Trust Center
Security, privacy, and compliance documentation for TestRay, Plum CRM, and CAC/PIV — across Cloud and Data Center deployments.
● TestRay AGC — FedRAMP Moderate
● AWS GovCloud (US)
● GDPR Aligned
● Last reviewed March 2026
Security & Compliance at Goldfinger Software
Goldfinger Software develops TestRay, Plum CRM, and CAC/PIV Authentication Manager — enterprise tools for Atlassian Jira Cloud and Data Center. This Trust Center is the single source of truth for security, privacy, and legal documentation across all products and deployment models.
● TestRay AGC — FedRAMP Moderate (FR2412062433)
● TestRay Bug Bounty — Enrolled
● AWS GovCloud (US)
● Atlassian Cloud Fortified / A4A In Progress
● GDPR Aligned
● NIST SP 800-53 Aligned
● NIST SP 800-61 Aligned
🏛 TestRay AGC / Cloud — All documents are consolidated
All Privacy, Security, and Legal documents cover both TestRay AGC (Atlassian Government Cloud — FedRAMP Moderate, Authorization ID: FR2412062433) and TestRay Cloud (standard commercial) in a single document set. AGC-specific requirements, FISMA, NIST SP 800-53, FedRAMP IR-6, US-only data residency, and ATO support, are addressed within the relevant sections of each document. Government agencies and contractors should direct ATO support, countersigned DPA, or procurement requests to legal@goldfingerholdings.com.
Document Coverage by Product
PRIVACY
Privacy Inquiries
privacy@goldfingerholdings.com
Data subject rights, DPA requests, GDPR
SECURITY
Security Reports
security@goldfingerholdings.com
Vulnerability reports, incidents, status.
LEGAL
Legal & Contracts
legal@goldfingerholdings.com
Countersigned DPA, ATO support, contracts