Atlassian
atlassian.com · developer-tools
Atlassian declares 30 subprocessors, plus 11 of its own affiliates, in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. The list last changed on Nov 4, 2026: 0 added, 0 removed, 12 changed. 440 tracked vendors name Atlassian as a subprocessor, including Mailgun, Databricks and New Relic.
Includes: Bitbucket, Statuspage, Trello
Subprocessors CSV of Atlassian's subprocessors · Atom feed of Atlassian's subprocessors DORA draft CSV of Atlassian's subprocessors as declared by Atlassian what's this? ·
30 third parties, 11 affiliates.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting provider; Cloud hosting providerProvision of Atlassian support; Generative AI services provider for intelligence developer features; Generative AI services provider for intelligence product features; Provision of Atlassian supportMaintenance of service, safety, and security | USA; USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Bahrain, Mexico, Brazil | |
| Cantab Research Ltd (trading as Speechmatics) AI | Transcription services | USA | |
| Cloudflare, Ltd. | Content delivery network provider; Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server | Customer traffic is processed globally at the data center closest to the end user. | |
| Clumio, Inc. | Backup solutions provider for Amazon Simple Storage Service (S3) | EEA, UK, Australia, USA, and Singapore | |
| Crowdstrike | USA | ||
| Databricks, Inc. | Infrastructure provider for machine learning development, processing and training; Infrastructure provider to enable End User Personal Data querying and analytics features for Forge Apps.; Infrastructure provider to enable customer data querying, and analytics product features. | USA | |
| e-Core Soluções em Tecnologia da Informaçiupão Ltda. | Customer service, support, and cloud migration service provider | Brazil; Mexico | |
| Google LLC | File Storage | USA | |
| Google Vertex AI AI | Generative AI services provider for intelligence product features; Provision of Atlassian supportMaintenance of service, safety, and security | USA, EEA (Belgium, Netherlands, Finland), Singapore, Taiwan | |
| Mailchimp | Communications technology provider for product notifications and video sharing over email | USA | |
| Mailgun Technologies, Inc. | Communications technology provider for product notifications | USA; EEA | |
| MessageBird USA, Inc, (d/b/a Bird) | Communications technology provider for product notifications | USA; EEA | |
| Microsoft Corporation | Cloud hosting provider | USA; Australia; Netherlands | |
| MongoDB, Inc. | Cloud hosting provider for JSM Chat (formerly Halp) | USA | |
| NetApp, Inc. | Cloud hosting provider | USA | |
| Okta, Inc. | USA | ||
| OneSignal | Communications technology provider for mobile product notifications and video sharing | USA | |
| OpenAI, L.L.C. AI | Generative AI services provider for intelligence product featuresFor the provision of Atlassian support | USA | |
| Opsgenie Yazılım Anonim Şirketi | Republic of Türkiye | ||
| Partner Hero | Customer service and technical support | Philippines; Romania; South Africa | |
| Plivo, Inc. | Communications technology provider for product notifications | USA | |
| Salesforce, Inc. (Heroku) | Cloud services provider | USA | |
| Snowflake, Inc. | Cloud database provider | USA | |
| SoftServe, Inc. | Customer service, outsourced engineering and technical support | Bulgaria; Poland; United States | |
| Telus, Inc. | Customer service | Romania | |
| Tenable Holdings, Inc. | USA | ||
| Twilio Inc. | Communications technology provider for product notifications; Data analytics service | USA | |
| Vonage APIs (formerly Nexmo, Inc.) | Communications technology provider | USA; UK; Singapore | |
| Work OS, Inc. | SCIM provisioning | USA | |
| Zendesk | Customer service and technical support | USA |
Atlassian affiliates (11)
Web TechnologiesCSV of Atlassian's web technologies · Atom feed of Atlassian's web technologies
Atlassian's homepage made 348 requests to 41 domains, 19 services controlled by another company, and 5 domains not identified.
19 third parties by category: Advertising 8Analytics 3Marketing automation 2Live chat 1Cookie compliance 1Other 4
o11.techroundprincethere.comapiarydata.netpointmediatracker.coms3.amazonaws.com
10 tracked companies loaded by the homepage are not in Atlassian's subprocessor list. A website can use a service without it processing customer data.
