ScriptRunner Connect: Security and Trust

Rely on the expertise and security-first credentials of the teams behind ScriptRunner.

Illustration of a person in a yellow T‑shirt smiling with their eyes closed and raising both arms in celebration in front of a stylised ScriptRunner Connect interface. The background window shows colourful icons, including a rocket and a large plug, with decorative stars and circles, suggesting successful integrations.

Putting data compliance front and centre

We’re ISO 27001 certified across our managed services. We’ve also been issued the SOC 2 Type 2 audit report, which demonstrates that we’re effectively protecting our organisational and customer data within the data centres we use and our information systems.

Data management and retention

Utilising AWS services hosted in Ireland (eu-west-1) or Oregon (us-west-2), we use V8 Isolates technology for the secure isolation of script invocations. Data logs are retained for six months and can only be accessed by the ScriptRunner Connect team. Analytical logs are kept indefinitely and can be accessed by the broader Adaptavist Group (PII data is anonymised).

Data security and incident management

We provide data encryption at rest and in transit. Sensitive info, like end-user authentication, is additionally encrypted using AWS KMS symmetric encryption with key rotation (256-bit AES-GCM). We employ a multitude of monitoring systems and the team runs automated tests periodically to detect incidents proactively.

You can see more about ScriptRunner's approach to security here.