Data processing agreement (dpa) — Atlassian Statuspage

Cited by

Facts read from this source

• DPA effective date Report an error

  “Effective starting: August 17, 2026”

• Security incident notification Report an error

  “Atlassian must notify Customer without undue delay and, where feasible, no later than seventy-two (72) hours after becoming aware of a Security Incident.”

• Audits Report an error

  “Atlassian is regularly audited by independent third-party auditors and/or internal auditors, including as described here.”

• On site audit frequency Report an error

  “occur no more than once every twelve (12) months”

• UK addendum Report an error

  “Each party shall be deemed to have signed the UK Addendum.”

• South korea Report an error

  “Customer agrees that it has provided notice and obtained all consents and rights necessary under South Korea Privacy Law for Atlassian to Process Personal Data pursuant to the Agreement.”

• Baas available Report an error

  “Business Associate Agreement”

• General authorisation Report an error

  “By entering into this DPA, Customer provides general authorisation for Atlassian to engage Sub-processors to Process Customer Personal Data.”

• Notice period days Report an error

  “Atlassian will provide such notice, to those emails subscribed, at least thirty (30) days before allowing any new Sub-processor to Process Customer Personal Data”

• Objection remedy Report an error

  “If Customer objects, Customer, as its sole and exclusive remedy, may terminate the applicable Order for the affected Cloud Product and related Support and Advisory Services”

• List and notifications Report an error

  “Atlassian maintains an up-to-date list of its Sub-processors here, which contains a mechanism for Customer to subscribe to notifications of new Sub-processors.”

• Deletion post termination Report an error

  “Following expiration or termination of the Agreement, Atlassian must, in accordance with the Documentation, delete all Customer Personal Data.”

• Access during term Report an error

  “During the Subscription Term, Customer and its Users may, through the features of the Cloud Products, access, retrieve or delete Customer Personal Data.”

• Data subject request assistance Report an error

  “Atlassian must provide reasonable and timely assistance to Customer to enable Customer to respond to requests for exercising a data subject’s rights (including rights of access, rectification, erasure, restriction, objection, and data portability) in respect to Customer Personal Data.”

• Third party requests notification Report an error

  “Unless prohibited by Law, Atlassian will promptly notify Customer of any valid, enforceable legal process or governmental request compelling Atlassian to disclose Customer Personal Data.”

• Deidentified aggregated use Report an error

  “Atlassian must de-identify and aggregate Customer Data and may use such De-identified and Aggregated Data to improve the Cloud Products and related Support and Advisory Services generally.”

• Roles Report an error

  “(b) Atlassian is a Processor (or respectively, a Sub-processor) of Customer Data.”

• Order of precedence Report an error

  “the order of precedence from highest to lowest will be: (1) the applicable terms stated in Schedule 2 (Region-Specific Terms including any transfer provisions); (2) Schedule 1 (Description of Processing); (3) the main body of this DPA; and (4) the Agreement.”

• Authorised affiliates Report an error

  “Customer enters into this DPA on behalf of itself and in the name and on behalf of its Authorised Affiliates permitted to use the Products and related Support and Advisory Services under the Agreement.”

• Audit information requests frequency Report an error

  “provided that such right may be exercised no more than once every twelve (12) months.”

• Sensitive data scope Report an error

  “Customer or its Users may upload content to the Cloud Products which may include (i) data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership”

• Processing purposes Report an error

  “Atlassian will Process Customer Data as a Processor in accordance with Customer’s Documented Instructions to: (a) provide and improve the Products and related Support and Advisory Services for Customer only”

• Effective term Report an error

  “The term of this DPA coincides with the term of the Agreement and terminates upon expiration or earlier termination of the Agreement”

14 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agency Developer European sovereignty
• The Customer Support Lead Uptime reports, data & the vendor's own reliability
• The Customer Support Lead European sovereignty
• The E-Commerce Operations Manager European sovereignty
• The SaaS Platform Engineer European sovereignty
• The Information Security Officer European sovereignty
• The Skeptic European sovereignty