Close
View this page in your language?
All languages
Choose your language

The key to control is in your hands

Customer-managed keys, Atlassian’s advanced
encryption add-on – fully managed by you

Watch the demo

Encryption, on your terms

Unlock greater visibility and control over the encryption
of your Atlassian Cloud data.

no alt text

Lock down your data with KMS key policies

Enforce key policies to restrict access to your cloud data across the Atlassian Cloud Platform.

no alt text

Track and act on encryption events

Analyze when and how your encryption keys are used to identify risks and take action.

no alt text

Fortify your defenses with added controls

Mitigate security risks with added cryptographic and network controls.

Encryption that you control

Manage your encryption key policy
Verify that your Atlassian Cloud encryption policy is configured correctly.
Keep tabs on your encryption keys
Analyze and act on key operation events, such as revocation and re-encryption, for threat detection and reporting.
Prevent key access spoofing
Implement additional authentication and network traffic security controls on your KMS key policy.
Screenshot of Encryption page with account info and Encryption keys
Screenshot of Encryption page with account info and Encryption keys

Resources

no alt text

Further mitigate security risks to your Atlassian Cloud data

Read the whitepaper to learn how Customer-managed keys protect your data

Download
no alt text

Take control of your data encryption

Learn how to setup Customer-managed keys and more

Review documentation
no alt text

Ensure enterprise-grade data protection

Understand how we built the Atlassian Cloud Platform on a secure foundation

Visit the Trust Center

FAQs

How do I purchase Customer-managed keys (CMK)? Copy link to heading Copied! Show
  

Customer-managed keys (CMK) is Atlassian’s advanced encryption solution. It can currently be purchased as an add-on to a Cloud Enterprise plan and enabled on new cloud sites.

CMK currently supports selected data across apps such as Jira, Confluence, Jira Service Management, and Rovo (Search, Chat, and Agents). To learn more about purchasing CMK, please contact our sales team. 
How do I enable Customer-managed keys (CMK) for my organization? Copy link to heading Copied! Show
  

After you purchase Customer-managed keys (CMK), you can quickly enroll your organization in a CMK encryption policy in Atlassian Administration. For step-by-step guidance, please see our enrollment documentation.
I am a Data Center customer considering a move to Atlassian Cloud. How do I get Customer-managed keys (CMK)? Copy link to heading Copied! Show
  

Customer-managed keys (CMK) is exclusive to Atlassian Cloud. It was built to provide you with a certain level of control and visibility over data access.

By providing you with control over the encryption keys protecting your Atlassian Cloud data, CMK helps you further mitigate security risks and meet your organization’s compliance requirements to enable you to upgrade to and grow on Atlassian Cloud.

To begin exploring cloud migration options, please contact our sales team and visit our Atlassian Ascend website.

As a reminder, Atlassian Data Center products will reach end of life on March 28, 2029, as we shift our full focus to the cloud. This cloud focus will allow us to innovate faster and ship more benefits to help you stay ahead.
Can I enable Customer-managed keys (CMK) on existing cloud sites? Copy link to heading Copied! Show
  

No. Currently, Customer-managed keys (CMK) can only be enabled on new cloud sites. We are actively developing tooling to enable it on existing cloud sites, with availability targeted for late 2026.

To stay updated, please subscribe to our cloud roadmap.
Which Atlassian Cloud apps and data are supported by Customer-managed keys (CMK)? Copy link to heading Copied! Show
  

Customer-managed keys (CMK) currently support the following Atlassian apps: Jira, Confluence, Jira Service Management, and Rovo (Search, Chat, and Agents only).

Please refer to this page for the most up-to-date details on in-scope app data.
Which key stores are supported by Customer-managed keys (CMK)? Copy link to heading Copied! Show
  

Customer-managed keys (CMK) currently support AWS Key Management Service (KMS). We are working to expand support for additional key stores. To stay updated, please subscribe to our cloud roadmap.

Your data, your keys

Get started with Customer-managed keys

Watch the demo