Data processing agreement (dpa) — Confluence

Cited by

Facts read from this source

• DPA effective date Report an error

  “Effective starting: August 17, 2026”

• DPA roles Report an error

  “(a) Customer is either a Controller of Customer Data, or a Processor of Customer Data acting on another Controller’s behalf (e.g. Customer’s Affiliate) while passing down relevant processing instructions to Atlassian. Processing details are stated in Schedule 1 (Description of Processing). (b) Atlassian is a Processor (or respectively, a Sub-processor) of Customer Data.”

• Security incident notification Report an error

  “Atlassian must notify Customer without undue delay and, where feasible, no later than seventy-two (72) hours after becoming aware of a Security Incident.”

• General authorization Report an error

  “By entering into this DPA, Customer provides general authorisation for Atlassian to engage Sub-processors to Process Customer Personal Data.”

• Notice period days Report an error

  “Atlassian will provide such notice, to those emails subscribed, at least thirty (30) days before allowing any new Sub-processor to Process Customer Personal Data”

• Objection remedy Report an error

  “If Customer objects, Customer, as its sole and exclusive remedy, may terminate the applicable Order for the affected Cloud Product and related Support and Advisory Services”

• Deletion post termination Report an error

  “Following expiration or termination of the Agreement, Atlassian must, in accordance with the Documentation, delete all Customer Personal Data.”

• Audit rights Report an error

  “Atlassian is regularly audited by independent third-party auditors and/or internal auditors, including as described here. Upon request, and on the condition that Customer has entered into an applicable non-disclosure agreement with Atlassian, Atlassian will supply a summary copy of relevant audit report(s) to Customer”

• Onsite audit notice days Report an error

  “Any audit must (i) be conducted during Atlassian’s regular business hours, with reasonable advance written notice of at least sixty (60) calendar days”

• Scc governing law Report an error

  “In Clause 17, Option 1 applies, and the EU SCCs are governed by Irish law.”

• UK addendum Report an error

  “Each party shall be deemed to have signed the UK Addendum.”

• Data privacy framework Report an error

  “Atlassian participates in and certifies compliance with the Data Privacy Framework.”

• Export delete during term Report an error

  “During the Subscription Term, Customer and its Users may, through the features of the Cloud Products, access, retrieve or delete Customer Personal Data.”

• Deidentified aggregated use Report an error

  “Atlassian must de-identify and aggregate Customer Data and may use such De-identified and Aggregated Data to improve the Cloud Products and related Support and Advisory Services generally.”

• South korea terms Report an error

  “Customer agrees that it has provided notice and obtained all consents and rights necessary under South Korea Privacy Law for Atlassian to Process Personal Data pursuant to the Agreement.”

• List subscription Report an error

  “Atlassian maintains an up-to-date list of its Sub-processors here, which contains a mechanism for Customer to subscribe to notifications of new Sub-processors.”

8 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Engineering Lead Import, export & self-hosting
• The Engineering Lead European sovereignty
• The IT Administrator Import, export & self-hosting
• The IT Administrator European sovereignty
• The Operations Lead Import, export & self-hosting
• The Operations Lead European sovereignty
• The Quality Manager Import, export & self-hosting
• The Quality Manager European sovereignty
• The Skeptic Import, export & self-hosting
• The Skeptic European sovereignty
• The Support Knowledge Manager Import, export & self-hosting
• The Support Knowledge Manager European sovereignty