Atlassian
atlassian.com · developer-tools
Atlassian declares 30 subprocessors, plus 11 of its own affiliates, in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. The list last changed on Nov 4, 2026: 0 added, 0 removed, 12 changed. 442 tracked vendors name Atlassian as a subprocessor, including Mailgun, Databricks and New Relic.
Includes: Bitbucket, Statuspage, Trello
Subprocessors CSV of Atlassian's subprocessors · Atom feed of Atlassian's subprocessors DORA draft CSV of Atlassian's subprocessors as declared by Atlassian what's this? ·
30 third parties, 11 affiliates.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting provider; Cloud hosting providerProvision of Atlassian support; Generative AI services provider for intelligence developer features; Generative AI services provider for intelligence product features; Provision of Atlassian supportMaintenance of service, safety, and security | USA; USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Bahrain, Mexico, Brazil | |
| Cantab Research Ltd (trading as Speechmatics) AI | Transcription services | USA | |
| Cloudflare, Ltd. | Content delivery network provider; Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server | Customer traffic is processed globally at the data center closest to the end user. | |
| Clumio, Inc. | Backup solutions provider for Amazon Simple Storage Service (S3) | EEA, UK, Australia, USA, and Singapore | |
| Crowdstrike | USA | ||
| Databricks, Inc. | Infrastructure provider for machine learning development, processing and training; Infrastructure provider to enable End User Personal Data querying and analytics features for Forge Apps.; Infrastructure provider to enable customer data querying, and analytics product features. | USA | |
| e-Core Soluções em Tecnologia da Informaçiupão Ltda. | Customer service, support, and cloud migration service provider | Brazil; Mexico | |
| Google LLC | File Storage | USA | |
| Google Vertex AI AI | Generative AI services provider for intelligence product features; Provision of Atlassian supportMaintenance of service, safety, and security | USA, EEA (Belgium, Netherlands, Finland), Singapore, Taiwan | |
| Mailchimp | Communications technology provider for product notifications and video sharing over email | USA | |
| Mailgun Technologies, Inc. | Communications technology provider for product notifications | USA; EEA | |
| MessageBird USA, Inc, (d/b/a Bird) | Communications technology provider for product notifications | USA; EEA | |
| Microsoft Corporation | Cloud hosting provider | USA; Australia; Netherlands | |
| MongoDB, Inc. | Cloud hosting provider for JSM Chat (formerly Halp) | USA | |
| NetApp, Inc. | Cloud hosting provider | USA | |
| Okta, Inc. | USA | ||
| OneSignal | Communications technology provider for mobile product notifications and video sharing | USA | |
| OpenAI, L.L.C. AI | Generative AI services provider for intelligence product featuresFor the provision of Atlassian support | USA | |
| Opsgenie Yazılım Anonim Şirketi | Republic of Türkiye | ||
| Partner Hero | Customer service and technical support | Philippines; Romania; South Africa | |
| Plivo, Inc. | Communications technology provider for product notifications | USA | |
| Salesforce, Inc. (Heroku) | Cloud services provider | USA | |
| Snowflake, Inc. | Cloud database provider | USA | |
| SoftServe, Inc. | Customer service, outsourced engineering and technical support | Bulgaria; Poland; United States | |
| Telus, Inc. | Customer service | Romania | |
| Tenable Holdings, Inc. | USA | ||
| Twilio Inc. | Communications technology provider for product notifications; Data analytics service | USA | |
| Vonage APIs (formerly Nexmo, Inc.) | Communications technology provider | USA; UK; Singapore | |
| Work OS, Inc. | SCIM provisioning | USA | |
| Zendesk | Customer service and technical support | USA |
Atlassian affiliates (11)
Web TechnologiesCSV of Atlassian's web technologies · Atom feed of Atlassian's web technologies
Atlassian's homepage made 348 requests to 41 domains, 19 services controlled by another company, and 5 domains not identified.
19 third parties by category: Advertising 8Analytics 3Marketing automation 2Live chat 1Cookie compliance 1Other 4
Third parties 19 · 270 requests
X Corp. Twitter Ads 17
6Sense Insights, Inc. 6sense 15
The Trade Desk, Inc. theTradeDesk 8
Reddit, Inc. Reddit Ads 3
TechTarget, Inc. TechTarget 2
Magnite, Inc. rubiconproject.com 1
Unknown 5 · 20 requests
o11.techroundprincethere.comapiarydata.netpointmediatracker.coms3.amazonaws.com
First party 1 · 58 requests
Atlassian Amazon CloudFront Amazon Web Services Atlassian Bitbucket Contentsquare HSTS HTTP/3 Intercom Open Graph Priority Hints Python React Sentry Statsig 3.33.3 Uniform Digital Experience Vimeo core-js 2.6.12 58
10 tracked companies loaded by the homepage are not in Atlassian's subprocessor list. A website can use a service without it processing customer data.
Subprocessor of (442)CSV of the companies listing Atlassian · Atom feed of the companies listing Atlassian
10Duke 10duke.com
1mind 1mind.com Atlassian is used as Data Importer’s project tracking and collaboration provider, which may be used to process personal data in the ordinary course of business.
Abacum abacum.ai Internal support collaboration
Abnormal AI abnormal.ai Troubleshooting ticketing system and bug fixes
ACA Group acagroup.be
Accruent accruent.com Business Support
AccuKnox accuknox.com
Addepar addepar.com Operation of an internal support collaboration platform, management of help desk tickets on behalf of Addepar.