Subprocessor of (440)CSV of the companies listing Atlassian · Atom feed of the companies listing Atlassian
10Duke 10duke.com
1mind 1mind.com Atlassian is used as Data Importer’s project tracking and collaboration provider, which may be used to process personal data in the ordinary course of business.
Abacum abacum.ai Internal support collaboration
Abnormal AI abnormal.ai Troubleshooting ticketing system and bug fixes
ACA Group acagroup.be
Accruent accruent.com Business Support
AccuKnox accuknox.com
Addepar addepar.com Operation of an internal support collaboration platform, management of help desk tickets on behalf of Addepar.
Addigy addigy.com
Aditude aditude.com Project management, bug tracking, and customer support (Jira, Confluence)
Adure adure.io
Aembit aembit.io Project tracking
Aforza aforza.com Third party code development, testing and ticketing system
AgentSync agentsync.io Support Sub-Processor (Manage, Contracting, API)
AirCall aircall.io
Aiven aiven.io
Akamai akamai.com Atlassian provides storage services that are part of Akamai's support services for Noname API Security services.Atlassian sub-processors used for the operation of its platform are published here.
Alation alation.com Engineering support ticket processing
AllCode allcode.com Project management, documentation, issue tracking, and collaboration
Allstacks allstacks.com
Anaconda anaconda.com Bug and ticket handling; Internal process management and issue tracking
ansrsource ansrsource.com Collaboration & Productivity; Product management tools
Antavo antavo.com Service desk for Customers
Apica apica.io Integrations for support ticketing system USA
Apiiro apiiro.com Team collaboration and ticketing system
APILayer apilayer.com Support team escalations, internal and external development sprint tracking
Apolicy apolicy.io Customer Support for ticketing and escalation tracking
- AppDirect appdirect.com
Apporto apporto.com Project management and issue tracking
Appsvio appsvio.com Forge hosting services; ticket management; source code repository
Apsona apsona.com Product management tools; Development Documentation
Aqua Security aquasec.com Jira Cloud- technical support case management platform and project management platform
Arctic Wolf arcticwolf.com Internal Ticketing; Internal work tracking & procedures
Ardoq ardoq.com Customer support and incident management
Arkose Labs arkoselabs.com Ticketing & Technical Documentation
Armis armis.com Ticketing
Arvato Systems arvato-systems.com SaaS IT Service Management
Ascendo ascendo.ai Customer support ticketing (Jira Service Management) and internal project & documentation management (Jira, Confluence)
Assent assent.com Customer support, issue tracking, defect escalation, and engineering support.; Issue tracking, defect escalation, and engineering support.
Autohive autohive.com
Avalara avalara.com Cloud-based project management and collaboration software tools
aXcelerate axcelerate.com.au ###### Service Provided Issue tracking ###### Data Accessed Internal ticketing and tracking (No customer data) ###### Safeguards ISO 27001, SOC 2; Collaboration
b.well Connected Health icanbwell.com Service Desk
Balsamiq balsamiq.com Cloud platform for some Balsamiq integrations, marketplace payment processing, and internal operations
Benevity benevity.com Source code repository and ticketing system for production issues and changes. Atlassian has no access to client data within Benevity-managed infrastructure.
Beonic beonic.com
BetterCloud bettercloud.com Project, Ticket, and Operations Management; [Website]( Manages the resolution of errors in the application. Statuspage: subscription to incident and service window updates for File Governance.
BigID bigid.com Bug Tracking
BigTime bigtime.net A native integration between BigTime and Atlassian Jira. Customers must; Customer service ticketing system & product development tracking; opt-in to this integration.; system
BillingPlatform billingplatform.com Atlassian Privacy policy can be viewed here; Service Provided: Operational customer and development support
- Show next 50
ComplianceCSV of Atlassian's compliance · Atom feed of Atlassian's compliance
FedRAMP Marketplace
| Offering | Status | Impact | Agencies | Since |
|---|---|---|---|---|
| Atlassian Government Cloud | Authorized | Moderate | 11 |
Security program
How Atlassian says it manages cybersecurity risk, in its annual report to the SEC.
