Vendor record · atlassian.com
What Atlassian promises about your data.
Where Atlassian publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Atlassian lists its sub-processors at atlassian.com/legal/subprocessors. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at atlassian.com/legal/data-processing-addendum (read October 15, 2026) gives you 30 days' notice.
- Window
- 30
- Sub-processors
- 43
- Pages
- 5
- Copies
- 33
days' notice when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Atlassian DPA
Atlassian's data processing agreement gives 30 days' notice before a new sub-processor is engaged. Here is the clause, from our October 15, 2026 copy:
30
days' notice
“Atlassian will provide such notice, to those emails subscribed, at least thirty (30) days before allowing any new Sub-processor to Process Customer Personal Data (the “Sub-processor Notice Period”).”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Atlassian published it.
atlassian.com/legal/data-processing-addendum · read 2026-10-15 · fingerprint e4aac0e08c3585f5…
How it says it sends notice
“Atlassian maintains an up-to-date list of its Sub-processors here, which contains a mechanism for Customer to subscribe to notifications of new Sub-processors.”
atlassian.com/legal/data-processing-addendum · read 2026-10-15
Atlassian sub-processors
Atlassian publishes a sub-processor list at atlassian.com/legal/subprocessors; we last read it on October 15, 2026. It names 43 entries. The first 15, as the list prints them: Amazon Web Services, Inc.; Atlassian B.V.; Atlassian Canada Inc.; Atlassian France S.A.S.; Atlassian Germany GmbH; Atlassian India LLP; Atlassian K.K.; Atlassian Korea Ltd.; Atlassian New Zealand; Atlassian (UK) Operations Ltd.; Atlassian Philippines, Inc.; Atlassian Poland sp.z.o.o; Atlassian Pte. Ltd.; Atlassian US, Inc.; Cantab Research Ltd (trading as Speechmatics); and 28 more in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
43 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Atlassian keeps your data
We hold no statement about data retention from Atlassian's watched pages. The pages we watch: data processing agreement atlassian.com/legal/data-processing-addendum; privacy policy atlassian.com/legal/privacy-policy; status page atlassian.com/status; sub-processor list atlassian.com/legal/subprocessors; terms of service www.atlassian.com/legal/cloud-terms-of-service. On training with customer data, Atlassian's privacy policy (atlassian.com/legal/privacy-policy, in the copy read October 4, 2026) says: “You can control whether you receive these communications as described below at “How to access and control your information” under "Opt-out of communications." To provide customer support: We use your information to resolve technical issues you encounter, to respond to your requests for assistance, to analyze crash information, and to repair and…”
Training on customer data
“Customer Data: Atlassian will Process Customer Data as a Processor in accordance with Customer’s Documented Instructions to: (a) provide and improve the Products and related Support and Advisory Services for Customer only, and enable the use of various features and functionalities in accordance with the Documentation and as directed by Users through the Cloud Products, including investigating Sec…”
atlassian.com/legal/data-processing-addendum · read 2026-10-15
Training on customer data
“We use information for a range of purposes described below, including to provide the Services and personalize your experience, to develop and improve our Services, to communicate with you, to conduct marketing and promotional activities, to provide customer support, to maintain Service safety and security, to protect our interests and rights, with your consent, and to aggregate and/or de-identify…”
atlassian.com/legal/privacy-policy · read 2026-10-04
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 43 · 2 name an AI provider we list
Amazon Web Services, Inc.
Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insigh…
Location of Processing EEA (Sweden, Ireland and Germany), Switzerland, UK, Cana…
Atlassian B.V.
Location Kingdom of the Netherlands
Atlassian Canada Inc.
Location Canada
Atlassian France S.A.S.
Location French Republic
Atlassian Germany GmbH
Location Federal Republic of Germany
Atlassian India LLP
Location Republic of India
Atlassian K.K.
Location Japan
Atlassian Korea Ltd.
Location Republic of Korea
Atlassian New Zealand
Location New Zealand
Atlassian (UK) Operations Ltd.