Addigy addigy.com
Aditude aditude.com Project management, bug tracking, and customer support (Jira, Confluence)
Adure adure.io
Aembit aembit.io Project tracking
Aforza aforza.com Third party code development, testing and ticketing system
AgentSync agentsync.io Support Sub-Processor (Manage, Contracting, API)
AirCall aircall.io
Aiven aiven.io
Akamai akamai.com Atlassian provides storage services that are part of Akamai's support services for Noname API Security services.Atlassian sub-processors used for the operation of its platform are published here.
Alation alation.com Engineering support ticket processing
AllCode allcode.com Project management, documentation, issue tracking, and collaboration
Allstacks allstacks.com
Anaconda anaconda.com Bug and ticket handling; Internal process management and issue tracking
ansrsource ansrsource.com Collaboration & Productivity; Product management tools
Antavo antavo.com Service desk for Customers
Apica apica.io Integrations for support ticketing system USA
Apiiro apiiro.com Team collaboration and ticketing system
APILayer apilayer.com Support team escalations, internal and external development sprint tracking
Apolicy apolicy.io Customer Support for ticketing and escalation tracking
- AppDirect appdirect.com
Apporto apporto.com Project management and issue tracking
Appsvio appsvio.com Forge hosting services; ticket management; source code repository
Apsona apsona.com Product management tools; Development Documentation
Aqua Security aquasec.com Jira Cloud- technical support case management platform and project management platform
Arctic Wolf arcticwolf.com Internal Ticketing; Internal work tracking & procedures
Ardoq ardoq.com Customer support and incident management
Arkose Labs arkoselabs.com Ticketing & Technical Documentation
Armis armis.com Ticketing
Arvato Systems arvato-systems.com SaaS IT Service Management
Ascendo ascendo.ai Customer support ticketing (Jira Service Management) and internal project & documentation management (Jira, Confluence)
Assent assent.com Customer support, issue tracking, defect escalation, and engineering support.; Issue tracking, defect escalation, and engineering support.
Autohive autohive.com
Avalara avalara.com Cloud-based project management and collaboration software tools
aXcelerate axcelerate.com.au ###### Service Provided Issue tracking ###### Data Accessed Internal ticketing and tracking (No customer data) ###### Safeguards ISO 27001, SOC 2; Collaboration
b.well Connected Health icanbwell.com Service Desk
Balsamiq balsamiq.com Cloud platform for some Balsamiq integrations, marketplace payment processing, and internal operations
Benevity benevity.com Source code repository and ticketing system for production issues and changes. Atlassian has no access to client data within Benevity-managed infrastructure.
Beonic beonic.com
BetterCloud bettercloud.com Project, Ticket, and Operations Management; [Website]( Manages the resolution of errors in the application. Statuspage: subscription to incident and service window updates for File Governance.
BigID bigid.com Bug Tracking
BigTime bigtime.net A native integration between BigTime and Atlassian Jira. Customers must; Customer service ticketing system & product development tracking; opt-in to this integration.; system
BillingPlatform billingplatform.com Atlassian Privacy policy can be viewed here; Service Provided: Operational customer and development support
BioRender biorender.com
Bitbucket bitbucket.org
BitTitan bittitan.com Agile project management
Blackboard blackboard.com Status of Anthology services, maintenance announcements
BlackFog blackfog.com Customer support
Blink Charging blinkcharging.com Collaboration
Bluebeam bluebeam.com Project, issue tracking, documentation, and product management across engineering and product teams.
Botdoc botdoc.io Operational incidents management; Software development and collaboration
Branch branch.io Internal ticketing platform
BrightLocal brightlocal.com Collaboration and project management
Bronto bronto.io Support Recordings (customer optional); Collaboration
BrowserStack browserstack.com Project management, activity tracking, and documentation
BuildBetter buildbetter.ai BuildBetter Product Suite
Bullhorn bullhorn.com Customer support
bunny.net bunny.net We use Atlassian internal bug tracking, plus feature requests, account owners information is passed from ZenDesk to be able to report back to the user. If the customer has chosen to provide further information such as customer logs, this would also be included in Atlassian.
- Businesswire businesswire.com Contracting process
C3 AI c3.ai Customer Service & Support
Capcade capcade.com Incident communication and status reporting; Project management, issue tracking, and collaboration platform
Capsule8 capsule8.com Internal requests and project tracking
Carta carta.com Provides a cloud-based bug tracking system, where we may process end user data to the extent necessary to reproduce and fix bugs, and in general as necessary to deliver and improve the Carta Europe services.
Catapult Sports catapultsports.com Customer support services
Caylent caylent.com Project Management Tool
Celigo celigo.com Ticketing System
Certara certara.com Customer service and bug tracking / project management (Jira, Confluence)
Chartbeat chartbeat.com Hosting platform for Chartbeat status page; Atlassian Jira, Customer issue tracking; Cloud tickets and document hosting
Checkmk checkmk.com Service desk infrastructure for the provision of Support Services.
Checkr checkr.com Productivity Tools
CirrusMD cirrusmd.com Cloud-based issue and project tracking solution
Claroty claroty.com
Click2Mail click2mail.com
ClickTime clicktime.com Collaboration; Project management and collaboration. AI-assisted features are enabled for internal ClickTime use only. Customer data in Jira is not used to train Atlassian’s AI models.
ClientSuccess clientsuccess.com Product Development, Customer Support
CloudBlue cloudblue.com Third Party
Cloudinary cloudinary.com Support & Operations
CloudM cloudm.io Developer process management
CloudResearch cloudresearch.com
Cloudshelf cloudshelf.ai Collaboration & Productivity; Product management tools
Clueso clueso.io Customer-authorised repository access, read-only
CoachAccountable coachaccountable.com Screencast sharing
Coalfire coalfire.com CF1 User Support Platform
Cognite AS cognite.com Tracking of issues, which may include customer information such as requester and details about the issue.
