Compliance frameworks, security audits, and quality certifications this company maintains.
Atlassian complies with the California Consumer Privacy Act and CPRA, providing California users of Jira, Confluence, and other Atlassian cloud products rights to access, delete, and control sharing of their personal data.
Atlassian holds CSA STAR Level 2 certification for its cloud products including Jira and Confluence, providing enterprise customers third-party validated assurance of Atlassian's cloud security controls and transparency practices.
Atlassian publishes publicly available SOC 3 reports for Jira Software, Confluence, and Jira Service Management, giving enterprise prospects high-level assurance of Atlassian's security and availability controls without requiring an NDA.
Atlassian undergoes annual third-party SOC 2 Type II audits covering security, availability, processing integrity, confidentiality, and privacy across all cloud products.
Atlassian holds ISO/IEC 27001:2022 certification for its Information Security Management System, verified by independent third-party auditors.
Atlassian is certified under ISO 27018, the international standard for protection of personally identifiable information in public cloud services.
Atlassian maintains PCI DSS compliance to ensure secure handling of payment card data within its billing and commerce infrastructure.
Atlassian provides GDPR compliance capabilities including data processing agreements, data residency options, and user rights management for European customers.
Atlassian is pursuing FedRAMP authorization to serve US federal government agencies with its cloud collaboration products.
Atlassian offers Business Associate Agreements (BAAs) to support customers with HIPAA compliance requirements in healthcare-related workflows.