- Led by
- Chief Information Security Officer reporting to the CTrO and oversees the technical identification
quote
Our Chief Information Security Officer (“CISO”) reports to our CTrO and oversees the technical identification, assessment and management of cybersecurity risks relevant to our business.
- Board oversight
- Audit Committee
quote
Our board of directors considers cybersecurity risk as part of its risk oversight function and has delegated to its audit committee (the “Audit Committee”) oversight of cybersecurity and other information technology risks.
- Frameworks named
- NIST CSF
- ISO 27001
- SOC 2
quote
We design and assess our program based on the National Institute of Standards and Technology Cybersecurity Framework (“NIST CSF”) and Secure Software Development Framework (“SSDF”).
Atlassian holds the following compliance certifications/attestations: ISO 27001, ISO 27018, ISO 22301, SOC 1, SOC 2, HIPAA, IRAP, and BSI C5.
- Outside review
- Engages outside assessors or consultants
quote
Our CTrO and CISO oversee our efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal personnel, threat intelligence, and other information obtained from governmental, public, or private sources, including external consultants engaged by us, and alerts and reports produced by security tools deployed in the IT environment.
- Its own suppliers
- Reviews their security
quote
A third-party risk management process for service providers, suppliers, and vendors.
- Practices named
- Incident response plan
- Vulnerability management
- Threat intelligence
- Security training
Since the fiscal 2025 report: ISO 27001, SOC 2 now named.
Read Item 1C in full
Cybersecurity Risk Management and Strategy
We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management program includes a cybersecurity incident response plan.
We design and assess our program based on the National Institute of Standards and Technology Cybersecurity Framework (“NIST CSF”) and Secure Software Development Framework (“SSDF”). This does not imply that we meet any particular technical standards, specifications, or requirements; we use NIST CSF and SSDF as guides to help us identify, assess, and manage risks from cybersecurity threats relevant to our business.
Cybersecurity risks are incorporated into our overall enterprise risk management program. Our Chief Technology Officer – Enterprise, Chief Trust Officer (“CTrO”) reports to our Chief Executive Officer and oversees our trust and overarching security strategy. Our Chief Information Security Officer (“CISO”) reports to our CTrO and oversees the technical identification, assessment and management of cybersecurity risks relevant to our business.
Our cybersecurity risk management program includes, among other elements:
•Risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment.
•A Security team, principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents.
•The use of external service providers, where appropriate, to assess, test, respond to or otherwise assist with aspects of our security controls, as well as maturity assessments of our cybersecurity program.
•Implementation of new hire and annual data privacy and cybersecurity training of all employees, including senior management; annual role-based training for employees in specific incident response roles, as well as for employees with specific access to systems, devices, or locations, and targeted cybersecurity incident simulation training held on a recurring basis.
•Incident response playbooks and standard operating procedures outlining procedures for detecting, responding to, and mitigating cybersecurity incidents. Depending on the nature and severity of an incident, responses may involve escalating notification to our Chief Executive Officer and our board of directors.
•Post-incident reviews are conducted for major incidents, and to determine steps that may be taken to mitigate identified risks and reduce the likelihood of reoccurrence.
•Internal policies designed to protect our systems and operations, including (1) a data classification and labelling standard to evaluate the confidentiality level of internal information, (2) a cloud continuity policy to address experience disruption for cloud customers, and (3) a business resilience policy to provide a framework for operations during and after disruption events.
•A third-party risk management process for service providers, suppliers, and vendors. Such service providers are subject to risk tiering, security risk assessments, and recurring reviews, as applicable. When third-party provider incidents occur, we assess their materiality to our operations and investigate accordingly.
•Atlassian holds the following compliance certifications/attestations: ISO 27001, ISO 27018, ISO 22301, SOC 1, SOC 2, HIPAA, IRAP, and BSI C5.
