Source: https://dataprotection.tools/security/
Updated: 2026-10-29

# Security & FAQ: answers for your security review.

**Quick answer:** On Cloud, Data Protection Toolkit scans in the user’s browser and Actonic stores no personal data, only meta and configuration data under an anonymized user ID. Actonic Products GmbH is ISO 27001 certified and tests security every quarter.

On Cloud, scanning runs in the user's browser. No personal data is stored by Actonic.

Only meta and configuration data is kept, under an anonymized user ID.

SSL only, with a browser-trusted certificate. Security testing every quarter.

Actonic Products GmbH is ISO 27001 certified. Atlassian data residency is not currently supported.

[Visit the Trust Center](https://trust.actonic.de/) [Security & technical FAQ](https://actonic.de/en/dpt-security-faq/)

### What is the difference between Cloud and Data Center?

Server and Data Center versions are identical. Only some modules are available on Cloud because of Cloud API limits. Jira and Confluence share the same modules.

### Jira already anonymizes users. Why do I need this?

Native anonymization changes the user account, not the content. Names stay in summaries, descriptions, comments, plain-text mentions, custom fields and history, and attachments are not touched. Data Cleaner finds those remaining instances by pattern and logs what it changed.

### Is installing the app enough for compliance?

No. The app automates common tasks such as obtaining consent, anonymizing personal data and investigating breaches. Agree requirements with your legal team, then configure the app to cover them.

### Does the app store personal data?

Not on Cloud. Only meta and configuration data is kept under an anonymized user ID. Data is fetched from Cloud and processed in the user’s browser.

### How often is security testing done?

Once per quarter, as part of the internal audit process.

### Who is it for?

Data Protection Officers, IT security managers, compliance teams and Atlassian administrators, from a single project to enterprise-scale instances.

## Related

- [About Who makes DPT and who to talk to](https://dataprotection.tools/about/)

- [DPT vs native anonymization What native anonymization leaves behind](https://dataprotection.tools/compare/)

- [Features All 11 modules, on Cloud and Data Center](https://dataprotection.tools/features/)