Does Atlassian (Jira & Confluence) offer EU data residency?
Atlassian Pty Ltd · Dev & Project Management · official site ↗
EU data residency availableEU-US DPF + SCCsDPA available
Where does Atlassian (Jira & Confluence) store EU data — and who can touch it?
Atlassian (Jira & Confluence) offers EU data residency, and relies on the EU-US Data Privacy Framework plus SCCs for transfers.
Atlassian Cloud offers EU and Germany data residency on Standard, Premium and Enterprise plans at no extra cost (it must be configured, not default), is EU-US DPF certified, and uses SCCs for transfers.
EU data residency
Can you keep data in the EU?
Data residency is available on Standard, Premium and Enterprise Cloud subscriptions, with pinning to EU (Frankfurt/Dublin) or Germany among the region options. It is NOT enabled by default — an admin must configure it in Cloud admin settings, and only in-scope product data (Jira, Jira Service Management, Confluence) is pinned.
Transfer mechanism
Atlassian self-certifies to the EU-US Data Privacy Framework and incorporates SCCs into its DPA; residency pins in-scope product data to the chosen region but support and some sub-processor flows can still cross borders under SCCs.
Sub-processors
Who else processes your data?
Atlassian publishes a sub-processor list covering its cloud products with general authorisation and a subscription option for change notifications. current sub-processor list ↗
Data Processing Agreement (DPA)
Does Atlassian (Jira & Confluence) sign a DPA?
A Data Processing Addendum is published and applies to customer agreements without separate negotiation. DPA ↗
What the trust-badge pages don't tell you
Residency is broadly available (not enterprise-locked) but OFF by default and scoped to specific products — connected Marketplace apps and some data types may sit outside the pinned region.
$249/moto monitor up to 25 vendors' DPA & residency
≈ $3,000/yr, incl. cited bulk export
≈ $3,000/yr, incl. cited bulk export
Monitor your whole vendor list for DPA & residency changes
The free lookup answers one vendor at a time. Teams running EU vendor intake track dozens and need to know the moment a sub-processor, residency region or DPA term changes. Leave your work email and we'll set up monitoring + a cited export for your list.
Get notified when this changes
Compliance isn't one-and-done. Leave your email and we'll alert you when any vendor's BAA or HIPAA status we cover changes.
Frequently asked questions
Does Atlassian (Jira & Confluence) offer EU data residency?
Yes. Data residency is available on Standard, Premium and Enterprise Cloud subscriptions, with pinning to EU (Frankfurt/Dublin) or Germany among the region options. It is NOT enabled by default — an admin must configure it in Cloud admin settings, and only in-scope product data (Jira, Jira Service Management, Confluence) is pinned.
Where does Atlassian (Jira & Confluence) send my data, and does it rely on SCCs?
Atlassian self-certifies to the EU-US Data Privacy Framework and incorporates SCCs into its DPA; residency pins in-scope product data to the chosen region but support and some sub-processor flows can still cross borders under SCCs.
Who are Atlassian (Jira & Confluence)'s sub-processors?
Atlassian publishes a sub-processor list covering its cloud products with general authorisation and a subscription option for change notifications. See the current list at https://www.atlassian.com/legal/sub-processors.
Does Atlassian (Jira & Confluence) sign a GDPR Data Processing Agreement (DPA)?
Yes — A Data Processing Addendum is published and applies to customer agreements without separate negotiation.
Is Atlassian (Jira & Confluence) GDPR compliant?
Atlassian (Jira & Confluence) can be used in a GDPR-compliant way, but compliance depends on your configuration, not just the vendor: Atlassian Cloud offers EU and Germany data residency on Standard, Premium and Enterprise plans at no extra cost (it must be configured, not default), is EU-US DPF certified, and uses SCCs for transfers. You are the controller — confirm the current DPA, residency and sub-processor terms with Atlassian Pty Ltd and run a transfer impact assessment before processing EU personal data. This is not legal advice.
Sources
https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency/
https://www.atlassian.com/legal/sub-processors
https://www.atlassian.com/legal/data-processing-addendum
This page is cited public information, not legal or compliance advice. Whether Atlassian (Jira & Confluence) can lawfully process your EU personal data depends on your plan, configured region, contract and a transfer impact assessment you control. Always confirm current terms with Atlassian Pty Ltd before sending EU personal data.