1,100 words, 84 clausesno date on the pageread 23/10/2026source
·Search Atlassian's industry leading security, third party audits and certifications, documentations, and legal commitments help support your compliance.
·Resources / GlobalAll categoriesAll industries Filter Region Global Asia Pacific Canada EMEA Latin America USA Category All categories Certifications / Attestations Law / Regulations Alignments / Frameworks Industry All industries Financial services Government and public sector Healthcare and life sciences Retail Media and entertainment Education Automotive Artificial Intelligence Reset
·This document is designed to assist assessors validating the security posture of a cloud service in order to provide organisations with independent assurance of security claims made by Cloud Service Providers (CSPs). Learn more
·The Australian Cyber Security Centre (ACSC) has developed prioritised mitigation strategies, in the form of the Strategies to Mitigate Cyber Security Incidents, to help organisations mitigate cyber security incidents caused by various cyber threats. Learn more
·Atlassian abides by the APRA Prudential Standard CPS 234 Information Security ("Prudential Standard CPS 234") Learn more
·The Australia Privacy Act to protect the privacy of individuals and to govern how certain federal Australian Governmental agencies and organizations... Learn more
·BaFin, also known as the Federal Financial Supervisory Authority, is an autonomous public-law institution formed to ensure the proper functioning, stability, and integrity of the German financial system. Learn more
·C5 is a security framework developed by Germany's Federal Office for Information Security that establishes minimum requirements for secure cloud computing. Learn more
·Atlassian is committed to abiding by the California Consumer Privacy Act (CCPA) to ensure California consumers with a number of privacy protections Learn more
·The Cloud Security Alliance (CSA) is a non-profit organization whose mission is to "promote the use of best practices for providing security assurance within Cloud Computing, and provide education on the uses of Cloud Computing to help secure all other forms of computing." Learn more
·The EU's Digital Operational Resilience Act (DORA) introduces a comprehensive framework to enhance the digital operational resilience of financial institutions operating in the European Union. Learn more
·The European Banking Authority (EBA) is an independent EU authority tasked with implementing a standard set of rules to regulate and supervise banking across all EU countries. Learn more
·The European Union Agency for Cybersecurity (ENISA) is an EU organization dedicated to promoting a high level of cybersecurity standards across Europe. Learn more
·Atlassian's commitment to the EU AI Act, strengthening responsible AI governance, transparency, and data protection across portfolio. Learn more
·GovRAMP (formerly StateRAMP) is a nonprofit that standardizes cloud security for CSPs serving state, local, tribal, and educational governments. Learn more
·The EU Data Act aims to create a fair and innovative data economy by increasing data availability and establishing rules for access and use across the EU. Learn more
·The U.S Federal Government established the Federal Risk and Authorization Management Program (FedRAMP), a government-wide program that provides a standardized approach to security and risk assessment, authorization, and continuous monitoring for cloud products and services. Learn more
·The Swiss Financial Market Supervisory Authority (FINMA) oversees a number of financial institutions including banks, insurance companies, superannuation. Learn more
·GDPR imposes privacy and security regulations onto organizations Learn more
·This report is intended solely to provide information and guidance to Atlassian's cloud customers on how we align with GxP. Learn more
·The higher education information security community, EDUCAUSE, Internet2, and the Research & Education Networks Information Sharing & Analysis Center (REN-ISAC) created the Higher Education Cloud Vendor Assessment Toolkit (HECVAT), a self-assessment that attempts to standardize higher education information security and data protection requirements in the Unites States around cloud service providers. Learn more
·Atlassian has implemented the physical, technical, and administrative safeguards required by HIPAA to support our role as a business associate. Learn more
·The Hong Kong Monetary Authority (HKMA) functions as the central bank of Hong Kong and has the role of overseeing authorized institutions (AIs). Learn more
·IRAP (Information Security Registered Assessors Program), initiated by the Australian Signals Directorate (ASD), offers a framework for assessing cybersecurity controls in Australian government agencies and organizations. Learn more
·ISO 22301:2019 is the international standard for Business Continuity Management Systems (BCMS). Learn more
·The International Organization for Standardization (ISO) is an independent, non-governmental international organization with an international membership of 163 national standards bodies. Learn more
·Lei Geral de Proteção de Dados (LGPD) regulates the collection, use, processing, storage, and transfer of personal data of Brazil data subjects Learn more
·The Monetary Authority of Singapore (MAS), serves as the bank regulator and central bank in Singapore, has issued Guidelines on Outsourcing Risk Management Learn more
·The National Cyber Security Centre (NCSC) is a United Kingdom governmental organization... Learn more
·The nFADP stands for the New Federal Act on Data Protection, which will come into effect on the 1st of September 2023. Learn more
·Sub-resource page for Section 889 of US Federal Acquisition Regulation Learn more
·SOC 1 reports examine service organization controls relevant to customers' internal control over financial reporting. Learn more
·System and Organization Controls (SOC) 2 reports are independent third-party examination reports that demonstrate how an organization achieves key compliance controls and objectives. Learn more
·The Trusted Information Security Assessment Exchange (TISAX) is managed and overseen by the German Association of the Automotive Industry (VDA). Learn more
·The Prudential Regulation Authority (PRA) has the critical role of overseeing the prudential supervision of approximately 1,500 financial institutions, which encompass banks, insurance companies, building societies, credit unions, and specific large investment firms. Learn more
·Section 508 is an amendment to the Rehabilitation Act of 1973, a US federal law. Learn more
·The Web Content Accessibility Guidelines (WCAG) are the internationally recognized set of requirements for making software, websites, and content accessible to people living with disabilities. Learn more
·Reach out to our sales team for questions about our products and capabilities. Contact sales