- Legal information
- Sub processors
Sub processors
Atlassian Sub-processors
Effective Starting May 15, 2026
Third-Party Sub-processors
Atlassian uses the third-party entities listed below (each, a “Sub-processor”) to process Customer Personal Data on behalf of Atlassian customers and developers in accordance with agreements between Atlassian and the Sub-processor to uphold Atlassian’s commitments in Atlassian's Data Processing Addendum, or for Forge, Atlassian’s Forge Data Processing Addendum.
Defined terms, such as “Personal Data”, “Customer Personal Data”, “Sub-processor”, “Cloud Products”, or “End User Personal Data” have the same meaning as in Atlassian's Data Processing Addendum, Atlassian's Customer Agreement, or Atlassian’s Forge Data Processing Addendum.
Atlassian carries out annual compliance reviews of its Sub-processors, and where the engagement of a Sub-processor requires the cross-border transfer of Personal Data, Atlassian conducts Transfer Impact Assessments in accordance with Applicable Data Protection Law for these data transfers. Atlassian imposes obligations on its Sub-processors to implement appropriate technical and organizational measures ensuring that the sub-processing of Personal Data is protected to the standards required by Applicable Data Protection Law and the same standard provided by Atlassian’s Data Processing Addendum, or for Forge, the Forge Data Processing Addendum, as the case may be.
The list below contains Sub-processors for each of Atlassian’s generally available Cloud Products and related Support or Advisory Services, as well as Forge. If a Beta or EAP service uses a new Sub-processor, Atlassian may use an alternative notification mechanism. For each Sub-processor below, processing of Personal Data will be for the duration of use of the applicable service(s) by the customer or the developer, and for the retention periods as set out in the customer’s agreement with Atlassian and any product documentation. Further information about Sub-processor security measures can be found via the external links below.
Sign up for emails to be notified when we add new Atlassian Sub-processors
Sub-processor
Applicable Cloud Products
Nature and Purpose of Processing
Categories of personal data
Location of Processing
Security Measures
Hosting and Infrastructure Service Providers
Amazon Web Services, Inc.
Applicable Cloud Products
Atlas
Atlassian Analytics
Atlassian Guard (Access/Guard family)
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Data Lake
Jira Align
Jira Cloud (including Jira Software and Jira Work Management)
Jira Product Discovery
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Loom
Opsgenie
Rovo
Statuspage
Trello
Nature and Purpose of Processing
Cloud hosting provider
Provision of Atlassian support
Categories of personal data
Customer Personal Data, created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support
Location of Processing
EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA, India, Japan, Singapore
If you’ve enabled Atlassian’s Data Residency feature, certain (in-scope) data is hosted in your chosen region. For details on supported regions and how Data Residency works, see Data Residency: Manage Where Your Data is Hosted and Understand data residency.
Security Measures
AWS Compliance Programs
Applicable Cloud Products
DX
Nature and Purpose of Processing
Cloud hosting provider
Categories of personal data
Customer Personal Data created by customer and stored in DX
Location of Processing
USA
Clumio, Inc.
Applicable Cloud Products
Atlas
Atlassian Analytics
Atlassian Guard (Access/Guard family)
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Data Lake
Jira Align
Jira Cloud (including Jira Software and Jira Work Management)
Jira Product Discovery
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Opsgenie
Rovo
Statuspage
Trello
Nature and Purpose of Processing
Backup solutions provider for Amazon Simple Storage Service (S3)
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support
Location of Processing
EEA, UK, Australia, USA, and Singapore
Security Measures
Commvault Legal
Databricks, Inc.
Applicable Cloud Products
Atlassian Guard (Access/Guard family)
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Nature and Purpose of Processing
Infrastructure provider to enable customer data querying, and analytics product features.
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
End User Personal Data created by developers and stored in Forge
Location of Processing
USA
Security Measures
Security & Trust Center
Applicable Cloud Products
Forge
Nature and Purpose of Processing
Infrastructure provider to enable End User Personal Data querying and analytics features for Forge Apps.
Categories of personal data
End User Personal Data created by developers and stored in Forge
Google LLC
Applicable Cloud Products
DX
Nature and Purpose of Processing
File Storage
Categories of personal data
Customer Personal Data created by customer and stored in DX
Location of Processing
USA
Security Measures
Google Privacy Terms & Security Measures
Microsoft Corporation
Applicable Cloud Products
Jira Align
Nature and Purpose of Processing
Cloud hosting provider
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
Location of Processing
USA, Australia, Netherlands
Security Measures
Microsoft Trust Center
MongoDB, Inc.
