes; the page shows its progress. If the page is closed before deleting finishes, EA Sphere says so the next time it is opened, and an administrator selects Finish deleting to complete it. A page that was open before all data was deleted or replaced cannot save changes; it reloads with the data as it is now.
• If the license on your site is not active, EA Sphere remains readable but does not accept changes. A Jira administrator can still delete all data. Until the license is active again, Jira's work item events change no records, and the weekly maintenance does not apply work item effects, move renamed values or work out dates again. A page on such a site does not try to finish work item effects, so it shows no Saving… for them and gives no warning on leaving.

See the privacy policy, the security statement, the terms of service and support.