Atlassian Sub-processors
Effective Starting May 15, 2026
Third-Party Sub-processors
Atlassian uses the third-party entities listed below (each, a “Sub-processor”) to process Customer Personal Data on behalf of Atlassian customers and developers in accordance with agreements between Atlassian and the Sub-processor to uphold Atlassian’s commitments in Atlassian's Data Processing Addendum, or for Forge, Atlassian’s Forge Data Processing Addendum.
Defined terms, such as “Personal Data”, “Customer Personal Data”, “Sub-processor”, “Cloud Products”, or “End User Personal Data” have the same meaning as in Atlassian's Data Processing Addendum, Atlassian's Customer Agreement, or Atlassian’s Forge Data Processing Addendum.
Atlassian carries out annual compliance reviews of its Sub-processors, and where the engagement of a Sub-processor requires the cross-border transfer of Personal Data, Atlassian conducts Transfer Impact Assessments in accordance with Applicable Data Protection Law for these data transfers. Atlassian imposes obligations on its Sub-processors to implement appropriate technical and organizational measures ensuring that the sub-processing of Personal Data is protected to the standards required by Applicable Data Protection Law and the same standard provided by Atlassian’s Data Processing Addendum, or for Forge, the Forge Data Processing Addendum, as the case may be.
The list below contains Sub-processors for each of Atlassian’s generally available Cloud Products and related Support or Advisory Services, as well as Forge. If a Beta or EAP service uses a new Sub-processor, Atlassian may use an alternative notification mechanism. For each Sub-processor below, processing of Personal Data will be for the duration of use of the applicable service(s) by the customer or the developer, and for the retention periods as set out in the customer’s agreement with Atlassian and any product documentation. Further information about Sub-processor security measures can be found via the external links below.
Sign up for emails to be notified when we add new Atlassian Sub-processors
Sub-processor | Applicable Cloud Products | Nature and Purpose of Processing | Categories of personal data | Location of Processing | Security Measures |
|---|---|---|---|---|---|
Hosting and Infrastructure Service Providers | |||||
Amazon Web Services, Inc. | AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) LoomOpsgenieRovoStatuspageTrello | Cloud hosting providerProvision of Atlassian support | Customer Personal Data, created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support | EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA, India, Japan, SingaporeIf you’ve enabled Atlassian’s Data Residency feature, certain (in-scope) data is hosted in your chosen region. For details on supported regions and how Data Residency works, see Data Residency: Manage Where Your Data is Hosted and Understand data residency. | |
Applicable Cloud Products DX | Nature and Purpose of Processing Cloud hosting provider | Categories of personal data Customer Personal Data created by customer and stored in DX | Location of Processing USA | ||
Clumio, Inc. | AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) OpsgenieRovoStatuspageTrello | Backup solutions provider for Amazon Simple Storage Service (S3) | Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support | EEA, UK, Australia, USA, and Singapore | |
Databricks, Inc. | Atlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence Cloud | Infrastructure provider to enable customer data querying, and analytics product features. | Customer Personal Data created by customer and stored in Applicable Cloud ProductsEnd User Personal Data created by developers and stored in Forge | USA | |
Applicable Cloud Products Forge | Nature and Purpose of Processing Infrastructure provider to enable End User Personal Data querying and analytics features for Forge Apps. | Categories of personal data End User Personal Data created by developers and stored in Forge | |||
Google LLC | DX | File Storage | Customer Personal Data created by customer and stored in DX | USA | |
Microsoft Corporation | Jira Align | Cloud hosting provider | Customer Personal Data created by customer and stored in Applicable Cloud Products | USA, Australia, Netherlands | |
MongoDB, Inc. | Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) | Cloud hosting provider for JSM Chat (formerly Halp) | Customer Personal Data created by customer and stored in Applicable Cloud Products | USA | |
NetApp, Inc. | Bitbucket Cloud (including Bitbucket Pipelines) | Cloud hosting provider | Customer Personal Data created by customer and stored in Applicable Cloud Products | USA | |
Salesforce, Inc. (Heroku) | DX | Cloud services provider | Customer Personal Data created by customer and stored in Applicable Cloud Products | USA | |
