Paradrawthe legal stack, drawnnotice
List of Data Subprocessors | Atlassian
3,102 words, 81 clausesno date on the pageread 11/10/2026source
·Atlassian Sub-processors
·Effective Starting May 15, 2026
·Third-Party Sub-processors
·Atlassian uses the third-party entities listed below (each, a "Sub-processor") to process Customer Personal Data on behalf of Atlassian customers and developers in accordance with agreements between Atlassian and the Sub-processor to uphold Atlassian's commitments in Atlassian's Data Processing Addendum, or for Forge, Atlassian's Forge Data Processing Addendum.
·Defined terms, such as "Personal Data", "Customer Personal Data", "Sub-processor", "Cloud Products", or "End User Personal Data" have the same meaning as in Atlassian's Data Processing Addendum, Atlassian's Customer Agreement, or Atlassian's Forge Data Processing Addendum.
·Atlassian carries out annual compliance reviews of its Sub-processors, and where the engagement of a Sub-processor requires the cross-border transfer of Personal Data, Atlassian conducts Transfer Impact Assessments in accordance with Applicable Data Protection Law for these data transfers. Atlassian imposes obligations on its Sub-processors to implement appropriate technical and organizational measures ensuring that the sub-processing of Personal Data is protected to the standards required by Applicable Data Protection Law and the same standard provided by Atlassian's Data Processing Addendum, or for Forge, the Forge Data Processing Addendum, as the case may be.
·The list below contains Sub-processors for each of Atlassian's generally available Cloud Products and related Support or Advisory Services, as well as Forge. If a Beta or EAP service uses a new Sub-processor, Atlassian may use an alternative notification mechanism. For each Sub-processor below, processing of Personal Data will be for the duration of use of the applicable service(s) by the customer or the developer, and for the retention periods as set out in the customer's agreement with Atlassian and any product documentation. Further information about Sub-processor security measures can be found via the external links below.
·Sign up for emails to be notified when we add new Atlassian Sub-processors
| Sub-processor | Applicable Cloud Products | Nature and Purpose of Processing | Categories of personal data | Location of Processing | Security Measures |
|---|---|---|---|---|---|
| Hosting and Infrastructure Service Providers | |||||
| Amazon Web Services, Inc. | Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (including Jira Software and Jira Work Management) Jira Product Discovery Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Loom Opsgenie Rovo Statuspage Trello | Nature and Purpose of Processing Cloud hosting provider Provision of Atlassian support | Categories of personal data Customer Personal Data, created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support | Location of Processing EEA (Sweden, Ireland and Germany), Switzerland, UK, Canada, Australia, Singapore, South Korea, USA, India, Japan, Singapore If you've enabled Atlassian's Data Residency feature, certain (in-scope) data is hosted in your chosen region. For details on supported regions and how Data Residency works, see Data Residency: Manage Where Your Data is Hosted and Understand data residency. | Security Measures AWS Compliance Programs |
| Applicable Cloud Products DX | Nature and Purpose of Processing Cloud hosting provider | Categories of personal data Customer Personal Data created by customer and stored in DX | Location of Processing USA | |||||
| Clumio, Inc. | Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (including Jira Software and Jira Work Management) Jira Product Discovery Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Opsgenie Rovo Statuspage Trello | Nature and Purpose of Processing Backup solutions provider for Amazon Simple Storage Service (S3) | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support | Location of Processing EEA, UK, Australia, USA, and Singapore | Security Measures Commvault Legal |
| Databricks, Inc. | Applicable Cloud Products Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud | Nature and Purpose of Processing Infrastructure provider to enable customer data querying, and analytics product features. | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products End User Personal Data created by developers and stored in Forge | Location of Processing USA | Security Measures Security & Trust Center |
| Applicable Cloud Products Forge | Nature and Purpose of Processing Infrastructure provider to enable End User Personal Data querying and analytics features for Forge Apps. | Categories of personal data End User Personal Data created by developers and stored in Forge | |||||
| Google LLC | Applicable Cloud Products DX | Nature and Purpose of Processing File Storage | Categories of personal data Customer Personal Data created by customer and stored in DX | Location of Processing USA | Security Measures Google Privacy Terms & Security Measures |
