Atlassian Sub-processors
Current as of June 22, 2023
Third-Party Sub-processors
Atlassian uses the third party entities below (each, a “sub-processor”) to process personal data on behalf of Atlassian customers and in accordance with contract terms between Atlassian and the sub-processor to uphold Atlassian’s commitments in Atlassian's Data Processing Addendum, or for Forge, Atlassian’s Forge Data Processing Addendum.
Atlassian carries out annual compliance reviews of its sub-processors, and where the engagement of a sub-processor requires the cross-border transfer of personal data, Atlassian conducts Transfer Impact Assessments in accordance with applicable data protection law for these data transfers. Atlassian imposes obligations on its sub-processors to implement appropriate technical and organizational measures ensuring that the sub-processing of personal data is protected to the standards required by applicable data protection laws.
Further information relating to sub-processor security measures can be found via the external links below. For each sub-processor below, processing of personal data will be for the duration of use of the applicable service(s) by the customer, and for the retention periods as set out in the customer’s agreement with Atlassian and any product documentation. Please note that if you use Atlassian data residency, pinned data remains in your specified location as described on this page.
Subscribe to an RSS feed or sign up for emails to be notified when we add new Atlassian sub-processors (note: you will need to cut and paste the "Subscribe to an RSS feed" URL into an RSS Feed Reader to monitor updates).
Sub-processor | Applicable Cloud Products | Nature and Purpose of Processing | Categories of personal data | Location of Processing | Security and Supplemental Measures |
|---|---|---|---|---|---|
| Aiven, Ltd. | Applicable Cloud Products Jira Cloud Products (excluding Jira Align), Confluence, Bitbucket, Statuspage, Compass, Forge | Nature and Purpose of Processing Data infrastructure pipeline providing event streaming messaging to end users | Categories of personal data Personal data contained in user accounts and text or files created by customer and stored in Applicable Cloud Products | Location of Processing Finland | Security and Supplemental Measures Security, Privacy & Compliance |
| Amazon Web Services, Inc. | Applicable Cloud Products All Atlassian Cloud Products | Nature and Purpose of Processing Cloud hosting provider | Categories of personal data Personal data contained in user account information and text or files created by customer and stored in Applicable Cloud Products | Location of Processing EEA (Sweden, Ireland and Germany), UK, Canada, Australia, Brazil, Singapore, South Korea, USA, India, Japan | Security and Supplemental Measures |
| Cloudflare, Ltd. | Applicable Cloud Products Jira Align | Nature and Purpose of Processing Content delivery network provider | Categories of personal data Personal data contained in user account information and text or files created by customer and stored in Applicable Cloud Products | Location of Processing Customer traffic is processed globally at the data center closest to the end user. | Security and Supplemental Measures Certifications and Compliance Resources |
| Clumio, Inc. | Applicable Cloud Products All Atlassian Cloud Products | Nature and Purpose of Processing Backup solutions provider for Amazon Simple Storage Service (S3) | Categories of personal data Personal data contained in user account information and text or files created by customer and stored in Applicable Cloud Products | Location of Processing EEA, UK, Australia, USA, and Singapore | Security and Supplemental Measures |
| Databricks, Inc. | Applicable Cloud Products Jira Cloud Products (excluding Jira Align), Confluence, Bitbucket, Statuspage, Compass, Forge, Beacon | Nature and Purpose of Processing Infrastructure provider to enable customer data querying and analytics product features | Categories of personal data Personal data contained in user account information and text or files created by customer and stored in Applicable Cloud Products | Location of Processing USA | Security and Supplemental Measures |
| e-Core Soluções em Tecnologia da Informaçi upão Ltda. | Applicable Cloud Products All Atlassian Cloud Products | Nature and Purpose of Processing Customer service, support, and cloud migration service provider | Categories of personal data Personal data contained in user account information and text or files created by customer and stored in Applicable Cloud Products | Location of Processing Brazil, Mexico | Security and Supplemental Measures Access only through Atlassian managed VPN, VDI, and MDM for computing devices |
| K15t GmbH | Applicable Cloud Products Confluence | Nature and Purpose of Processing Engineering support and consulting services provider for databases feature integration | Categories of personal data Personal data contained in user account information and text and files created by customer and stored in Applicable Cloud Products for databases integration only | Location of Processing Germany | Security and Supplemental Measures Access only through Atlassian managed laptops and systems |