We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, whether individually or in the aggregate, have materially affected or are reasonably likely to materially affect us, our business, and our results of operations in Part I, Item 1A in this Annual Report on Form 10-K, which disclosures are incorporated by reference herein.
Cybersecurity Governance
Our board of directors considers cybersecurity risk as part of its risk oversight function and has delegated to its audit committee (the “Audit Committee”) oversight of cybersecurity and other information technology risks. The Audit Committee oversees management’s implementation of our cybersecurity risk management program, and it reports to the full board of directors regarding its activities, including those related to cybersecurity. Our CTrO and CISO provide updates on significant risks to the Audit Committee quarterly and also provide updates to the full board of directors at least biannually. Outside of regular meetings, depending on the nature and severity of an incident, our CTrO and CISO will also inform the Audit Committee, Chief Executive Officer, and the rest of the board of directors of significant cybersecurity incidents.
Our CTrO leads our Trust and Security organization, focusing on maintaining customer trust and overseeing the overall security posture of the company. The CTrO’s role involves managing cybersecurity risks and reviewing whether the company’s security practices align with customer expectations and industry standards. Our CISO leads our Security organization and is responsible for all security-related activities and controls at Atlassian. This includes defining the security strategy, developing, and enforcing security standards, and managing security technologies. The CISO also oversees security operations, incident response, and oversees compliance with applicable legal and regulatory requirements. Our CTrO has served in his role since October 2023 and has experience in the cybersecurity space, including previously serving as Chief Trust Officer of a large publicly-traded enterprise software company. Our CISO has served in his role since December 2024 and also has experience in cybersecurity, including serving as Chief Information Security Officer of a large publicly-traded enterprise software company. Our CTrO and CISO oversee our efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal personnel, threat intelligence, and other information obtained from governmental, public, or private sources, including external consultants engaged by us, and alerts and reports produced by security tools deployed in the IT environment.
Within the Trust and Security organizations, we implement a structured approach to proactively manage cybersecurity risks. Our Security Governance, Risk and Compliance team monitors, assesses, and coordinates proactive identification and remediation efforts for cybersecurity risks impacting Atlassian. This team partners cross-functionally with others in the Security organization and individuals from our legal, internal audit, engineering, and product development teams. Our Security team includes individuals with experience across a broad range of cybersecurity areas, including, but not limited to: product security; cloud security; infrastructure security; security monitoring and incident response; identity and access management; vulnerability management; and governance, risk, and compliance.
Security program from Atlassian Corp's Form 10-K for fiscal 2026, filed Aug 14, 2026, Item 1C, in its words (evidence) FedRAMP status from the FedRAMP Marketplace (evidence)
Security recordCSV of Atlassian's security record · Atom feed of Atlassian's security record
What public security catalogs list for Atlassian, in their words.
Known exploited vulnerabilities
14 vulnerabilities in Atlassian's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2026-21589 | Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | |
| CVE-2021-26086 | Jira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | |
| CVE-2023-22527 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Template Injection Vulnerability used by ransomware | |
| CVE-2023-22518 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability used by ransomware | |
| CVE-2023-22515 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability used by ransomware | |
| CVE-2022-36804 | Bitbucket Server and Data Center | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | |
| CVE-2022-26138 | Confluence | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | |
| CVE-2022-26134 | Confluence Server/Data Center | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability used by ransomware | |
| CVE-2021-26085 | Confluence Server | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability used by ransomware | |
| CVE-2019-11581 | Jira Server and Data Center | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability |
4 more
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2019-11580 | Crowd and Crowd Data Center | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability used by ransomware | |
| CVE-2019-3396 | Confluence Server and Data Server | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability used by ransomware | |
| CVE-2019-3398 | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | |
| CVE-2021-26084 | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability used by ransomware |
Source: CISA Known Exploited Vulnerabilities catalog (evidence)
Service statusCSV of Atlassian's status page incidents · Atom feed of Atlassian's status page incidents
90 days agotoday
No incidents reported in the last 12 months The last it reported began : Issues with 403 user authentication errors across Atlassian products
As Atlassian's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)
Incidents reported by Atlassian's subprocessorsCSV of incidents reported by vendors Atlassian lists · Atom feed of incidents reported by vendors Atlassian lists
240 reported incidents in the last 30 days, by 10 of the vendors Atlassian lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Atlassian was involved.
