Security
Shim stores as little as it can, encrypts it, and keeps it in the US. Here's the detail your security team is going to ask about (it's the same for every app).
How Shim handles your data
What Shim stores
Only what syncing needs: your mappings, the connection to your other tool, and enough about each synced value to tell when it changes. All of it is encrypted.
Where it lives
On servers in the United States.
What stays in your tools
Your content only goes between the tools you connect. It's never in alert emails, and the only analytics Shim keeps are anonymous counts.
Who can set up a sync
Only Jira admins (and the people they allow), and every configuration change is logged. For Microsoft Lists, a Microsoft 365 admin also approves the connection once.
Where requests come from
Shim checks that every request really came from Jira, and that every update really came from your other tool, before it does anything with it.
When you uninstall
Shim's access to your other tool is revoked right away, and your data is deleted within 30 days.
Questions from your security team?
Email [email protected]. You'll get an answer within one business day.