| Mailgun Technologies, Inc. | Applicable Cloud Products Statuspage, Opsgenie, Jira Cloud Products (excluding Jira Align) | Nature and Purpose of Processing Communications technology provider for product notifications | Categories of personal data Personal data contained in product notice communications | Location of Processing USA, EEA | Security and Supplemental Measures Mailgun’s Commitment to Security and Compliance |
| Message Systems, Inc. dba SparkPost | Applicable Cloud Products Jira Cloud Products (excluding Jira Align), Confluence, Bitbucket, Statuspage, Compass, Forge, Trello | Nature and Purpose of Processing Communications technology provider for product notifications | Categories of personal data Personal data contained in product notice communications | Location of Processing USA, EEA | Security and Supplemental Measures MessageBird Security Overview |
| Microsoft Corporation | Applicable Cloud Products Jira Align | Nature and Purpose of Processing Cloud hosting provider | Categories of personal data Personal data contained in user account information and text or files created by customer and stored in Applicable Cloud Products | Location of Processing USA, Australia, Netherlands | Security and Supplemental Measures Cloud Data Integrity at its Finest | Microsoft Trust Center |
| MongoDB, Inc. | Applicable Cloud Products Jira Cloud Products (excluding Jira Align) | Nature and Purpose of Processing Cloud hosting provider for JSM Chat (formerly Halp) | Categories of personal data Personal data contained in user account information and text or files created by customer and stored in Applicable Cloud Products | Location of Processing USA | Security and Supplemental Measures |
| NetApp, Inc. | Applicable Cloud Products Bitbucket | Nature and Purpose of Processing Cloud hosting provider | Categories of personal data Personal data contained in user account information and text or files created by customer and stored in Applicable Cloud Products | Location of Processing USA | Security and Supplemental Measures |
| Nexmo, Inc. | Applicable Cloud Products Opsgenie | Nature and Purpose of Processing Communications technology provider | Categories of personal data Personal data contained in text and voice communications | Location of Processing USA, UK, Singapore | Security and Supplemental Measures |
| OpenAI, L.L.C. | Applicable Cloud Products All Applicable Cloud Products using Atlassian Intelligence | Nature and Purpose of Processing Generative AI services provider for intelligence product features | Categories of personal data Personal data contained in user account information and text or files created by customer and stored in Applicable Cloud Products | Location of Processing USA | Security and Supplemental Measures |
| Plivo, Inc. | Applicable Cloud Products Statuspage | Nature and Purpose of Processing Communications technology provider for product notifications | Categories of personal data Personal data contained in product notice communications | Location of Processing USA | Security and Supplemental Measures |
| Pubnub, Inc. | Applicable Cloud Products Jira Cloud Products (excluding Jira Align), Confluence, Bitbucket, Statuspage, Compass, Forge, Opsgenie | Nature and Purpose of Processing Communications technology provider for product notifications | Categories of personal data Personal data contained in product notice communications | Location of Processing USA, EEA | Security and Supplemental Measures |
| SoftServe, Inc. | Applicable Cloud Products Jira Cloud Products (excluding Jira Align), Confluence, Bitbucket, Statuspage, Compass, Forge, Atlas | Nature and Purpose of Processing Customer service, outsourced engineering and technical support | Categories of personal data Personal data contained in user account information and text or files created by customer and stored in Applicable Cloud Products | Location of Processing Poland, Bulgaria | Security and Supplemental Measures Access only through Atlassian managed laptops and systems |
| Twilio, Inc. | Applicable Cloud Products Jira Cloud Products (excluding Jira Align), Confluence, Bitbucket, Statuspage, Compass, Forge, Trello, Opsgenie | Nature and Purpose of Processing Communications technology provider for product notifications | Categories of personal data Personal data contained in product notice communications | Location of Processing USA, for support requests only: EEA and Singapore | Security and Supplemental Measures |
Atlassian Group Sub-processors
The following Atlassian Group companies are sub-processors providing technical and operational support. Atlassian employees may be located in any of the countries listed here.
Entity | Applicable Cloud Products | Entity Country |
|---|---|---|
| Atlassian B.V. | Applicable Cloud Products Any Atlassian Cloud product | Entity Country Netherlands |
| Atlassian, Inc. | Applicable Cloud Products Any Atlassian Cloud product | Entity Country USA |
| Atlassian PTY, Ltd | Applicable Cloud Products Jira Software, Confluence, Bitbucket, Statuspage, Compass, Forge, Atlassian Analytics, Jira Product Discovery, Trello, Opsgenie, Jira Align | Entity Country Australia |
| Atlassian (UK) Operations Ltd. | Applicable Cloud Products Trello | Entity Country England |
| Dogwood Labs Inc. | Applicable Cloud Products Statuspage | Entity Country USA |