Applicable Cloud Products
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Nature and Purpose of Processing
Cloud hosting provider for JSM Chat (formerly Halp)
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
Location of Processing
USA
Security Measures
Trust Center
NetApp, Inc.
Applicable Cloud Products
Bitbucket Cloud (including Bitbucket Pipelines)
Nature and Purpose of Processing
Cloud hosting provider
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
Location of Processing
USA
Security Measures
NetApp SaaS Backup
Salesforce, Inc. (Heroku)
Applicable Cloud Products
DX
Nature and Purpose of Processing
Cloud services provider
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
Location of Processing
USA
Security Measures
Heroku Security, Privacy, and Compliance
Snowflake, Inc.
Applicable Cloud Products
DX
Nature and Purpose of Processing
Cloud database provider
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
Location of Processing
USA
Security Measures
Snowflake Security Addendum
Cantab Research Ltd (trading as Speechmatics)
Applicable Cloud Products
Loom
Nature and Purpose of Processing
Transcription services
Categories of personal data
Customer Personal Data created by customer, in particular, personal data contained in product notice communications and user-initiated shared video recordings including associated comments and SMS/MMS messages
Location of Processing
USA
Security Measures
Speechmatics Security
Work OS, Inc.
Applicable Cloud Products
DX
Nature and Purpose of Processing
SCIM provisioning
Categories of personal data
Customer Personal Data created by customer and stored in DX
Location of Processing
USA
Security Measures
WorkOS Security
Communications Technology Service Providers
Mailgun Technologies, Inc.
Applicable Cloud Products
Jira Cloud (including Jira Software and Jira Work Management)
Jira Product Discovery (JPD)
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Opsgenie
Statuspage
Nature and Purpose of Processing
Communications technology provider for product notifications
Categories of personal data
Customer Personal Data created by customer, in particular, personal data contained in product notice communications
Location of Processing
USA, EEA
Security Measures
Mailgun’s Commitment to Security and Compliance
Mailchimp
Applicable Cloud Products
Loom
Nature and Purpose of Processing
Communications technology provider for product notifications and video sharing over email
Categories of personal data
Customer Personal Data created by customer, in particular, personal data contained in product notice communications and user-initiated shared video recordings including associated comments and email messages
Location of Processing
USA
Security Measures
Mailchimp Security
MessageBird USA, Inc, (d/b/a Bird)
Applicable Cloud Products
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Jira Cloud (including Jira Software and Jira Work Management)
Statuspage
Trello
Nature and Purpose of Processing
Communications technology provider for product notifications
Categories of personal data
Customer Personal Data created by customer, in particular, personal data contained in product notice communications
End User Personal Data created by developers and stored in Forge
Location of Processing
USA, EEA
Security Measures
Bird Security Overview
Applicable Cloud Products
Forge
Categories of personal data
End User Personal Data created by developers and stored in Forge
Vonage APIs (formerly Nexmo, Inc.)
Applicable Cloud Products
Opsgenie
Nature and Purpose of Processing
Communications technology provider
Categories of personal data
Customer Personal Data created by customer, in particular, personal data contained in text and voice communications
Location of Processing
USA, UK, Singapore
Security Measures
Vonage Security & Trust
OneSignal
Applicable Cloud Products
Loom
Nature and Purpose of Processing
Communications technology provider for mobile product notifications and video sharing
Categories of personal data
Customer Personal Data created by customer, in particular, personal data contained in product notice communications and user-initiated shared video recordings including associated comments and SMS/MMS messages
Location of Processing
USA
Security Measures
Data and Security Questions
Plivo, Inc.
Applicable Cloud Products
Statuspage
Nature and Purpose of Processing
Communications technology provider for product notifications
Categories of personal data
Customer Personal Data created by customer, in particular, personal data contained in product notice communications
Location of Processing
USA
Security Measures
Security for Cloud Communications
Twilio Inc.
