Subprocessors
FirstTry Direct Subprocessors¶
FirstTry does not directly employ subprocessors. All third-party services are provided through Atlassian.
| Subprocessor | Purpose | Data Access | Agreement |
|---|---|---|---|
| Atlassian Forge | App hosting and runtime | All data | Forge Terms of Service |
| Atlassian Jira Cloud | API and data source | Jira metadata queried by app | Jira Cloud Terms of Service |
Atlassian's Subprocessors¶
Atlassian may use third-party subprocessors for Forge and Jira Cloud services. FirstTry does NOT control or verify Atlassian's subprocessor list.
Authority: Atlassian publishes the official list at:
🔗 https://www.atlassian.com/legal/subprocessors (pinned URL)
Content: The subprocessor list includes (but is not limited to):
- CDN providers (CloudFlare, Akamai, etc.)
- Logging and monitoring services
- DDoS mitigation providers
- Database and encryption key management services
- Cloud infrastructure providers
FirstTry caveat: We do not maintain an independent copy of Atlassian's subprocessor list. Customers should:
- Review Atlassian's published list directly
- Note that FirstTry has no visibility into Atlassian subprocessor contracts
- Contact Atlassian directly with subprocessor questions (not FirstTry)
Updates and Change Notification¶
Atlassian's policy: Atlassian notifies customers of material subprocessor changes per their terms of service.
FirstTry refresh: Within 30 days of Atlassian publishing a material subprocessor change, we will:
- Update this document to reference the change
- Regenerate evidence artifacts (docs/evidence/)
- Commit changes to git with justification
No independent verification: FirstTry does not independently audit Atlassian's subprocessor agreements or practices.
How Subprocessor Data Flows¶
FirstTry App
↓ uses requestJira() API
Atlassian Forge
↓ forwards requests
Atlassian Jira Cloud
↓ processes and stores
Atlassian Subprocessors (CDN, logging, etc.)
↓ per Atlassian's terms
FirstTry has no control over data handling by Atlassian subprocessors. Responsible party: Atlassian.
Privacy Inquiries¶
For questions about how your data is processed by Atlassian's subprocessors or about FirstTry's data handling practices, contact: privacy@firsttry.run
References¶
- SECURITY_OVERVIEW.md: Shared responsibility model
- FORGE_PLATFORM_DEPENDENCY.md: Platform dependency
- Atlassian Subprocessor List (external link)
- PRIVACY_POLICY.md: FirstTry privacy policy