Care about security? We do too. Learn what Atlassian does and what you can do too.
Need to test security settings? Learn how with authentication policies.
Eager to configure? Read on about single sign-on.
Manage password policies for users? Set up two-step verification and idle session duration.
Stay on top of data across your organization with all the reports and tracking options we offer.
Learn about where your cloud product data is hosted and the types of data you can move.
Control how users and apps access your Atlassian cloud products.
We now support self-serve for Standard and Premium plans as well that fall within certain eligibility criteria.
Check if you're eligible on admin.atlassian.com > Security > Data residency.
This feature is available for Jira Software, Jira Service Management and Confluence with Enterprise, Premium and Standard plans.
Data residency gives you control over where your in-scope product data for Jira Software, Jira Service Management, and Confluence is hosted. It allows you to choose whether it’s globally distributed or held in place in a defined geographic location, such as Europe or the US.
If you work in a regulated industry like finance, government, or healthcare, data residency may be a necessity for operating in a cloud environment. More generally, it can also help you meet company data management requirements.
View where your product data is hosted
You can view where your in-scope product data is hosted from your organization administration. You must have organization admin permissions to do this.
To view where your product data is hosted:
Go to admin.atlassian.com. Select your organization if you have more than one.
Select Security > Data residency.
This will open the data residency page for your organization. This page lists the products in your organization, the location of each product, and the AWS regions the location corresponds with. If a product is PINNED to a location, its in-scope data is held in place there.
If data residency is available for your product, you can request to have its in-scope data moved and pinned to a new location. To learn more about this, see Move data to another location.
To protect your data, we create automated Amazon Relational Database Service (RDS) backups daily. When you choose a data residency location, we also store backups of your data in this location. Learn more about how we manage your data
What are locations and AWS regions?
A product’s location is the geographical boundary where its in-scope data is hosted. Each location corresponds with one or more AWS regions, which are physical locations around the world where AWS clusters its data centers. Learn more about AWS infrastructure and the role it plays in our cloud hosting infrastructure.
The following locations are available for you to select from:
All Atlassian cloud in AWS region
Consists of AWS Sydney region
Consists of AWS Frankfurt and Dublin regions
Consists of US East and US West regions
Consists of AWS Frankfurt region
We’re adding Germany to our list of supported locations in phases by December 2022. You’ll see it as a supported location within the next few weeks. Learn more about Germany data residency.
By default, all products are hosted in the Global location, which includes all of our AWS regions. For these products, we determine where their in-scope data is located. To optimize product performance, we don’t limit data movement for these products, and we move data between AWS regions as needed.
If you require your in-scope product data to stay in a specific location, and data residency is available for your product, you can request to have its in-scope data moved to a location and pinned there. To learn more about this, see Move data to another location
In-scope product data
This table lists in-scope product data types that can be pinned, and out-of-scope product data that can’t. For definitions on these data types see the glossary.
✅ Can be pinned
❌ Can’t be pinned
Jira Service Management
All analytics data is hosted in our US location.
Why we don't pin user account information data
We store user account information in a central identity service, and a small, controlled set of replica services. We don’t pin these services, and the user account information in them, because we host them around the world to meet the performance needs of our customers.
We store user account information this way to limit its footprint in our system. It means that this information is not stored in our products at all. Instead, our products store representative IDs that they use to retrieve it from our identity services.
For these reasons, data residency cannot apply to user data at this time. We understand that this may be a challenge for some of our customers, and we are happy to help you find a solution that would work better for your data residency needs.
For more information on where and how we store user data, see the Atlassian Trust center.
How we maintain GDPR compliance
We take privacy seriously, and operate a global privacy program to meet the requirements of the GDPR, CCPA, LGPD, and beyond. We treat all user data the same way and use industry-standard technical and organizational measures to secure the information we store. Our Privacy Program is tailored to meet both legal requirements as well as your needs.
