top of page

Trust Center

Security, privacy, and legal documentation for TestRay and Plum CRM, across Cloud and Atlassian Government Cloud deployments.

● TestRay AGC — FedRAMP Moderate

● AWS GovCloud (US)

● GDPR Aligned

● Last reviewed July 2026

Anchor 1

Security & Compliance at Goldfinger Software

Goldfinger Software develops TestRay and Plum CRM — enterprise tools for Atlassian Jira Cloud. This Trust Center is the single source of truth for security, privacy, and legal documentation for the Goldfinger Cloud products: TestRay Cloud, TestRay AGC, and Plum CRM Cloud.

● TestRay AGC — FedRAMP Moderate (FR2412062433)

● TestRay Bug Bounty — Enrolled

● AWS GovCloud (US)

● Atlassian Cloud Fortified / A4A In Progress

● GDPR Aligned

● NIST SP 800-53 Aligned

● NIST SP 800-61 Aligned

🔒 Privacy

Single consolidated Privacy Policy covering all products and deployments — GDPR, CCPA/CPRA, five U.S. state laws, international transfer mechanisms, data retention schedules, and cookie policy.

🛡 Security

Four documents covering all Cloud products — Cloud Security Overview, Incident Response Policy public summary, Vulnerability Disclosure Policy, and Access Control Policy. AGC/FedRAMP controls addressed within each document.

📋 Legal

Single consolidated Terms of Service, Data Processing Addendum, and Subprocessor List covering all Cloud products. New Acceptable Use Policy. SLA covers all products. EULA governs all Data Center deployments.

🔒 Privacy

Single consolidated Privacy Policy covering all products and deployments — GDPR, CCPA/CPRA, five U.S. state laws, international transfer mechanisms, data retention schedules, and cookie policy.

🛡 Security

Four documents covering all Cloud products — Cloud Security Overview, Incident Response Policy public summary, Vulnerability Disclosure Policy, and Access Control Policy. AGC/FedRAMP controls addressed within each document.

📋 Legal

Single consolidated Terms of Service, Data Processing Addendum, and Subprocessor List covering all Cloud products. New Acceptable Use Policy. SLA covers all products. EULA governs all Data Center deployments.

PRIVACY

Privacy Inquiries

privacy@goldfingerholdings.com
Data subject rights, DPA requests, GDPR

SECURITY

Security Reports

security@goldfingerholdings.com
Vulnerability reports, incidents, status.

LEGAL

Legal & Contracts

legal@goldfingerholdings.com
Countersigned DPA, ATO support, contracts

bottom of page