Snowflake, Inc. | DX | Cloud database provider | Customer Personal Data created by customer and stored in Applicable Cloud Products | USA | |
Cantab Research Ltd (trading as Speechmatics) | Loom | Transcription services | Customer Personal Data created by customer, in particular, personal data contained in product notice communications and user-initiated shared video recordings including associated comments and SMS/MMS messages | USA | |
Work OS, Inc. | DX | SCIM provisioning | Customer Personal Data created by customer and stored in DX | USA | |
Communications Technology Service Providers | |||||
Mailgun Technologies, Inc. | Jira Cloud (including Jira Software and Jira Work Management)Jira Product Discovery (JPD)Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) OpsgenieStatuspage | Communications technology provider for product notifications | Customer Personal Data created by customer, in particular, personal data contained in product notice communications | USA, EEA | |
Mailchimp | Loom | Communications technology provider for product notifications and video sharing over email | Customer Personal Data created by customer, in particular, personal data contained in product notice communications and user-initiated shared video recordings including associated comments and email messages | USA | |
MessageBird USA, Inc, (d/b/a Bird) | Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work Management)StatuspageTrello | Communications technology provider for product notifications | Customer Personal Data created by customer, in particular, personal data contained in product notice communicationsEnd User Personal Data created by developers and stored in Forge | USA, EEA | |
Applicable Cloud Products Forge | Categories of personal data End User Personal Data created by developers and stored in Forge | ||||
Vonage APIs (formerly Nexmo, Inc.) | Opsgenie | Communications technology provider | Customer Personal Data created by customer, in particular, personal data contained in text and voice communications | USA, UK, Singapore | |
OneSignal | Loom | Communications technology provider for mobile product notifications and video sharing | Customer Personal Data created by customer, in particular, personal data contained in product notice communications and user-initiated shared video recordings including associated comments and SMS/MMS messages | USA | |
Plivo, Inc. | Statuspage | Communications technology provider for product notifications | Customer Personal Data created by customer, in particular, personal data contained in product notice communications | USA | |
Twilio Inc. | Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work Management)Jira Service Management (JSM) Jira Product DiscoveryOpsgenieStatuspageTrello | Communications technology provider for product notifications | Customer Personal Data created by customer, in particular, personal data contained in product notice communicationsEnd User Personal Data created by developers and stored in Forge | USA | |
Applicable Cloud Products Forge | Categories of personal data End User Personal Data created by developers and stored in Forge | ||||
Content Delivery Network Providers | |||||
Cloudflare, Ltd. | AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) OpsgenieRovoStatuspageTrello | Content delivery network providerHosting provider for the Remote Model Context Protocol (MCP) Server | Customer Personal Data created by customer and stored in Applicable Cloud Products | Customer traffic is processed globally at the data center closest to the end user. | |
Applicable Cloud Products Forge | Nature and Purpose of Processing Content delivery network provider | Categories of personal data End User Personal Data created by developers and stored in Forge | |||
Applicable Cloud Products DX | Nature and Purpose of Processing Content delivery network provider | Categories of personal data Customer Personal Data created by customer and stored in DX | |||
Support Service Providers | |||||
e-Core Soluções em Tecnologia da Informaçiupão Ltda. | AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) OpsgenieRovoStatuspageTrello | Customer service, support, and cloud migration service provider | Customer Personal Data created by customer if shared with Atlassian via attachments in support tickets | Brazil, Mexico | Access only through Atlassian managed VPN, VDI, and MDM for computing devices |
Partner Hero | Loom | Customer service and technical support | Customer Personal Data created by customer shared during Loom support communications | Philippines, Romania, South Africa | |
