- Legal information
- Sub processors
Sub processors
Atlassian Sub-processors
Effective Starting May 15, 2026
Third-Party Sub-processors
Atlassian uses the third-party entities listed below (each, a “Sub-processor”) to process Customer Personal Data on behalf of Atlassian customers and developers in accordance with agreements between Atlassian and the Sub-processor to uphold Atlassian’s commitments in Atlassian's Data Processing Addendum, or for Forge, Atlassian’s Forge Data Processing Addendum.
Defined terms, such as “Personal Data”, “Customer Personal Data”, “Sub-processor”, “Cloud Products”, or “End User Personal Data” have the same meaning as in Atlassian's Data Processing Addendum, Atlassian's Customer Agreement, or Atlassian’s Forge Data Processing Addendum.
Atlassian carries out annual compliance reviews of its Sub-processors, and where the engagement of a Sub-processor requires the cross-border transfer of Personal Data, Atlassian conducts Transfer Impact Assessments in accordance with Applicable Data Protection Law for these data transfers. Atlassian imposes obligations on its Sub-processors to implement appropriate technical and organizational measures ensuring that the sub-processing of Personal Data is protected to the standards required by Applicable Data Protection Law and the same standard provided by Atlassian’s Data Processing Addendum, or for Forge, the Forge Data Processing Addendum, as the case may be.
The list below contains Sub-processors for each of Atlassian’s generally available Cloud Products and related Support or Advisory Services, as well as Forge. If a Beta or EAP service uses a new Sub-processor, Atlassian may use an alternative notification mechanism. For each Sub-processor below, processing of Personal Data will be for the duration of use of the applicable service(s) by the customer or the developer, and for the retention periods as set out in the customer’s agreement with Atlassian and any product documentation. Further information about Sub-processor security measures can be found via the external links below.
Sign up for emails to be notified when we add new Atlassian Sub-processors
Sub-processor
Applicable Cloud Products
Nature and Purpose of Processing
Categories of personal data
Location of Processing
Security Measures
Hosting and Infrastructure Service Providers
Amazon Web Services, Inc.
Applicable Cloud Products
Atlas
Atlassian Guard (Access/Guard family)
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Data Lake
Insights
Jira Align
Jira Cloud (including Jira Software and Jira Work Management)
Jira Product Discovery
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Loom
Opsgenie
Rovo
Statuspage
Trello
Nature and Purpose of Processing
Cloud hosting provider
Provision of Atlassian support
Categories of personal data
Customer Personal Data, created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support
Location of Processing
EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA, India, Japan, Singapore
If you’ve enabled Atlassian’s Data Residency feature, certain (in-scope) data is hosted in your chosen region. For details on supported regions and how Data Residency works, see Data Residency: Manage Where Your Data is Hosted and Understand data residency.