Trust Center

Security, privacy, and compliance documentation for TestRay, Plum CRM, and CAC/PIV — across Cloud and Data Center deployments.

● TestRay AGC — FedRAMP Moderate

● AWS GovCloud (US)

● GDPR Aligned

● Last reviewed March 2026

Anchor 1

Security & Compliance at Goldfinger Software

Goldfinger Software develops TestRay, Plum CRM, and CAC/PIV Authentication Manager — enterprise tools for Atlassian Jira Cloud and Data Center. This Trust Center is the single source of truth for security, privacy, and legal documentation across all products and deployment models.

● TestRay AGC — FedRAMP Moderate (FR2412062433)

● TestRay Bug Bounty — Enrolled

● AWS GovCloud (US)

● Atlassian Cloud Fortified / A4A In Progress

● GDPR Aligned

● NIST SP 800-53 Aligned

● NIST SP 800-61 Aligned

🔒 Privacy

General Privacy Policy (all products), TestRay AGC Privacy Policy for government deployments, separated clearly by product and deployment model.

🛡 Security

Security Overviews and Vulnerability Disclosure Policy organized by product. Incident Response Policies for Cloud deployments. Whitepaper available on request.

📋 Legal

Terms of Service, Data Processing Addenda, and Subprocessor Lists for TestRay and Plum CRM Cloud. EULA v2.1 governs all Data Center deployments and is linked separately.

🏛 Government (AGC)

TestRay AGC-specific documentation for FedRAMP Moderate, FISMA, and ATO requirements. Includes incident response, government DPA template, and AGC security docs.

Document Coverage by Product

PRIVACY

Privacy Inquiries

privacy@goldfingerholdings.com
Data subject rights, DPA requests, GDPR

SECURITY

Security Reports

security@goldfingerholdings.com
Vulnerability reports, incidents, status.

LEGAL

Legal & Contracts

legal@goldfingerholdings.com
Countersigned DPA, ATO support, contracts