SoftServe, Inc. | Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudJira Cloud (including Jira Software and Jira Work Management)Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Jira Product DiscoveryStatuspage | Customer service, outsourced engineering and technical support | Customer Personal Data created by customer and stored in Applicable Cloud ProductsEnd User Personal Data created by developers and stored in Forge | Bulgaria, Poland, United States | Access only through Atlassian managed laptops and systems |
Applicable Cloud Products Forge | Categories of personal data End User Personal Data created by developers and stored in Forge | ||||
Telus, Inc. | AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) OpsgenieRovoStatuspageTrello | Customer service | Customer Personal Data created by customer if shared with Atlassian via attachments in support tickets | Romania | Access only through Atlassian managed VPN, VDI, and MDM for computing devices |
Zendesk | Loom | Customer service and technical support | Customer Personal Data created by customer shared during Loom support communications | USA | |
AI and Analytics Service Providers | |||||
Amazon Web Services, Inc. (AWS Bedrock) | All Atlassian Cloud Products with enabled Atlassian Intelligence or Rovo | Generative AI services provider for intelligence product features | Customer Personal Data created by customer and stored in Applicable Cloud Products | USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Bahrain, Mexico, Brazil | |
Applicable Cloud Products AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) LoomOpsgenieRovoStatuspageTrello | Nature and Purpose of Processing Provision of Atlassian supportMaintenance of service, safety, and security | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support | |||
Applicable Cloud Products Forge | Nature and Purpose of Processing Generative AI services provider for intelligence developer features | Categories of personal data End User Personal Data processed by Forge Apps | |||
Google Vertex AI | All Atlassian Cloud Products with enabled Atlassian Intelligence or Rovo | Generative AI services provider for intelligence product features | Customer Personal Data created by customer and stored in Applicable Cloud Products | USA, EEA (Belgium, Netherlands, Finland), Singapore, Taiwan | |
Applicable Cloud Products AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) LoomOpsgenieRovoStatuspageTrello | Nature and Purpose of Processing Provision of Atlassian supportMaintenance of service, safety, and security | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support | |||
Databricks, Inc. | AtlasAtlassian Guard (Access/Guard family)Bitbucket Cloud (including Bitbucket Pipelines)CompassConfluence CloudData LakeInsightsJira AlignJira Cloud (including Jira Software and Jira Work Management)Jira Product DiscoveryJira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) LoomOpsgenieRovoStatuspageTrello | Infrastructure provider for machine learning development, processing and training | Customer Personal Data created by customer and stored in Applicable Cloud Products | USA | |
OpenAI, L.L.C. | All Atlassian Cloud Products with enabled Atlassian Intelligence, Loom AI, or Rovo | Generative AI services provider for intelligence product featuresFor the provision of Atlassian support | Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support | USA | |
Twilio, Inc (Twilio-Segment) | Loom | Data analytics service | Customer Personal Data created by customer and stored in Applicable Cloud Products | USA | |
Atlassian Government Cloud Sub-processors
Sub-processor | Location of Processing |
|---|---|
Amazon Web Services, Inc. | USA |
Crowdstrike | USA |
Google, LLC | USA |
Okta, Inc. | USA |
Tenable Holdings, Inc. | USA |
Atlassian Group Sub-processors
The Atlassian Group companies below may also act as Sub-processors to the extent that these Atlassian Group companies process Customer Personal Data when providing technical and operational support to customers.
Entity | Location |
|---|---|
Atlassian B.V. | Kingdom of the Netherlands |
Atlassian Canada Inc. | Canada |
Atlassian France S.A.S. | French Republic |
Atlassian Germany GmbH | Federal Republic of Germany |
Atlassian India LLP | Republic of India |
Atlassian K.K. | Japan |
Atlassian Korea Ltd. | Republic of Korea |
Atlassian New Zealand | New Zealand |
Atlassian Philippines, Inc. | Republic of the Philippines |
Atlassian Poland sp.z.o.o | Republic of Poland |
Atlassian Pte. Ltd. | Republic of Singapore |
Atlassian Pty. Ltd. | Commonwealth of Australia |
Atlassian (UK) Operations Ltd. | United Kingdom of Great Britain and Northern Ireland |
Atlassian US, Inc. | United States of America |
Opsgenie Yazılım Anonim Şirketi | Republic of Türkiye |
Recommended for you
Stay informed
Subscribe to receive notifications from us about updates to our legal terms (including our legal policies) and our list of sub-processors.