GDPR and ISO27001 compliance FAQ

a) what does does Candylio collect in relation to F-Secure i) JIRA tickets / usage, ii) related survey emails?

Rest assured as all data are stored on your server. We do not collect or store any customer data for ourselves.

b) does Candylio position itself as a processor or a controller for data referred to in question a).

We are a data processor.

c) Where is the data referred to in question i) stored primarily, ii) backed up, iii) accessed from?

All data are stored on customer's jira instance database and server only.

d) How is the data referred to in question a) protected against unauthorized access?

As above, data are stored within customer's instance and behind customers's firewall.

Candylio Support