Collibra collibra.com Engineering support ticket processing
commercetools commercetools.com Administration of Support Tickets
Confluent confluent.io Bug Reporting / Issue Tracking
Contentsquare contentsquare.com Customer support and ticketing services
Conveo conveo.ai **Processing Activity Description** Sharing of video screencasts internally and externally for collaboration and communication purposes. **Data Residency / Processing Location** United States *(EU data residency in Germany announced for May 2026)* **Headquarters Location** San Francisco, United States (subsidiary of Atlassian Corporation)
Coralogix coralogix.com Internal support collaboration
Couchbase couchbase.com Customer support services
Cribl cribl.io
Critical Cloud criticalcloud.ai Collaboration
Crownpeak crownpeak.com Europe Development planning, Europe tracking and agile methodology management. Bug, issue, project tracking and resource planning.
Culture Amp cultureamp.com Atlassian provides project management and collaboration tools used by Culture Amp including Confluence, Jira and Trello.
Cyara cyara.com Project Management
Cyberbit cyberbit.com Customer support requests and technical support Baremetal hosting provider for
Cyberhaven cyberhaven.com Support tickets
D2L d2l.com Internal Operations; Used by D2L for project management, knowledge bases and other business operations.
Darktrace darktrace.com Production issues/incidents tracking and communication
Darktrace Federal darktracefederal.com Production issues/incidents tracking and communication
Data Zoo datazoo.com Bug and Issue Tracking; Task Tracking; Technical Project Management
Databricks databricks.com Customer support and ticket handling.
DaVinci Commerce jivox.com
Deepgram deepgram.com Collaboration and documentation software by Atlassian.
Delinea delinea.com Manage customer support tickets; Product Support
DEPT dept.global Onboarding ticketing management platformLocation of processing: EuropePrivacy statement
Devenue devenue.ai Product management tools
DevSamurai devsamurai.com
Digicert digicert.com Manage customer implementations, service operations, outage reporting, and
Digistorm AU digistorm.com Internal Business Operations - Applications, Services, and Support; Sales & Marketing; Support tickets & documentation
Dock dock.us Video sharing
Domo domo.com IT Consulting Services, Professional Services
DoseSpot dosespot.com Work-tracking and project management collaboration tools
DoubleCloud double.cloud Internal support collaboration tool.
Duda duda.co Bug Tracking / Application Monitoring
Dynatrace dynatrace.com
Effy AI effy.ai Customer Support (Loom)
Egnyte egnyte.com
Eightfold AI eightfold.ai Product support & management
Ema ema.ai Ticketing
Employment Hero employmenthero.com Collaboration; Processing Activity: Comprehensive issue tracking, agile project management, and team collaboration across development and operations teams. GDPR Transfer Mechanism: Standard Contractual Clauses
Endor Labs endorlabs.com Knowledge Base and Ticketing
Enzuzo enzuzo.com Project Management
eOne Solutions eonesolutions.com Ticketing system
etailinsights etailinsights.com Customer and product support
EverTrue evertrue.com Bug tracking
Evisions evisions.com Collaboration; Jira is a product that allows bug tracking, issue tracking and agile project management.
Experian experian.com Atlassian provide Jira and Confluence which are used for tracking work requests and tickets.; Sub-Processor; Sub-processor
Explorium explorium.ai Collaboration and issue tracking
Exterro exterro.com Collaboration; Customer Support and Engineering Management
Eyeota eyeota.com Ticketing Platform to support Eyeota internal requests and requests made by selected data partners and platform partners
Feature Upvote featureupvote.com Integration
Feedly Threat Intelligence feedly.com Customer Support
Fenergo fenergo.com Jira by Atlassian is a work management and issue-tracking tool teams use to plan, track, and deliver software (and other projects) using workflows, backlogs, and agile boards.; Purpose: Customer support ticketing platform (Jira Service). Applicable Service(s): Fenergo SaaS. Types of Personal Data Processed: Relationship Data (i.e., name, email, contact number).
- FICO fico.com Management of agile user stories to assist with the development of FICO’s SaaS Services for the purposes of enhancement and debugging
Fiddler AI fiddler.ai Issue tracking
Filestack filestack.com ● Business contact information; ● Project management; ● Status page
FINBOURNE finbourne.com
Finsweet finsweet.com Collaboration; Quick video messaging for async team communication.
FireTail firetail.ai Project Management tools including Wiki, Task and ticket tracking, To-do lists.
Fluent Commerce fluentcommerce.com Globally distributed storage across Australia, Singapore, EU, USA; Storing
Flybits flybits.com
Flywire flywire.com Support Service desk
Fountain fountain.com Bug tracking, manage Service improvements, resolve customer support tickets
FrankieOne frankieone.com Technical project management, task tracking, supporting ticketing
FreedomPay freedompay.com Internal knowledge base and developer portal
Friendbuy friendbuy.com Merchant support
FundApps fundapps.co
GaggleAMP gaggleamp.com Video messaging tool that helps you get your message across through instantly shareable videos; Software we use to help product and software development
Genetec genetec.com Provides product status reports via email, SMS or RSS feed (status page)
Gigamon gigamon.com
Givecloud givecloud.com Task management
GlassHive glasshive.com Ticket management
Go Autonomous goautonomous.io Active participant in EU-US Data Privacy Framework.; Atlassian provides tools for collaboration, development, and communication including Confluence, Loom and Jira products.; DPA: https://www.atlassian.com/legal/data-processing-addendum; Data is localized in EU.; Security: https://www.atlassian.com/legal/security-measures; Trust center: https://www.atlassian.com/trust
GoCanvas gocanvas.com Internal Ticketing and Change Management / Jira Software offers the features in Jira Work Management and includes the functionality that software development teams need to plan, track, and ship software products. Software teams use this tool for bug tracking, managing basic software-development tasks, and project management.