| Microsoft Corporation | Applicable Cloud Products Jira Align | Nature and Purpose of Processing Cloud hosting provider | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products | Location of Processing USA, Australia, Netherlands | Security Measures Microsoft Trust Center |
| MongoDB, Inc. | Applicable Cloud Products Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) | Nature and Purpose of Processing Cloud hosting provider for JSM Chat (formerly Halp) | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products | Location of Processing USA | Security Measures Trust Center |
| NetApp, Inc. | Applicable Cloud Products Bitbucket Cloud (including Bitbucket Pipelines) | Nature and Purpose of Processing Cloud hosting provider | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products | Location of Processing USA | Security Measures NetApp SaaS Backup |
| Salesforce, Inc. (Heroku) | Applicable Cloud Products DX | Nature and Purpose of Processing Cloud services provider | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products | Location of Processing USA | Security Measures Heroku Security, Privacy, and Compliance |
| Snowflake, Inc. | Applicable Cloud Products DX | Nature and Purpose of Processing Cloud database provider | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products | Location of Processing USA | Security Measures Snowflake Security Addendum |
| Cantab Research Ltd (trading as Speechmatics) | Applicable Cloud Products Loom | Nature and Purpose of Processing Transcription services | Categories of personal data Customer Personal Data created by customer, in particular, personal data contained in product notice communications and user-initiated shared video recordings including associated comments and SMS/MMS messages | Location of Processing USA | Security Measures Speechmatics Security |
| Work OS, Inc. | Applicable Cloud Products DX | Nature and Purpose of Processing SCIM provisioning | Categories of personal data Customer Personal Data created by customer and stored in DX | Location of Processing USA | Security Measures WorkOS Security |
| Communications Technology Service Providers | |||||
| Mailgun Technologies, Inc. | Applicable Cloud Products Jira Cloud (including Jira Software and Jira Work Management) Jira Product Discovery (JPD) Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Opsgenie Statuspage | Nature and Purpose of Processing Communications technology provider for product notifications | Categories of personal data Customer Personal Data created by customer, in particular, personal data contained in product notice communications | Location of Processing USA, EEA | Security Measures Mailgun's Commitment to Security and Compliance |
| Mailchimp | Applicable Cloud Products Loom | Nature and Purpose of Processing Communications technology provider for product notifications and video sharing over email | Categories of personal data Customer Personal Data created by customer, in particular, personal data contained in product notice communications and user-initiated shared video recordings including associated comments and email messages | Location of Processing USA | Security Measures Mailchimp Security |
| MessageBird USA, Inc, (d/b/a Bird) | Applicable Cloud Products Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Jira Cloud (including Jira Software and Jira Work Management) Statuspage Trello | Nature and Purpose of Processing Communications technology provider for product notifications | Categories of personal data Customer Personal Data created by customer, in particular, personal data contained in product notice communications End User Personal Data created by developers and stored in Forge | Location of Processing USA, EEA | Security Measures Bird Security Overview |
| Applicable Cloud Products Forge | Categories of personal data End User Personal Data created by developers and stored in Forge | |||||
| Vonage APIs (formerly Nexmo, Inc.) | Applicable Cloud Products Opsgenie | Nature and Purpose of Processing Communications technology provider | Categories of personal data Customer Personal Data created by customer, in particular, personal data contained in text and voice communications | Location of Processing USA, UK, Singapore | Security Measures Vonage Security & Trust |
| OneSignal | Applicable Cloud Products Loom | Nature and Purpose of Processing Communications technology provider for mobile product notifications and video sharing | Categories of personal data Customer Personal Data created by customer, in particular, personal data contained in product notice communications and user-initiated shared video recordings including associated comments and SMS/MMS messages | Location of Processing USA | Security Measures Data and Security Questions |