Applicable Cloud Products
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Jira Cloud (including Jira Software and Jira Work Management)
Jira Service Management (JSM)
Jira Product Discovery
Opsgenie
Statuspage
Trello
Nature and Purpose of Processing
Communications technology provider for product notifications
Categories of personal data
Customer Personal Data created by customer, in particular, personal data contained in product notice communications
End User Personal Data created by developers and stored in Forge
Location of Processing
USA
Security Measures
Twilio Trust Center
Applicable Cloud Products
Forge
Categories of personal data
End User Personal Data created by developers and stored in Forge
Content Delivery Network Providers
Cloudflare, Ltd.
Applicable Cloud Products
Atlas
Atlassian Analytics
Atlassian Guard (Access/Guard family)
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Data Lake
Jira Align
Jira Cloud (including Jira Software and Jira Work Management)
Jira Product Discovery
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Opsgenie
Rovo
Statuspage
Trello
Nature and Purpose of Processing
Content delivery network provider
Hosting provider for the Remote Model Context Protocol (MCP) Server
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
Location of Processing
Customer traffic is processed globally at the data center closest to the end user.
Security Measures
Certifications and Compliance Resources
Applicable Cloud Products
Forge
Nature and Purpose of Processing
Content delivery network provider
Categories of personal data
End User Personal Data created by developers and stored in Forge
Applicable Cloud Products
DX
Nature and Purpose of Processing
Content delivery network provider
Categories of personal data
Customer Personal Data created by customer and stored in DX
Support Service Providers
e-Core Soluções em Tecnologia da Informaçiupão Ltda.
Applicable Cloud Products
Atlas
Atlassian Analytics
Atlassian Guard (Access/Guard family)
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Data Lake
Jira Align
Jira Cloud (including Jira Software and Jira Work Management)
Jira Product Discovery
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Opsgenie
Rovo
Statuspage
Trello
Nature and Purpose of Processing
Customer service, support, and cloud migration service provider
Categories of personal data
Customer Personal Data created by customer if shared with Atlassian via attachments in support tickets
Location of Processing
Brazil, Mexico
Security Measures
Access only through Atlassian managed VPN, VDI, and MDM for computing devices
Partner Hero
Applicable Cloud Products
Loom
Nature and Purpose of Processing
Customer service and technical support
Categories of personal data
Customer Personal Data created by customer shared during Loom support communications
Location of Processing
Philippines, Romania, South Africa
Security Measures
Data Security & Privacy at PartnerHero
SoftServe, Inc.
Applicable Cloud Products
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Jira Cloud (including Jira Software and Jira Work Management)
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Jira Product Discovery
Statuspage
Nature and Purpose of Processing
Customer service, outsourced engineering and technical support
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
End User Personal Data created by developers and stored in Forge
Location of Processing
Bulgaria, Poland, United States
Security Measures
Access only through Atlassian managed laptops and systems
Applicable Cloud Products
Forge
Categories of personal data
End User Personal Data created by developers and stored in Forge
Telus, Inc.
Applicable Cloud Products
Atlas
Atlassian Analytics
Atlassian Guard (Access/Guard family)
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Data Lake
Jira Align
Jira Cloud (including Jira Software and Jira Work Management)
Jira Product Discovery
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Opsgenie
Rovo
Statuspage
Trello
Nature and Purpose of Processing
Customer service
Categories of personal data
Customer Personal Data created by customer if shared with Atlassian via attachments in support tickets
Location of Processing
Romania
Security Measures
Access only through Atlassian managed VPN, VDI, and MDM for computing devices
Zendesk
Applicable Cloud Products
Loom
Nature and Purpose of Processing
Customer service and technical support
Categories of personal data
Customer Personal Data created by customer shared during Loom support communications
Location of Processing
USA
Security Measures
Zendesk Trust Center
AI and Analytics Service Providers
Amazon Web Services, Inc. (AWS Bedrock)
Applicable Cloud Products
All Atlassian Cloud Products with enabled Atlassian Intelligence or Rovo
Nature and Purpose of Processing
Generative AI services provider for intelligence product features
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
Location of Processing
USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Bahrain, Mexico, Brazil
Security Measures
AWS Compliance Programs
Applicable Cloud Products
Atlas
Atlassian Analytics
Atlassian Guard (Access/Guard family)
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Data Lake
Jira Align
Jira Cloud (including Jira Software and Jira Work Management)
Jira Product Discovery
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Loom
Opsgenie
Rovo
Statuspage
Trello
Nature and Purpose of Processing
Provision of Atlassian support
Maintenance of service, safety, and security
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support
Applicable Cloud Products
Forge
Nature and Purpose of Processing
Generative AI services provider for intelligence developer features
Categories of personal data
End User Personal Data processed by Forge Apps
Google Vertex AI
Applicable Cloud Products
All Atlassian Cloud Products with enabled Atlassian Intelligence or Rovo
Nature and Purpose of Processing
Generative AI services provider for intelligence product features
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
Location of Processing
USA, EEA (Belgium, Netherlands, Finland), Singapore, Taiwan
Security Measures
Google Privacy Terms & Security Measures
Applicable Cloud Products
Atlas
Atlassian Analytics
Atlassian Guard (Access/Guard family)
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Data Lake
Jira Align
Jira Cloud (including Jira Software and Jira Work Management)
Jira Product Discovery
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Loom
Opsgenie
Rovo
Statuspage
Trello
Nature and Purpose of Processing
Provision of Atlassian support
Maintenance of service, safety, and security
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support
Databricks, Inc.