Graphwise graphwise.ai Issue Management
Great Question greatquestion.com Async video messaging used by our team for walkthroughs and support.; Video messaging and collaboration
Guesty guesty.com
Happay happay.com Development Documentation
Happeo happeo.com Management of engineering tasks and issue resolution; __Applicable Transfer Mechanism:__ N/A
Harness.io harness.io -- Customer Support and Engagement -- Customer Support
Higher Logic higherlogic.com Support & Development
Highwire highwire.com Issue tracking, bug management, and internal project data
Hivel hivel.ai
Horizon3.ai horizon3.ai Collaboration toolset for wiki pages as well as tracking development work that can reference items such as feature requests from customers.; SaaS Collaboration Toolset
Hotjar hotjar.com Customer support and ticketing services
Humanforce humanforce.com - Processing Purpose: Team collaboration and ticketing - Type of Data: No personal data, internal correspondence and metadata only. - Processing duration: For the duration of the agreement, unless otherwise mutually agreed. - Modules Applicable: WFM, HR, Talent, Benefits.; Collaboration
Hypatos hypatos.ai Jira Service Management - service desk for customer support
Hyperscience hyperscience.com Cloud-based Support Ticketing and Documentation
Ibexlabs ibexlabs.com Product management tools
Idera idera.com Development and Collaboration
IDEXX idexx.com Internal tracking services for defects; Internal tracking services for defects and for the delivery of products; Internal tracking services for defects and projects; and projects
IKASI ikasi.ai Collaboration
Immersive Labs immersivelabs.com Jira – Customer service
Imperva imperva.com Customer support management services
Improvado improvado.io Customer support ticketing (Jira Service Management)
InCountry incountry.com Security Event & Incident Management
Infoblox infoblox.com Enhancements.; Jira is a tracking system for bugs and Requests for; Jira software – Ticketing; System / RFEs
- Infrascale infrascale.com Customer Relationship Management, Contract Engagement; Internal Ticketing
Intapp intapp.com Video recording for screen for Customer Support
ipapi ipapi.com Support team escalations, internal and external development sprint tracking
Juniper Square junipersquare.com
Kaltura kaltura.com Project management and collaboration
Katalon katalon.com Customer support and ticket handling
Keyplay keyplay.io Business Apps & Productivity
Khoros khoros.ai Product support tool for Professional Services issue tracking and project management
Kira Talent kiratalent.com Centralized Task Management
Klaviyo klaviyo.com Call Recording Customer Support (Customer Optional)
Komodo Health komodohealth.com Technology and services related to code management, documentation, planning and collaboration
KORE Software koresoftware.com
Korn Ferry kornferry.com
Kryterion kryterion.com
Kubit kubit.ai Proprietary issue tracking and product development
Kudosity kudosity.com Collaboration and project management
Labra labra.io Jira is a cloud-based project management tool that stores, tracks, and manages all software development workflows and issues. Team task boards, project roadmaps, and bug reports are hosted in a centralized workspace where sprint planning, automated tracking, and release management services are offered.
LambdaTest testmuai.com Infrastructure Capacity Monitoring & Alerting; Project management and product & engineering related activity tracking, product quality documentation.
Landbot landbot.io Collaboration; Ticketing and workflow management for customer support and handling issues related to our platform. *Customer contact details (name, email, company), ticket content and comments, and attachments/logs that may include customer data.*
Lattice lattice.com Customer Support (Loom)
Leadbeam leadbeam.ai Streamline collaboration and project management
LearnUpon learnupon.com Project Management
Limio limio.com Collaboration; Used for product feature requests and bug tracking of Limio’s customers. Jira may be used to process certain end-user personal data in connection with such requests.
LiquidPlanner liquidplanner.com Confluence is used for internal documentation, knowledge sharing, and team collaboration.; Customer Support and Communication; Rovo is used for AI-powered search and knowledge discovery across our Atlassian tools.; We use Atlassian Community to engage users, share best practices, and for other product-related issues.; We use Jira and Jira Service Management to track customer-reported bugs, incidents, support tickets, and internal development work.
Litmos litmos.com
Lob.com lob.com Customer Support
Loopio loopio.com Team collaboration – similar to BitBucket and Jira
Lucid Software lucid.co Content management and issue/project tracking
Lumify Work lumifywork.com Development project management; Collaboration wiki
Luminai luminai.com Issue tracking and project management
MacStadium macstadium.com Service provisioning & customer support (Jira, Confluence, Trello, OpsGenie, Statuspage)
Maestro AI getmaestro.ai Collaboration and productivity
Magnolia magnolia-cms.com Customer Support
Mailgun mailgun.com Incident Management; Support ticket; tracking,
Malwarebytes malwarebytes.org Customer Feedback
MangoApps mangoapps.com Ticket Notifications (optional)
Mapbox mapbox.com Project management tool, code development, and bug tracking
Mason bymason.com
Matter matterapp.com Video messaging for customer support
Matterport matterport.com Software Project Mgt
Medallia medallia.com Support issue tracking tool and service status monitoring.
