Atlassian Intelligence procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | low | “Atlassian or its authorized agents may audit Customer’s use of the Software Products no more than once every twelve (12) months to confirm compliance with Customer’s Scope of Use, provided Atlassian gives Customer reasonable advance notice and uses reasonable efforts to minimize disruption to Customer. If Customer exceeds its Scope of Use, Atlassian may invoice for that excess use, and Customer will pay Atlassian promptly after invoice receipt. 5.3. Number of Instances . Unless otherwise specified in the Order or the Product-Specific Terms, Customer may install up to one (1) production instance of each Software Product included in an Order on systems owned or operated by Customer or its Users. ” | Captured 2026-06-10Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ This Section 4 only applies to Cloud Products. 4.1. Customer Data . Atlassian may process Customer Data as specified in Section 6 (Purposes of the Processing) of Schedule 1 of the DPA. 4.2. Security Program . Atlassian has implemented and will maintain an information security program that uses appropriate physical, technical and organizational measures designed to protect Customer Data and Customer Materials from unauthorized access, destruction, use, modification or disclosure, as described in its Security Measures. Atlassian will also maintain a compliance program that includes independent third-party audits and certifications, as described in its Security Measures. Further information about Atlassian’s security program is available on the Atlassian Trust Center at https://www.atlassian.com/trust , as updated from time to time. 4.3. Service Levels . Where applicable, the service level commitment for a Cloud Product is specified in the Service Level Agreement. 4.4. Data Retrieval . The Documentation describes how Customer may retrieve its Customer Data from the Cloud Products. 4.5. Removals and Suspension . Atlassian has no obligation to monitor Customer Data. Nonetheless, if Atlassian becomes aware that: (a) Customer Data may violate Law, Section 2.2 (Restrictions), or the rights of others (including relating to a takedown request received following the guidelines for Reporting Copyright and Trademark Violations at https://www.atlassian.com/legal/copyright-and-trademark-violations ), or (b) Customer’s use of the Cloud Products threatens the security or operation of the Cloud Products, then Atlassian may: (i) limit access to, or remove, the relevant Customer Data, or (ii) suspend Customer’s or any User’s access to the relevant Cloud Products. ” | Captured 2026-06-10Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | low | “ “ Code of Conduct ” means the Atlassian Code of Business Conduct & Ethics, available at https://investors.atlassian.com/governance/governance-documents/default.aspx. “ Customer Data ” means any data, content or materials provided to Atlassian by or at the direction of Customer or its Users via the Cloud Products, including from Third-Party Products. “ Customer Materials ” means materials and other resources that Customer provides to Atlassian in connection with Support or Advisory Services. “ Documentation ” means Atlassian’s usage guidelines and standard technical documentation for the applicable Product, available at https://support.atlassian.com/ , unless otherwise specified in the Product-Specific Terms. “ DPA ” means the Atlassian data processing addendum available at https://www.atlassian.com/legal/data-processing-addendum. “ Laws ” means all applicable laws, regulations, conventions, decrees, decisions, orders, judgments, codes and requirements of any government authority (federal, state, local or international) having jurisdiction. “ Order ” means Atlassian’s ordering document, online sign-up or other ordering process that Atlassian enables specifying the Products, Support or Advisory Services to be provided under this Agreement, accepted by Atlassian in accordance with Section 9 (Ordering Process and Delivery). “ Policies ” means the Acceptable Use Policy, Advisory Services Policy, guidelines for Reporting Copyright and Trademark Violations, Privacy Policy, Security Measures, Service Level Agreement, Support Policy, Third-Party Code Policy and any additional Atlassian policies specified in Product-Specific Terms. ” | Captured 2026-06-10Open source →Finding permalink → |
| Data retention | All applicable tiers | low | “Following expiration or termination, unless prohibited by Law, Atlassian will delete Customer Data in accordance with the Documentation. 12.5. Survival . These Sections survive expiration or termination of this Agreement: 2.2 (Restrictions), 4.2 (Security Program), 10.1 (Fees), 10.2 (Taxes), 11.4 (Disclaimers), 12.4 (Effect of Termination), 12.5 (Survival), 13 (Ownership), 14 (Limitations of Liability), 15 (Indemnification by Atlassian), 16 (Confidentiality), 17.4 (Disclaimer), 18 (Feedback), 20 (General Terms) and 21 (Definitions).” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ 7.1. Third-Party Code . This Agreement and the Third-Party Code Policy apply to open source software and commercial third-party software Atlassian includes in the Products. 7.2. Third-Party Products . Customer may choose to use the Products with third-party platforms, apps, add-ons, services or products, including offerings made available through the Atlassian Marketplace (“ Third-Party Products ”). Use of such Third-Party Products with the Products may require access to Customer Data and other data by the third-party provider, which, for Cloud Products Atlassian will permit on Customer’s behalf if Customer has enabled that Third-Party Product. Likewise, such use of Third-Party Products may entail access to Third-Party Product data by Atlassian. Customer’s use of Third-Party Products is subject to the relevant provider’s terms of use, not this Agreement, but data sent from the Third-Party Product to Customer’s Atlassian account is subject to this Agreement. Atlassian does not control and has no liability for Third-Party Products. Atlassian makes no warranty that the Products will, or will continue to, connect or interoperate with any Third-Party Product.” | Captured 2026-06-10Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | low | “ Subscribe to receive notifications from us about updates to our legal terms (including our legal policies) and our list of sub-processors.” | Captured 2026-06-10Open source →Finding permalink → |
| Tier differences | All applicable tiers | low | “export Law, or for any restricted end user under U.S. export Law. 20.14. Government End-Users . If Customer is a United States federal, state or local government customer, this Agreement is subject to, and is varied by, the Government Amendment available at https://www.atlassian.com/legal/government-amendment . 20.15. No Contingencies . The Products, Support and Advisory Services in each Order are purchased separately and not contingent on purchase or use of other Atlassian products and services, even if listed in the same Order. Customer’s purchases are not contingent on delivery of any future functionality or features.” | Captured 2026-06-10Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.