And 215 more. All of them: CSV · Who is around them.
ChangesCSV of Atlassian's changes · Atom feed of Atlassian's changes
See the list as we read it on any date: Time machine
- Changed subprocessor: Amazon Web Services, Inc. locations: EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA, India, Japan, Singapore, USA, USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Ba… evidence: subprocessor: Amazon Web Services, Inc. list before and after: subprocessor: Amazon Web Services, Inc.
- Changed subprocessor: Cloudflare, Ltd. purpose: Content delivery network provider, Hosting provider for the Remote Model Context Protocol (MCP) Server → Content delivery network provider, Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server; services: Atlas, Atlassian Guard (Access/Guard … evidence: subprocessor: Cloudflare, Ltd. list before and after: subprocessor: Cloudflare, Ltd.
- Changed subprocessor: Clumio, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Clumio, Inc. list before and after: subprocessor: Clumio, Inc.
- Changed subprocessor: Databricks, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Forge, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including … evidence: subprocessor: Databricks, Inc. list before and after: subprocessor: Databricks, Inc.
- Changed subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. list before and after: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda.
- Changed subprocessor: Google Vertex AI purpose: Generative AI services provider for intelligence product features, Maintenance of service, safety, and security, Provision of Atlassian support → Generative AI services provider for intelligence product features, Provision of Atlassian supportMaintenance of service, safety, and security; … evidence: subprocessor: Google Vertex AI list before and after: subprocessor: Google Vertex AI
- Changed subprocessor: Mailgun Technologies, Inc. services: Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery (JPD), Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Opsgenie, Statuspage → Jira Cloud (including Jira Software and Jira Work Management)Jira Product Discovery (… evidence: subprocessor: Mailgun Technologies, Inc. list before and after: subprocessor: Mailgun Technologies, Inc.
- Changed subprocessor: MessageBird USA, Inc, (d/b/a Bird) services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work M… evidence: subprocessor: MessageBird USA, Inc, (d/b/a Bird) list before and after: subprocessor: MessageBird USA, Inc, (d/b/a Bird)
- Changed subprocessor: OpenAI, L.L.C. purpose: For the provision of Atlassian support, Generative AI services provider for intelligence product features → Generative AI services provider for intelligence product featuresFor the provision of Atlassian support evidence: subprocessor: OpenAI, L.L.C. list before and after: subprocessor: OpenAI, L.L.C.
- Changed subprocessor: SoftServe, Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Statuspage → Bitbucket Cloud (i… evidence: subprocessor: SoftServe, Inc. list before and after: subprocessor: SoftServe, Inc.
- Changed subprocessor: Telus, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Telus, Inc. list before and after: subprocessor: Telus, Inc.
- Changed subprocessor: Twilio Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management (JSM), Loom, Opsgenie, Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)Com… evidence: subprocessor: Twilio Inc. list before and after: subprocessor: Twilio Inc.
- Changed subprocessor: Mailgun Technologies, Inc. services: Jira Cloud (including Jira Software and Jira Work Management)Jira Product Discovery (JPD)Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) OpsgenieStatuspage → Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery (JPD),… evidence: subprocessor: Mailgun Technologies, Inc. list before and after: subprocessor: Mailgun Technologies, Inc.
- Changed subprocessor: Amazon Web Services, Inc. locations: USA, USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Bahrain, Mexico, Brazil → EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA,… evidence: subprocessor: Amazon Web Services, Inc. list before and after: subprocessor: Amazon Web Services, Inc.
- Changed subprocessor: Cloudflare, Ltd. purpose: Content delivery network provider, Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server → Content delivery network provider, Hosting provider for the Remote Model Context Protocol (MCP) Server; services: AtlasAtlassian Guard (Access/Guard fa… evidence: subprocessor: Cloudflare, Ltd. list before and after: subprocessor: Cloudflare, Ltd.