Medallion medallion.co
MedaSystems medasystems.com Collaboration
Mediafly mediafly.com Ticket Management and Engineering Tracking
Meltwater meltwater.com Internal ticketing system
Metadata metadata.io Jira/Confluence Project and Product Management
MicroStrategy microstrategy.com Product feature and issue tracking
Mindtickle mindtickle.com Production issues / incidents tracking & communication
Mixmax mixmax.com Support Services
Mobile Action mobileaction.co Engineering; Task and bug tracking tool
Modica Group modicagroup.com Developer Services (BitBucket); Release Management (Bamboo); Service Desk software (Jira)
Moqups moqups.com Enterprise Collaboration
MoveData movedata.io
myQuest myquest.co Issue and project tracking
Nasuni nasuni.com Engineering project management, issue tracking, internal collaboration (Jira, Confluence)
Nebius nebius.com Customer support and ticket handling
Neon neon.com Customer support and ticket handling.
Network to Code networktocode.com Customer Support; Provides issue tracking, support ticketing, and customer service communication workflows.
Neuron7.ai neuron7.ai Software development and collaboration tools
New Relic newrelic.com Management of customer support tickets
New/Mode newmode.net Project and product management tools
Nextiva nextiva.com Project Management, Content Management, IT Service Management
Nexxen nexxen.com Internal ticketing system
NimbleRx nimblerx.com Video recordings
- Show next 50
ComplianceCSV of Atlassian's compliance · Atom feed of Atlassian's compliance
FedRAMP Marketplace
| Offering | Status | Impact | Agencies | Since |
|---|---|---|---|---|
| Atlassian Government Cloud | Authorized | Moderate | 11 |
Security program
How Atlassian says it manages cybersecurity risk, in its annual report to the SEC.
- Led by
- Chief Information Security Officer reporting to the CTrO and oversees the technical identification
quote
Our Chief Information Security Officer (“CISO”) reports to our CTrO and oversees the technical identification, assessment and management of cybersecurity risks relevant to our business.
- Board oversight
- Audit Committee
quote
Our board of directors considers cybersecurity risk as part of its risk oversight function and has delegated to its audit committee (the “Audit Committee”) oversight of cybersecurity and other information technology risks.
- Frameworks named
- NIST CSF
- ISO 27001
- SOC 2
quote
We design and assess our program based on the National Institute of Standards and Technology Cybersecurity Framework (“NIST CSF”) and Secure Software Development Framework (“SSDF”).
Atlassian holds the following compliance certifications/attestations: ISO 27001, ISO 27018, ISO 22301, SOC 1, SOC 2, HIPAA, IRAP, and BSI C5.
- Outside review
- Engages outside assessors or consultants
quote
Our CTrO and CISO oversee our efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal personnel, threat intelligence, and other information obtained from governmental, public, or private sources, including external consultants engaged by us, and alerts and reports produced by security tools deployed in the IT environment.
- Its own suppliers
- Reviews their security
quote
A third-party risk management process for service providers, suppliers, and vendors.
- Practices named
- Incident response plan
- Vulnerability management
- Threat intelligence
- Security training
Since the fiscal 2025 report: ISO 27001, SOC 2 now named.
Read Item 1C in full
Cybersecurity Risk Management and Strategy
We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information. Our cybersecurity risk management program includes a cybersecurity incident response plan.
We design and assess our program based on the National Institute of Standards and Technology Cybersecurity Framework (“NIST CSF”) and Secure Software Development Framework (“SSDF”). This does not imply that we meet any particular technical standards, specifications, or requirements; we use NIST CSF and SSDF as guides to help us identify, assess, and manage risks from cybersecurity threats relevant to our business.
Cybersecurity risks are incorporated into our overall enterprise risk management program. Our Chief Technology Officer – Enterprise, Chief Trust Officer (“CTrO”) reports to our Chief Executive Officer and oversees our trust and overarching security strategy. Our Chief Information Security Officer (“CISO”) reports to our CTrO and oversees the technical identification, assessment and management of cybersecurity risks relevant to our business.
Our cybersecurity risk management program includes, among other elements:
•Risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment.
•A Security team, principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents.
•The use of external service providers, where appropriate, to assess, test, respond to or otherwise assist with aspects of our security controls, as well as maturity assessments of our cybersecurity program.
•Implementation of new hire and annual data privacy and cybersecurity training of all employees, including senior management; annual role-based training for employees in specific incident response roles, as well as for employees with specific access to systems, devices, or locations, and targeted cybersecurity incident simulation training held on a recurring basis.
•Incident response playbooks and standard operating procedures outlining procedures for detecting, responding to, and mitigating cybersecurity incidents. Depending on the nature and severity of an incident, responses may involve escalating notification to our Chief Executive Officer and our board of directors.
•Post-incident reviews are conducted for major incidents, and to determine steps that may be taken to mitigate identified risks and reduce the likelihood of reoccurrence.
•Internal policies designed to protect our systems and operations, including (1) a data classification and labelling standard to evaluate the confidentiality level of internal information, (2) a cloud continuity policy to address experience disruption for cloud customers, and (3) a business resilience policy to provide a framework for operations during and after disruption events.
•A third-party risk management process for service providers, suppliers, and vendors. Such service providers are subject to risk tiering, security risk assessments, and recurring reviews, as applicable. When third-party provider incidents occur, we assess their materiality to our operations and investigate accordingly.
•Atlassian holds the following compliance certifications/attestations: ISO 27001, ISO 27018, ISO 22301, SOC 1, SOC 2, HIPAA, IRAP, and BSI C5.
We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, whether individually or in the aggregate, have materially affected or are reasonably likely to materially affect us, our business, and our results of operations in Part I, Item 1A in this Annual Report on Form 10-K, which disclosures are incorporated by reference herein.