| Plivo, Inc. | Applicable Cloud Products Statuspage | Nature and Purpose of Processing Communications technology provider for product notifications | Categories of personal data Customer Personal Data created by customer, in particular, personal data contained in product notice communications | Location of Processing USA | Security Measures Security for Cloud Communications |
| Twilio Inc. | Applicable Cloud Products Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Jira Cloud (including Jira Software and Jira Work Management) Jira Service Management (JSM) Jira Product Discovery Opsgenie Statuspage Trello | Nature and Purpose of Processing Communications technology provider for product notifications | Categories of personal data Customer Personal Data created by customer, in particular, personal data contained in product notice communications End User Personal Data created by developers and stored in Forge | Location of Processing USA | Security Measures Twilio Trust Center |
| Applicable Cloud Products Forge | Categories of personal data End User Personal Data created by developers and stored in Forge Content Delivery Network Providers | |||||
| Cloudflare, Ltd. | Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (including Jira Software and Jira Work Management) Jira Product Discovery Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Opsgenie Rovo Statuspage Trello | Nature and Purpose of Processing Content delivery network provider Hosting provider for the Remote Model Context Protocol (MCP) Server | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products | Location of Processing Customer traffic is processed globally at the data center closest to the end user. | Security Measures Certifications and Compliance Resources |
| Applicable Cloud Products Forge | Nature and Purpose of Processing Content delivery network provider | Categories of personal data End User Personal Data created by developers and stored in Forge | |||||
| Applicable Cloud Products DX | Nature and Purpose of Processing Content delivery network provider | Categories of personal data Customer Personal Data created by customer and stored in DX Support Service Providers | |||||
| e-Core Soluções em Tecnologia da Informaçiupão Ltda. | Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (including Jira Software and Jira Work Management) Jira Product Discovery Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Opsgenie Rovo Statuspage Trello | Nature and Purpose of Processing Customer service, support, and cloud migration service provider | Categories of personal data Customer Personal Data created by customer if shared with Atlassian via attachments in support tickets | Location of Processing Brazil, Mexico | Security Measures Access only through Atlassian managed VPN, VDI, and MDM for computing devices |
| Partner Hero | Applicable Cloud Products Loom | Nature and Purpose of Processing Customer service and technical support | Categories of personal data Customer Personal Data created by customer shared during Loom support communications | Location of Processing Philippines, Romania, South Africa | Security Measures Data Security & Privacy at PartnerHero |
| SoftServe, Inc. | Applicable Cloud Products Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Jira Cloud (including Jira Software and Jira Work Management) Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Jira Product Discovery Statuspage | Nature and Purpose of Processing Customer service, outsourced engineering and technical support | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products End User Personal Data created by developers and stored in Forge | Location of Processing Bulgaria, Poland, United States | Security Measures Access only through Atlassian managed laptops and systems |
| Applicable Cloud Products Forge | Categories of personal data End User Personal Data created by developers and stored in Forge | |||||
| Telus, Inc. | Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (including Jira Software and Jira Work Management) Jira Product Discovery Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Opsgenie Rovo Statuspage Trello | Nature and Purpose of Processing Customer service | Categories of personal data Customer Personal Data created by customer if shared with Atlassian via attachments in support tickets | Location of Processing Romania | Security Measures Access only through Atlassian managed VPN, VDI, and MDM for computing devices |
| Zendesk | Applicable Cloud Products Loom | Nature and Purpose of Processing Customer service and technical support | Categories of personal data Customer Personal Data created by customer shared during Loom support communications | Location of Processing USA | Security Measures Zendesk Trust Center AI and Analytics Service Providers |