Why we don’t pin Atlassian Marketplace and app data
Atlassian Marketplace is comprised primarily of third-party app partners. These partners are not a part of Atlassian. We are in discussions with our Marketplace partners about data residency, and we’re working on the ability for you to choose the location where you’d like your app data hosted.
Currently, we’re also unable to pin Atlassian Apps that are installed through the Marketplace. We’re working on offering this functionality.
Why we don’t pin Jira Service Management data that is powered by Opsgenie
Jira Service Management combines the rich capabilities of Jira Service Desk with modern incident management, powered by Opsgenie, to provide a next-generation solution for both IT and Enterprise Service Management (ITSM & ESM). Currently, Jira Service Management features powered by Opsgenie aren’t incorporated into the Jira platform and aren’t eligible to be pinned to a location. It’s on our Cloud roadmap, but until then, we’d like you to be aware that:
certain Jira Service Management product data will always be hosted in the US location, even if you choose to have your Jira Service Management in the EU location
when you move your Jira Software, your Jira Service Management will still experience downtime, but your users will still be able to access features powered by Opsgenie
If you have an Opsgenie product that is not incorporated in Jira Service Management, you can choose to host certain data in the EU or US. Learn more about data residency for Opsgenie.
Data residency glossary
Third-party asset data stored in the asset platform used to synchronize with Jira functionality.
Atlassian Access is a subscription that you purchase for your whole company. It enables visibility and security across all Atlassian accounts and products, and gives you one place to manage your users and enforce security. Learn more about Atlassian Access
Atlassian Marketplace and app data
Data from Connect apps that may be stored outside of the Atlassian cloud environment by a third-party app vendor.
Files attached or added to Jira Software or Confluence issues, pages, or other content.
Logs generated by admin actions.
Automation rule configuration data
Data that we capture when an Automation rule is created or edited to enable us to define its behavior.
Amazon Web Services regions. Learn more about AWS infrastructure
Content stored in a non-specified region for up to 30 days with the purpose of:
Connected DevOps data
Data related to the Jira DevOps experience including:
User data in your customer accounts for Jira Service Management projects.
Data in transit
Data being processed or moved across, and not stored, by Atlassian store.
Incident management functionality data
The data used in functionality for the incident management feature powered by Opsgenie.
In-product notification data
Data related to Jira Software and Confluence in-product notifications.
Jira Service Management features powered by Opsgenie
All features accessed through the Opsgenie URL. Some of these features are displayed in the Jira Service Management product screen.
Knowledge base category data
Categories for the Jira Service Management knowledge base, including description and configuration displayed in the portal when integrated with Confluence.
Atlassian system logs used for operational maintenance and diagnostic purposes.
The data used to describe a Confluence space for the purpose of search indexing.
Permission and restriction configuration data
Data related to the configuration of product or site access permissions or restrictions.
Product data that is held in place in a location.
Events fired by our cloud products for in-product user experience optimization and performance.
Data added directly by a user.
Product data at rest
Data added directly by a user, that has persisted for 30 days or longer in our cloud data stores.
Logs generated by Jira Software and Confluence product changes related to content and configuration.
Data in customer requests triaged for teams to answer. For example, a summary, status, or customer name.
SLA configuration data
Service Level Agreement text field names, time metric configuration, calendar configuration, and JQL queries for SLA Goal configurations.
Source data for notifications in emails
Data in an email with notification details. For example, an email that contains issue names and comments.
Team profile information data
Data related to your Atlassian team profile, including:
Third-party product integration data
Data from any product integrated with Jira Software or Confluence. For example, a Github integration.
Transient rule execution data
Data that we pass to an Automation rule, or is looked up by an Automation rule, so it can perform its actions. We only keep this data for the duration of the rule execution. It may include issue and user data.
User account information data
Personal account information including:
Events fired by our cloud products to help understand experiences based on how a user interacts with products.
Was this helpful?