Cybersecurity Governance
Our board of directors considers cybersecurity risk as part of its risk oversight function and has delegated to its audit committee (the “Audit Committee”) oversight of cybersecurity and other information technology risks. The Audit Committee oversees management’s implementation of our cybersecurity risk management program, and it reports to the full board of directors regarding its activities, including those related to cybersecurity. Our CTrO and CISO provide updates on significant risks to the Audit Committee quarterly and also provide updates to the full board of directors at least biannually. Outside of regular meetings, depending on the nature and severity of an incident, our CTrO and CISO will also inform the Audit Committee, Chief Executive Officer, and the rest of the board of directors of significant cybersecurity incidents.
Our CTrO leads our Trust and Security organization, focusing on maintaining customer trust and overseeing the overall security posture of the company. The CTrO’s role involves managing cybersecurity risks and reviewing whether the company’s security practices align with customer expectations and industry standards. Our CISO leads our Security organization and is responsible for all security-related activities and controls at Atlassian. This includes defining the security strategy, developing, and enforcing security standards, and managing security technologies. The CISO also oversees security operations, incident response, and oversees compliance with applicable legal and regulatory requirements. Our CTrO has served in his role since October 2023 and has experience in the cybersecurity space, including previously serving as Chief Trust Officer of a large publicly-traded enterprise software company. Our CISO has served in his role since December 2024 and also has experience in cybersecurity, including serving as Chief Information Security Officer of a large publicly-traded enterprise software company. Our CTrO and CISO oversee our efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal personnel, threat intelligence, and other information obtained from governmental, public, or private sources, including external consultants engaged by us, and alerts and reports produced by security tools deployed in the IT environment.
Within the Trust and Security organizations, we implement a structured approach to proactively manage cybersecurity risks. Our Security Governance, Risk and Compliance team monitors, assesses, and coordinates proactive identification and remediation efforts for cybersecurity risks impacting Atlassian. This team partners cross-functionally with others in the Security organization and individuals from our legal, internal audit, engineering, and product development teams. Our Security team includes individuals with experience across a broad range of cybersecurity areas, including, but not limited to: product security; cloud security; infrastructure security; security monitoring and incident response; identity and access management; vulnerability management; and governance, risk, and compliance.
Security program from Atlassian Corp's Form 10-K for fiscal 2026, filed Aug 14, 2026, Item 1C, in its words (evidence) FedRAMP status from the FedRAMP Marketplace (evidence)
Security recordCSV of Atlassian's security record · Atom feed of Atlassian's security record
What public security catalogs list for Atlassian, in their words.
Known exploited vulnerabilities
14 vulnerabilities in Atlassian's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2026-21589 | Multiple Products | Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability | |
| CVE-2021-26086 | Jira Server and Data Center | Atlassian Jira Server and Data Center Path Traversal Vulnerability | |
| CVE-2023-22527 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Template Injection Vulnerability used by ransomware | |
| CVE-2023-22518 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability used by ransomware | |
| CVE-2023-22515 | Confluence Data Center and Server | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability used by ransomware | |
| CVE-2022-36804 | Bitbucket Server and Data Center | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | |
| CVE-2022-26138 | Confluence | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | |
| CVE-2022-26134 | Confluence Server/Data Center | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability used by ransomware | |
| CVE-2021-26085 | Confluence Server | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability used by ransomware | |
| CVE-2019-11581 | Jira Server and Data Center | Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability |
4 more
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2019-11580 | Crowd and Crowd Data Center | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability used by ransomware | |
| CVE-2019-3396 | Confluence Server and Data Server | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability used by ransomware | |
| CVE-2019-3398 | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | |
| CVE-2021-26084 | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability used by ransomware |
Source: CISA Known Exploited Vulnerabilities catalog (evidence)
Service statusCSV of Atlassian's status page incidents · Atom feed of Atlassian's status page incidents
90 days agotoday
No incidents reported in the last 12 months The last it reported began : Issues with 403 user authentication errors across Atlassian products
As Atlassian's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)
Incidents reported by Atlassian's subprocessorsCSV of incidents reported by vendors Atlassian lists · Atom feed of incidents reported by vendors Atlassian lists
251 reported incidents in the last 30 days, by 10 of the vendors Atlassian lists as subprocessors.
A subprocessor list names a company, not the service an incident touched. This does not show that Atlassian was involved.
And 226 more. All of them: CSV · Who is around them.
ChangesCSV of Atlassian's changes · Atom feed of Atlassian's changes
See the list as we read it on any date: Time machine
- Changed subprocessor: Amazon Web Services, Inc. locations: EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA, India, Japan, Singapore, USA, USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Ba… evidence: subprocessor: Amazon Web Services, Inc. list before and after: subprocessor: Amazon Web Services, Inc.
- Changed subprocessor: Cloudflare, Ltd. purpose: Content delivery network provider, Hosting provider for the Remote Model Context Protocol (MCP) Server → Content delivery network provider, Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server; services: Atlas, Atlassian Guard (Access/Guard … evidence: subprocessor: Cloudflare, Ltd. list before and after: subprocessor: Cloudflare, Ltd.
- Changed subprocessor: Clumio, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Clumio, Inc. list before and after: subprocessor: Clumio, Inc.
- Changed subprocessor: Databricks, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Forge, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including … evidence: subprocessor: Databricks, Inc. list before and after: subprocessor: Databricks, Inc.
- Changed subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. list before and after: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda.
- Changed subprocessor: Google Vertex AI purpose: Generative AI services provider for intelligence product features, Maintenance of service, safety, and security, Provision of Atlassian support → Generative AI services provider for intelligence product features, Provision of Atlassian supportMaintenance of service, safety, and security; … evidence: subprocessor: Google Vertex AI list before and after: subprocessor: Google Vertex AI
- Changed subprocessor: Mailgun Technologies, Inc. services: Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery (JPD), Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Opsgenie, Statuspage → Jira Cloud (including Jira Software and Jira Work Management)Jira Product Discovery (… evidence: subprocessor: Mailgun Technologies, Inc. list before and after: subprocessor: Mailgun Technologies, Inc.
