Добавлено
- Добавлено: In order to protect personal data in accordance with Applicable Data Protection Laws, Atlassian implements the following supplemental technical, contractual, and organizational measures:
- Добавлено: Technical Measures
- Добавлено: Atlassian provides the following technical measures to provide additional security for personal data:
- Добавлено: Data residency: Atlassian allows customers to pin in-scope product content at rest to a location. Planned expansions to our data residency program (including data residency for apps and additional locations) are highlighted in Atlassian’s cloud roadmap
- Добавлено: Encryption: Atlassian offers data encryption at rest and in transit, as well as BYOK encryption.
- Добавлено: Security and certifications: We have a formal security management program and we review our Information Security Management Program (ISMP) on an annual basis. Additional information about Atlassian’s security practices and certifications are available in the Atlassian DPA and the Forge DPA, as well as on our Trust Center.
- Добавлено: Contractual Measures
- Добавлено: Atlassian’s contractual measures are set out in our Data Processing Addendum which incorporates the SCCs, as well as UK Addendum and Swiss modifications for SCCs. In particular, we are subject to the following requirements:
- Добавлено: Technical measures: Atlassian is contractually obligated to have in place appropriate technical and organizational measures to safeguard personal data (both under the Customer and Forge DPAs as well as the SCCs we enter into with customers, service providers, and between entities with the Atlassian group).
- Добавлено: Transparency: Atlassian is obligated under the SCCs to notify its customers and Forge developers in the event it is made subject to a request for government access to customer personal data from a government authority. In the event that Atlassian is legally prohibited from making such a disclosure, Atlassian is contractually obligated to challenge such prohibition and seek a waiver.
- Добавлено: Actions to challenge access: Under the SCCs, Atlassian is obligated to review the legality of government authority access requests and challenge such requests where they are considered to be unlawful.
- Добавлено: Organizational Measures
- Добавлено: Atlassian’s organizational measures to secure data include:
- Добавлено: Policy for government access: Atlassian publishes and follows Atlassian Guidelines for Law Enforcement Requests in responding to any government requests for data. To obtain data from Atlassian, law enforcement officials must provide legal process appropriate for the type of information sought, such as a subpoena, court order, or a warrant.
- Добавлено: Atlassian publishes its annual Transparency Report with information about government requests to access data.
- Добавлено: Onward transfers: Whenever we share your data with Atlassian service providers, we remain accountable to you for how it is used. We require all service providers to undergo a thorough cross-functional diligence process by subject matter experts in our Security, Privacy, and Risk & Compliance Teams to ensure our customers and Forge developers' personal data receives adequate protection. This process includes a review of the data Atlassian plans to share with the service provider and the associated level of risk, the supplier’s security policies, measures, and third-party audits, and whether the supplier has a mature privacy program that respects the rights of data subjects. We provide a list of our sub-processors on our sub-processors page.
- Добавлено: Privacy by design: Atlassian’s Privacy Principles outline Atlassian’s approach to privacy.
- Добавлено: Employee training: Atlassian provides data protection training to all Atlassian staff globally.