Applicable Cloud Products
Atlas
Atlassian Analytics
Atlassian Guard (Access/Guard family)
Bitbucket Cloud (including Bitbucket Pipelines)
Compass
Confluence Cloud
Data Lake
Jira Align
Jira Cloud (including Jira Software and Jira Work Management)
Jira Product Discovery
Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Loom
Opsgenie
Rovo
Statuspage
Trello
Nature and Purpose of Processing
Infrastructure provider for machine learning development, processing and training
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
Location of Processing
USA
Security Measures
Security & Trust Center
OpenAI, L.L.C.
Applicable Cloud Products
All Atlassian Cloud Products with enabled Atlassian Intelligence, Loom AI, or Rovo
Nature and Purpose of Processing
Generative AI services provider for intelligence product features
For the provision of Atlassian support
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support
Location of Processing
USA
Security Measures
Security & Trust
Twilio, Inc (Twilio-Segment)
Applicable Cloud Products
Loom
Nature and Purpose of Processing
Data analytics service
Categories of personal data
Customer Personal Data created by customer and stored in Applicable Cloud Products
Location of Processing
USA
Security Measures
Segment Trust Center
Atlassian Government Cloud Sub-processors
Sub-processor
Location of Processing
Amazon Web Services, Inc.
Location of Processing
USA
Crowdstrike
Location of Processing
USA
Google, LLC
Location of Processing
USA
Okta, Inc.
Location of Processing
USA
Tenable Holdings, Inc.
Location of Processing
USA
Atlassian Group Sub-processors
The Atlassian Group companies below may also act as Sub-processors to the extent that these Atlassian Group companies process Customer Personal Data when providing technical and operational support to customers.
Entity
Location
Atlassian B.V.
Location
Kingdom of the Netherlands
Atlassian Canada Inc.
Location
Canada
Atlassian France S.A.S.
Location
French Republic
Atlassian Germany GmbH
Location
Federal Republic of Germany
Atlassian India LLP
Location
Republic of India
Atlassian K.K.
Location
Japan
Atlassian Korea Ltd.
Location
Republic of Korea
Atlassian New Zealand
Location
New Zealand
Atlassian Philippines, Inc.
Location
Republic of the Philippines
Atlassian Poland sp.z.o.o
Location
Republic of Poland
Atlassian Pte. Ltd.
Location
Republic of Singapore
Atlassian Pty. Ltd.
Location
Commonwealth of Australia
Atlassian (UK) Operations Ltd.
Location
United Kingdom of Great Britain and Northern Ireland
Atlassian US, Inc.
Location
United States of America
Opsgenie Yazılım Anonim Şirketi
Location
Republic of Türkiye
Sign up for updates
Related content
Atlassian Customer Agreement
Learn more
Product-specific terms
Learn more
Advisory Services
Learn more
Data Processing Addendum
Learn more
Subscribe to receive an email whenever we make a change
Company *
Email *
By clicking the submit button below you accept and consent to receive the type of content you checked above. Please review Atlassian's Privacy Policy for further information.
Submit
Thank you for your submission
Stay informed
Subscribe to receive notifications from us about updates to our legal terms (including our legal policies) and our list of sub-processors.
Sign up for updates