Location United Kingdom of Great Britain and Northern Ireland
Atlassian Philippines, Inc.
Location Republic of the Philippines
Atlassian Poland sp.z.o.o
Location Republic of Poland
Atlassian Pte. Ltd.
Location Republic of Singapore
Atlassian US, Inc.
Location United States of America
Cantab Research Ltd (trading as Speechmatics)
Applicable Cloud Products Loom
Location of Processing USA
Cloudflare, Ltd.
Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insigh…
Clumio, Inc.
Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insigh…
Location of Processing EEA, UK, Australia, USA, and Singapore
Crowdstrike
Location of Processing USA
Databricks, Inc.
Applicable Cloud Products Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud
Location of Processing USA
e-Core Soluções em Tecnologia da Informaçiupão Ltda.
Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insigh…
Location of Processing Brazil, Mexico
Google LLC
Applicable Cloud Products DX
Location of Processing USA
Google Vertex AIAI · Google (Gemini / Vertex AI)
Applicable Cloud Products All Atlassian Cloud Products with enabled Atlassian Intelligence or Rovo
Location of Processing USA, EEA (Belgium, Netherlands, Finland), Singapore, Tai…
Mailchimp
Applicable Cloud Products Loom
Location of Processing USA
Mailgun Technologies, Inc.
Applicable Cloud Products Jira Cloud (including Jira Software and Jira Work Management) Jira Product Discovery (JPD) Jira Service Management Cloud (including A…
Location of Processing USA, EEA
MessageBird USA, Inc, (d/b/a Bird)
Applicable Cloud Products Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Jira Cloud (including Jira Software and Jira Work Management…
Location of Processing USA, EEA
Microsoft Corporation
Applicable Cloud Products Jira Align
Location of Processing USA, Australia, Netherlands
MongoDB, Inc.
Applicable Cloud Products Jira Service Management Cloud (including Assets, JSM Chat/Assist, and JSM Operations)
Location of Processing USA
NetApp, Inc.
Applicable Cloud Products Bitbucket Cloud (including Bitbucket Pipelines)
Location of Processing USA
Okta, Inc.
Location of Processing USA
OneSignal
Applicable Cloud Products Loom
Location of Processing USA
OpenAI, L.L.C.AI · OpenAI
Applicable Cloud Products All Atlassian Cloud Products with enabled Atlassian Intelligence, Loom AI, or Rovo
Location of Processing USA
Opsgenie Yazılım Anonim Şirketi
Location Republic of Türkiye
Partner Hero
Applicable Cloud Products Loom
Location of Processing Philippines, Romania, South Africa
Plivo, Inc.
Applicable Cloud Products Statuspage
Location of Processing USA
Salesforce, Inc. (Heroku)
Applicable Cloud Products DX
Location of Processing USA
Snowflake, Inc.
Applicable Cloud Products DX
Location of Processing USA
SoftServe, Inc.
Applicable Cloud Products Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Jira Cloud (including Jira Software and Jira Work Management…
Location of Processing Bulgaria, Poland, United States
Telus, Inc.
Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insigh…
Location of Processing Romania
Tenable Holdings, Inc.
Location of Processing USA
Twilio Inc.
Applicable Cloud Products Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Jira Cloud (including Jira Software and Jira Work Management…
Location of Processing USA
Vonage APIs (formerly Nexmo, Inc.)
Applicable Cloud Products Opsgenie
Location of Processing USA, UK, Singapore
Work OS, Inc.
Applicable Cloud Products DX
Location of Processing USA
Zendesk
Applicable Cloud Products Loom
Location of Processing USA
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What Atlassian does not publish where we can read it
Of the 5 public pages we watch for Atlassian, these give us nothing right now.
Trust and security
the page at that URL is not that document
atlassian.com/trustBefore you conclude anything
This only means we couldn’t read it on a public page. Atlassian may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Atlassian. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Atlassian? With an email at atlassian.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Atlassian in your product? Hear the morning we read a change.
You get the lines that moved, in Atlassian’s own words, and the date any window closes. No card. Nothing to cancel.