Security & Compliance
Data Handling

Data Handling

Data Migrayt Reads (from ADO)

During a migration, Migrayt reads the following data from your Azure DevOps project:

DataPurpose
Work item fields (title, description, state, assignee, etc.)Transformation and writing to Jira
Work item relationsRecreating links in Jira
Iteration paths and area pathsSprint and component mapping
Attachment metadata and file contentRe-uploading to Jira
CommentsRecreating in Jira with attribution
User identities (display names, email addresses)User mapping and ghost account creation

Data Migrayt Writes (to Jira)

Migrayt writes:

  • Jira issues (all mapped fields)
  • Jira issue links
  • Jira Sprint assignments
  • Jira Component assignments
  • Jira attachments
  • Jira comments (attributed to the migration service account)
  • Jira worklogs (7pace add-on)
  • Xray test steps (Xray add-on)

Data Migrayt Retains

DataRetentionPurpose
ADO/Jira OAuth tokensUntil disconnectedReconnecting for incremental migrations
Mapping configurationIndefiniteRe-running or auditing migrations
Per-item migration state (ADO ID → Jira key)IndefiniteIdempotency for incremental runs
Migration run statisticsIndefiniteAudit trail, billing verification
Post-migration report textIndefiniteReference
S3 attachment staging files30 daysNot retained permanently

Data Migrayt Does NOT Retain

  • Work item content (titles, descriptions, comments) — passes through memory only
  • Attachment file content — downloaded and immediately re-uploaded; not stored
  • ADO user passwords or SSO tokens
  • Any data from ADO projects not selected for migration

Right to Erasure

To delete all your Migrayt data (credentials, migration history, mapping configuration):

  1. Disconnect all platforms from Account Settings
  2. Delete all projects from the Projects screen
  3. Contact support@migrayt.ai requesting full account deletion

Account deletion is completed within 30 days. ADO and Jira OAuth tokens are revoked immediately.

Subprocessors

SubprocessorPurposeLocation
AWS (Amazon Web Services)Compute, storage, secrets managementEU-West-1 (Ireland)
AnthropicAI mapping suggestionsUS (zero retention)
StripePayment processingEU
SendGrid (AWS SES)Transactional emailEU

All subprocessors are bound by Data Processing Agreements. No data is sold to or shared with third parties for marketing or advertising purposes.