Web Applications Stack Exchange is a question and answer site for power users of web applications. It only takes a minute to sign up.
Sign up to join this community
I started using Trello at work to manage my team and liked it, but then my my VP Dev told me we can't store any company information offsite because of regulations (we're working with the finance industry). Trello is not hostable locally, so I'm out of options.
If I'm going to try and work around this, I need to at least know that all the data is encrypted somehow on the Fogbugz servers, or wherever they use for storage.
Does anybody have any information on that?
Please see http://trello.com/data for our data, privacy, and security policies and our Terms of Service for the document covering your interaction with Trello and Fog Creek.
We may offer enterprise-grade security for payment in the future. That will come with documentation, representations, etc. In any case, Trello will remain a software-as-a-service offering. If your company or government regulations prevent you from having data outside your network or servers, unfortunately, you won't be able to use Trello.
For what it is worth, there is a way to encrypt a text subset of Trello using Greasemonkey: http://userscripts.org/scripts/show/173422
The script runs in a browser and intercept text nodes, encrypting and decrypting them using AES. The description of the script contains some discussion on the level of security that may be achieved with this approach. It boils down to "pretty good" security assuming that the server does not actively attempt to decrypt the data or obtain the AES key.
NO WARRANTIES OR REPRESENTATIONS BY FOG CREEK