- Changed subprocessor: Clumio, Inc. services: AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, an… evidence: subprocessor: Clumio, Inc. list before and after: subprocessor: Clumio, Inc.
- Changed subprocessor: Databricks, Inc. services: AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, an… evidence: subprocessor: Databricks, Inc. list before and after: subprocessor: Databricks, Inc.
- Changed subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. services: AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, an… evidence: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. list before and after: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda.
- Changed subprocessor: Google Vertex AI purpose: Generative AI services provider for intelligence product features, Provision of Atlassian supportMaintenance of service, safety, and security → Generative AI services provider for intelligence product features, Maintenance of service, safety, and security, Provision of Atlassian support; … evidence: subprocessor: Google Vertex AI list before and after: subprocessor: Google Vertex AI
- Changed subprocessor: MessageBird USA, Inc, (d/b/a Bird) services: Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work Management)StatuspageTrello, Forge → Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Wor… evidence: subprocessor: MessageBird USA, Inc, (d/b/a Bird) list before and after: subprocessor: MessageBird USA, Inc, (d/b/a Bird)
- Changed subprocessor: OpenAI, L.L.C. purpose: Generative AI services provider for intelligence product featuresFor the provision of Atlassian support → For the provision of Atlassian support, Generative AI services provider for intelligence product features evidence: subprocessor: OpenAI, L.L.C. list before and after: subprocessor: OpenAI, L.L.C.
- Changed subprocessor: SoftServe, Inc. services: Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work Management)Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Jira Product DiscoveryStatuspage, Forge → Bitbucket Cloud (including Bi… evidence: subprocessor: SoftServe, Inc. list before and after: subprocessor: SoftServe, Inc.
- Changed subprocessor: Telus, Inc. services: AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, an… evidence: subprocessor: Telus, Inc. list before and after: subprocessor: Telus, Inc.
- Changed subprocessor: Twilio Inc. services: Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work Management)Jira Service Management (JSM) Jira Product DiscoveryOpsgenieStatuspageTrello, Forge, Loom → Bitbucket Cloud (including Bitbucket Pipelines), Compass, Conflue… evidence: subprocessor: Twilio Inc. list before and after: subprocessor: Twilio Inc.
- Changed subprocessor: Amazon Web Services, Inc. locations: EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA, India, Japan, Singapore, USA, USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Ba… evidence: subprocessor: Amazon Web Services, Inc. list before and after: subprocessor: Amazon Web Services, Inc.
- Changed subprocessor: Cloudflare, Ltd. purpose: Content delivery network provider, Hosting provider for the Remote Model Context Protocol (MCP) Server → Content delivery network provider, Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server; services: Atlas, Atlassian Guard (Access/Guard … evidence: subprocessor: Cloudflare, Ltd. list before and after: subprocessor: Cloudflare, Ltd.
- Changed subprocessor: Clumio, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Clumio, Inc. list before and after: subprocessor: Clumio, Inc.
- Changed subprocessor: Databricks, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Forge, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including … evidence: subprocessor: Databricks, Inc. list before and after: subprocessor: Databricks, Inc.
- Changed subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. list before and after: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda.
- Changed subprocessor: Google Vertex AI purpose: Generative AI services provider for intelligence product features, Maintenance of service, safety, and security, Provision of Atlassian support → Generative AI services provider for intelligence product features, Provision of Atlassian supportMaintenance of service, safety, and security; … evidence: subprocessor: Google Vertex AI list before and after: subprocessor: Google Vertex AI
- Changed subprocessor: Mailgun Technologies, Inc. services: Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery (JPD), Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Opsgenie, Statuspage → Jira Cloud (including Jira Software and Jira Work Management)Jira Product Discovery (… evidence: subprocessor: Mailgun Technologies, Inc. list before and after: subprocessor: Mailgun Technologies, Inc.
- Changed subprocessor: MessageBird USA, Inc, (d/b/a Bird) services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work M… evidence: subprocessor: MessageBird USA, Inc, (d/b/a Bird) list before and after: subprocessor: MessageBird USA, Inc, (d/b/a Bird)
- Changed subprocessor: OpenAI, L.L.C. purpose: For the provision of Atlassian support, Generative AI services provider for intelligence product features → Generative AI services provider for intelligence product featuresFor the provision of Atlassian support evidence: subprocessor: OpenAI, L.L.C. list before and after: subprocessor: OpenAI, L.L.C.
