Use Rovo for HIPAA organizations

Rovo for HIPAA organizations allows healthcare entities and other HIPAA-covered organizations to use AI-powered search, chat, and agents while maintaining their regulatory obligations. It is covered under Atlassian’s existing Business Associate Agreement (BAA) for eligible customers.

By using Rovo in a HIPAA-enabled environment, organizations can leverage generative AI to find, learn, and act on information across their Atlassian tools without compromising the compliance of Protected Health Information (PHI).

HIPAA-eligible capabilities

Atlassian customers with HIPAA obligations can access the following Rovo features on their HIPAA-compliant sites:

• Rovo Chat: An AI-powered conversational assistant.

• Rovo Agents: Automated AI agents designed to take action across your workflows.

• Rovo Search: AI-powered enterprise search across Atlassian apps.

• In-app AI experiences: AI features embedded directly within Jira, Confluence, Jira Service Management, and Jira Product Discovery.

Some Rovo capabilities are not HIPAA-compliant at this time. These include, but are not limited to:

• Rovo MCP server

• Rovo CLI

• Rovo Browser extension

• Rovo Mobile and Desktop apps

Data boundaries and protections

To protect PHI within your HIPAA-enabled environment, Rovo automatically enforces specific data boundaries.

• Restricted write actions: Rovo is blocked from writing data to any Atlassian app that is not HIPAA-enabled.

• Third-party app blocking: Rovo cannot write to external systems via third-party connectors, ensuring PHI does not leave the HIPAA boundary.

Enable Rovo for a HIPAA organization

To provision Rovo for HIPAA-enabled environments and ensure the right compliance boundaries are in place, contact Atlassian Support.

Before you begin

Before enabling, review the HIPAA Implementation Guide to understand the shared-responsibility model and specific configuration boundaries.

Then, reach out to Atlassian Support to request Rovo provisioning for your HIPAA-compliant sites. Atlassian Support will set up Rovo and let you know once it's ready.

Enable Rovo

1. Go to Atlassian Administration. Select your organization if you have more than one.

2. Select Rovo from the left sidebar, then select Rovo access and enable Rovo for your desired app/s.

Available apps currently include Jira, Confluence, Jira Service Management, and/or Jira Product Discovery.