- Changed subprocessor: MessageBird USA, Inc, (d/b/a Bird) services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work M… evidence: subprocessor: MessageBird USA, Inc, (d/b/a Bird) list before and after: subprocessor: MessageBird USA, Inc, (d/b/a Bird)
- Changed subprocessor: OpenAI, L.L.C. purpose: For the provision of Atlassian support, Generative AI services provider for intelligence product features → Generative AI services provider for intelligence product featuresFor the provision of Atlassian support evidence: subprocessor: OpenAI, L.L.C. list before and after: subprocessor: OpenAI, L.L.C.
- Changed subprocessor: SoftServe, Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Statuspage → Bitbucket Cloud (i… evidence: subprocessor: SoftServe, Inc. list before and after: subprocessor: SoftServe, Inc.
- Changed subprocessor: Telus, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Telus, Inc. list before and after: subprocessor: Telus, Inc.
- Changed subprocessor: Twilio Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management (JSM), Loom, Opsgenie, Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)Com… evidence: subprocessor: Twilio Inc. list before and after: subprocessor: Twilio Inc.
- Changed subprocessor: Mailgun Technologies, Inc. services: Jira Cloud (including Jira Software and Jira Work Management)Jira Product Discovery (JPD)Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) OpsgenieStatuspage → Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery (JPD),… evidence: subprocessor: Mailgun Technologies, Inc. list before and after: subprocessor: Mailgun Technologies, Inc.
- Changed subprocessor: Amazon Web Services, Inc. locations: USA, USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Bahrain, Mexico, Brazil → EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA,… evidence: subprocessor: Amazon Web Services, Inc. list before and after: subprocessor: Amazon Web Services, Inc.
- Changed subprocessor: Cloudflare, Ltd. purpose: Content delivery network provider, Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server → Content delivery network provider, Hosting provider for the Remote Model Context Protocol (MCP) Server; services: AtlasAtlassian Guard (Access/Guard fa… evidence: subprocessor: Cloudflare, Ltd. list before and after: subprocessor: Cloudflare, Ltd.
- Changed subprocessor: Clumio, Inc. services: AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, an… evidence: subprocessor: Clumio, Inc. list before and after: subprocessor: Clumio, Inc.
- Changed subprocessor: Databricks, Inc. services: AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, an… evidence: subprocessor: Databricks, Inc. list before and after: subprocessor: Databricks, Inc.
- Changed subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. services: AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, an… evidence: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. list before and after: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda.
- Changed subprocessor: Google Vertex AI purpose: Generative AI services provider for intelligence product features, Provision of Atlassian supportMaintenance of service, safety, and security → Generative AI services provider for intelligence product features, Maintenance of service, safety, and security, Provision of Atlassian support; … evidence: subprocessor: Google Vertex AI list before and after: subprocessor: Google Vertex AI
- Changed subprocessor: MessageBird USA, Inc, (d/b/a Bird) services: Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work Management)StatuspageTrello, Forge → Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Wor… evidence: subprocessor: MessageBird USA, Inc, (d/b/a Bird) list before and after: subprocessor: MessageBird USA, Inc, (d/b/a Bird)
- Changed subprocessor: OpenAI, L.L.C. purpose: Generative AI services provider for intelligence product featuresFor the provision of Atlassian support → For the provision of Atlassian support, Generative AI services provider for intelligence product features evidence: subprocessor: OpenAI, L.L.C. list before and after: subprocessor: OpenAI, L.L.C.
- Changed subprocessor: SoftServe, Inc. services: Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work Management)Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Jira Product DiscoveryStatuspage, Forge → Bitbucket Cloud (including Bi… evidence: subprocessor: SoftServe, Inc. list before and after: subprocessor: SoftServe, Inc.
- Changed subprocessor: Telus, Inc. services: AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, an… evidence: subprocessor: Telus, Inc. list before and after: subprocessor: Telus, Inc.
- Changed subprocessor: Twilio Inc. services: Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work Management)Jira Service Management (JSM) Jira Product DiscoveryOpsgenieStatuspageTrello, Forge, Loom → Bitbucket Cloud (including Bitbucket Pipelines), Compass, Conflue… evidence: subprocessor: Twilio Inc. list before and after: subprocessor: Twilio Inc.
- Changed subprocessor: Amazon Web Services, Inc. locations: EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA, India, Japan, Singapore, USA, USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Ba… evidence: subprocessor: Amazon Web Services, Inc. list before and after: subprocessor: Amazon Web Services, Inc.
- Changed subprocessor: Cloudflare, Ltd. purpose: Content delivery network provider, Hosting provider for the Remote Model Context Protocol (MCP) Server → Content delivery network provider, Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server; services: Atlas, Atlassian Guard (Access/Guard … evidence: subprocessor: Cloudflare, Ltd. list before and after: subprocessor: Cloudflare, Ltd.
- Changed subprocessor: Clumio, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Clumio, Inc. list before and after: subprocessor: Clumio, Inc.
- Changed subprocessor: Databricks, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Forge, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including … evidence: subprocessor: Databricks, Inc. list before and after: subprocessor: Databricks, Inc.
- Changed subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. list before and after: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda.