| Amazon Web Services, Inc. (AWS Bedrock) | Applicable Cloud Products All Atlassian Cloud Products with enabled Atlassian Intelligence or Rovo | Nature and Purpose of Processing Generative AI services provider for intelligence product features | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products | Location of Processing USA, EEA (Germany, Sweden, Italy, Spain, Ireland, France) South Africa, Japan, South Korea, India, Singapore, Australia, Indonesia, Canada, Switzerland, UK, Bahrain, Mexico, Brazil | Security Measures AWS Compliance Programs |
| Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (including Jira Software and Jira Work Management) Jira Product Discovery Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Loom Opsgenie Rovo Statuspage Trello | Nature and Purpose of Processing Provision of Atlassian support Maintenance of service, safety, and security | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support | |||||
| Applicable Cloud Products Forge | Nature and Purpose of Processing Generative AI services provider for intelligence developer features | Categories of personal data End User Personal Data processed by Forge Apps | |||||
| Google Vertex AI | Applicable Cloud Products All Atlassian Cloud Products with enabled Atlassian Intelligence or Rovo | Nature and Purpose of Processing Generative AI services provider for intelligence product features | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products | Location of Processing USA, EEA (Belgium, Netherlands, Finland), Singapore, Taiwan | Security Measures Google Privacy Terms & Security Measures |
| Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (including Jira Software and Jira Work Management) Jira Product Discovery Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Loom Opsgenie Rovo Statuspage Trello | Nature and Purpose of Processing Provision of Atlassian support Maintenance of service, safety, and security | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support | |||||
| Databricks, Inc. | Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (including Jira Software and Jira Work Management) Jira Product Discovery Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations) Loom Opsgenie Rovo Statuspage Trello | Nature and Purpose of Processing Infrastructure provider for machine learning development, processing and training | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products | Location of Processing USA | Security Measures Security & Trust Center |
| OpenAI, L.L.C. | Applicable Cloud Products All Atlassian Cloud Products with enabled Atlassian Intelligence, Loom AI, or Rovo | Nature and Purpose of Processing Generative AI services provider for intelligence product features For the provision of Atlassian support | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products, or shared with Atlassian during the provision of support | Location of Processing USA | Security Measures Security & Trust |
| Twilio, Inc (Twilio-Segment) | Applicable Cloud Products Loom | Nature and Purpose of Processing Data analytics service | Categories of personal data Customer Personal Data created by customer and stored in Applicable Cloud Products | Location of Processing USA | Security Measures Segment Trust Center |
·Atlassian Government Cloud Sub-processors
| Sub-processor | Location of Processing |
|---|---|
| Amazon Web Services, Inc. | Location of Processing USA |
| Crowdstrike | Location of Processing USA |
| Google, LLC | Location of Processing USA Okta, Inc. | Location of Processing USA | |
| Tenable Holdings, Inc. | Location of Processing USA |
·Atlassian Group Sub-processors
·The Atlassian Group companies below may also act as Sub-processors to the extent that these Atlassian Group companies process Customer Personal Data when providing technical and operational support to customers. Entity | Location
| Atlassian B.V. | Location Kingdom of the Netherlands Atlassian Canada Inc. | Location Canada | |
| Atlassian France S.A.S. | Location French Republic |
| Atlassian Germany GmbH | Location Federal Republic of Germany |
| Atlassian India LLP | Location Republic of India Atlassian K.K. | Location Japan | |
| Atlassian Korea Ltd. | Location Republic of Korea |
| Atlassian New Zealand | Location New Zealand |
| Atlassian Philippines, Inc. | Location Republic of the Philippines |
| Atlassian Poland sp.z.o.o | Location Republic of Poland |
| Atlassian Pte. Ltd. | Location Republic of Singapore |
| Atlassian Pty. Ltd. | Location Commonwealth of Australia |
| Atlassian (UK) Operations Ltd. | Location United Kingdom of Great Britain and Northern Ireland |
| Atlassian US, Inc. | Location United States of America |
| Opsgenie Yazılım Anonim Şirketi | Location Republic of Türkiye |
·Related content
·Atlassian Customer Agreement
·Product-specific terms
·Advisory Services
·Data Processing Addendum
·Subscribe to receive an email whenever we make a change
·Thank you for your submission
·Stay informed
·Subscribe to receive notifications from us about updates to our legal terms (including our legal policies) and our list of sub-processors.