- Changed subprocessor: SoftServe, Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Statuspage → Bitbucket Cloud (i… evidence: subprocessor: SoftServe, Inc. list before and after: subprocessor: SoftServe, Inc.
- Changed subprocessor: Telus, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Telus, Inc. list before and after: subprocessor: Telus, Inc.
- Changed subprocessor: Twilio Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management (JSM), Loom, Opsgenie, Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)Com… evidence: subprocessor: Twilio Inc. list before and after: subprocessor: Twilio Inc.
- Changed subprocessor: Amazon Web Services, Inc. locations: EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA, India, Japan, Singapore, USA, USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Ba… evidence: subprocessor: Amazon Web Services, Inc. list before and after: subprocessor: Amazon Web Services, Inc.
- Changed subprocessor: Cloudflare, Ltd. purpose: Content delivery network provider, Hosting provider for the Remote Model Context Protocol (MCP) Server → Content delivery network provider, Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server; services: Atlas, Atlassian Guard (Access/Guard … evidence: subprocessor: Cloudflare, Ltd. list before and after: subprocessor: Cloudflare, Ltd.
- Changed subprocessor: Clumio, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Clumio, Inc. list before and after: subprocessor: Clumio, Inc.
- Changed subprocessor: Databricks, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Forge, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including … evidence: subprocessor: Databricks, Inc. list before and after: subprocessor: Databricks, Inc.
- Changed subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. list before and after: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda.
- Changed subprocessor: Google Vertex AI purpose: Generative AI services provider for intelligence product features, Maintenance of service, safety, and security, Provision of Atlassian support → Generative AI services provider for intelligence product features, Provision of Atlassian supportMaintenance of service, safety, and security; … evidence: subprocessor: Google Vertex AI list before and after: subprocessor: Google Vertex AI
- Changed subprocessor: Mailgun Technologies, Inc. services: Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery (JPD), Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Opsgenie, Statuspage → Jira Cloud (including Jira Software and Jira Work Management)Jira Product Discovery (… evidence: subprocessor: Mailgun Technologies, Inc. list before and after: subprocessor: Mailgun Technologies, Inc.
- Changed subprocessor: MessageBird USA, Inc, (d/b/a Bird) services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work M… evidence: subprocessor: MessageBird USA, Inc, (d/b/a Bird) list before and after: subprocessor: MessageBird USA, Inc, (d/b/a Bird)
- Changed subprocessor: OpenAI, L.L.C. purpose: For the provision of Atlassian support, Generative AI services provider for intelligence product features → Generative AI services provider for intelligence product featuresFor the provision of Atlassian support evidence: subprocessor: OpenAI, L.L.C. list before and after: subprocessor: OpenAI, L.L.C.
- Changed subprocessor: SoftServe, Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Statuspage → Bitbucket Cloud (i… evidence: subprocessor: SoftServe, Inc. list before and after: subprocessor: SoftServe, Inc.
- Changed subprocessor: Telus, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Telus, Inc. list before and after: subprocessor: Telus, Inc.
- Changed subprocessor: Twilio Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management (JSM), Loom, Opsgenie, Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)Com… evidence: subprocessor: Twilio Inc. list before and after: subprocessor: Twilio Inc.
- Changed subprocessor: Amazon Web Services, Inc. locations: USA, USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Bahrain, Mexico, Brazil → EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA,… evidence: subprocessor: Amazon Web Services, Inc. list before and after: subprocessor: Amazon Web Services, Inc.
- Changed subprocessor: Cloudflare, Ltd. purpose: Content delivery network provider, Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server → Content delivery network provider, Hosting provider for the Remote Model Context Protocol (MCP) Server; services: AtlasAtlassian Guard (Access/Guard fa… evidence: subprocessor: Cloudflare, Ltd. list before and after: subprocessor: Cloudflare, Ltd.