- Changed subprocessor: Google Vertex AI purpose: Generative AI services provider for intelligence product features, Maintenance of service, safety, and security, Provision of Atlassian support → Generative AI services provider for intelligence product features, Provision of Atlassian supportMaintenance of service, safety, and security; … evidence: subprocessor: Google Vertex AI list before and after: subprocessor: Google Vertex AI
- Changed subprocessor: Mailgun Technologies, Inc. services: Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery (JPD), Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Opsgenie, Statuspage → Jira Cloud (including Jira Software and Jira Work Management)Jira Product Discovery (… evidence: subprocessor: Mailgun Technologies, Inc. list before and after: subprocessor: Mailgun Technologies, Inc.
- Changed subprocessor: MessageBird USA, Inc, (d/b/a Bird) services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work M… evidence: subprocessor: MessageBird USA, Inc, (d/b/a Bird) list before and after: subprocessor: MessageBird USA, Inc, (d/b/a Bird)
- Changed subprocessor: OpenAI, L.L.C. purpose: For the provision of Atlassian support, Generative AI services provider for intelligence product features → Generative AI services provider for intelligence product featuresFor the provision of Atlassian support evidence: subprocessor: OpenAI, L.L.C. list before and after: subprocessor: OpenAI, L.L.C.
- Changed subprocessor: SoftServe, Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Statuspage → Bitbucket Cloud (i… evidence: subprocessor: SoftServe, Inc. list before and after: subprocessor: SoftServe, Inc.
- Changed subprocessor: Telus, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Telus, Inc. list before and after: subprocessor: Telus, Inc.
- Changed subprocessor: Twilio Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management (JSM), Loom, Opsgenie, Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)Com… evidence: subprocessor: Twilio Inc. list before and after: subprocessor: Twilio Inc.
- Changed subprocessor: Amazon Web Services, Inc. locations: EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA, India, Japan, Singapore, USA, USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Ba… evidence: subprocessor: Amazon Web Services, Inc. list before and after: subprocessor: Amazon Web Services, Inc.
- Changed subprocessor: Cloudflare, Ltd. purpose: Content delivery network provider, Hosting provider for the Remote Model Context Protocol (MCP) Server → Content delivery network provider, Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server; services: Atlas, Atlassian Guard (Access/Guard … evidence: subprocessor: Cloudflare, Ltd. list before and after: subprocessor: Cloudflare, Ltd.
- Changed subprocessor: Clumio, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Clumio, Inc. list before and after: subprocessor: Clumio, Inc.
- Changed subprocessor: Databricks, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Forge, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including … evidence: subprocessor: Databricks, Inc. list before and after: subprocessor: Databricks, Inc.
- Changed subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda. list before and after: subprocessor: e-Core Soluções em Tecnologia da Informaçiupão Ltda.
- Changed subprocessor: Google Vertex AI purpose: Generative AI services provider for intelligence product features, Maintenance of service, safety, and security, Provision of Atlassian support → Generative AI services provider for intelligence product features, Provision of Atlassian supportMaintenance of service, safety, and security; … evidence: subprocessor: Google Vertex AI list before and after: subprocessor: Google Vertex AI
- Changed subprocessor: Mailgun Technologies, Inc. services: Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery (JPD), Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Opsgenie, Statuspage → Jira Cloud (including Jira Software and Jira Work Management)Jira Product Discovery (… evidence: subprocessor: Mailgun Technologies, Inc. list before and after: subprocessor: Mailgun Technologies, Inc.
- Changed subprocessor: MessageBird USA, Inc, (d/b/a Bird) services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work M… evidence: subprocessor: MessageBird USA, Inc, (d/b/a Bird) list before and after: subprocessor: MessageBird USA, Inc, (d/b/a Bird)
- Changed subprocessor: OpenAI, L.L.C. purpose: For the provision of Atlassian support, Generative AI services provider for intelligence product features → Generative AI services provider for intelligence product featuresFor the provision of Atlassian support evidence: subprocessor: OpenAI, L.L.C. list before and after: subprocessor: OpenAI, L.L.C.
- Changed subprocessor: SoftServe, Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations), Statuspage → Bitbucket Cloud (i… evidence: subprocessor: SoftServe, Inc. list before and after: subprocessor: SoftServe, Inc.
- Changed subprocessor: Telus, Inc. services: Atlas, Atlassian Guard (Access/Guard family), Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Data Lake, Insights, Jira Align, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management Cloud (including Assets,… evidence: subprocessor: Telus, Inc. list before and after: subprocessor: Telus, Inc.
- Changed subprocessor: Twilio Inc. services: Bitbucket Cloud (including Bitbucket Pipelines), Compass, Confluence Cloud, Forge, Jira Cloud (including Jira Software and Jira Work Management), Jira Product Discovery, Jira Service Management (JSM), Loom, Opsgenie, Statuspage, Trello → Bitbucket Cloud (including Bitbucket Pipelines)Com… evidence: subprocessor: Twilio Inc. list before and after: subprocessor: Twilio Inc.
- Changed subprocessor: Amazon Web Services, Inc. locations: USA, USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Bahrain, Mexico, Brazil → EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA,… evidence: subprocessor: Amazon Web Services, Inc. list before and after: subprocessor: Amazon Web Services, Inc.
- Changed subprocessor: Cloudflare, Ltd. purpose: Content delivery network provider, Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server → Content delivery network provider, Hosting provider for the Remote Model Context Protocol (MCP) Server; services: AtlasAtlassian Guard (Access/Guard fa… evidence: subprocessor: Cloudflare, Ltd. list before and after: subprocessor: Cloudflare, Ltd.
Rating badge for Atlassian's site
It updates with the rating.
<a href="https://thirdpartyindex.com/vendors/atlassian"><img src="https://thirdpartyindex.com/badge/atlassian.svg" alt="Atlassian transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/atlassian)