A key advantage of having your own environment and using servers is that you always know what happens to your data and where it is stored. Data security in the Atlassian Cloud is a core factor for many companies when considering a migration to the cloud.
However, as Atlassian has now announced in its Cloud Roadmap that Server products will only be supported until early 2024, many companies are asking themselves what options they now have. On the one hand, you and your company have the choice to migrate natively to the Atlassian Cloud. Or to host Atlassian products such as Jira or Confluence via a Data Center (AWS, Azure, on-premises). In either case, you are using a cloud solution and reaping several benefits.
You want to learn more about the benefits of switching to the cloud? Our article ‘5 reasons to switch to the cloud’ goes into this in more detail.
Guaranteed data security in the Atlassian Cloud?
Depending on which system or “cloud type” you ultimately decide on, your data should in any case be secure and protected in accordance with data protection regulations such as the GDPR.
Secure data in the cloud?
A globally operating company like Atlassian must, of course, also comply with the data protection regulations of the EU and Germany. This means that if products such as Jira or Confluence are offered in the local market, all guidelines must be followed.
Atlassian states that it supports “customers in meeting GDPR-related requirements and local laws [with] considerable effort.” (More on Atlassian data protection). In addition to GDPR compliance, Atlassian has established further security measures to further secure access to the cloud.
Below, we have summarised the most important precautions for data security in the cloud for you:
- GDPR: The internal handling of sensitive customer data is GDPR-compliant. Tools are provided to comply with legal obligations and local laws.
- Data classification: Internal control for access restrictions on customer data.
- ISO 27001 Certification: Information Security Management System.
- ISO 27018 Certification: Data Protection in the Cloud.
- Encryption of data at rest: All your data is fully encrypted in the cloud.
- Mandatory Two-Factor Authentication: Option to enable two-factor authentication.
- Multiple authentication policies per domain: Configure different authentication requirements; e.g. SSO, two-factor authentication, password policy
For more information on cloud security and Atlassian's precautions, see here.
Where is your data stored?
Atlassian Cloud (Native)
When using the native cloud, i.e. a cloud hosted by Atlassian, there is currently no option for the Standard and Premium tiers to choose a specific location where your data is stored. This means that, despite GDPR compliance, it cannot be guaranteed that your company's data will be stored in Germany.
It is further stated that data is secured in a way that minimises latency. For companies in Germany, this logically (but not guaranteed) means that your data will be stored in Frankfurt or Dublin.
For Enterprise customers, Atlassian offers the option to assign data to a “Realm”. This means that if your company is based in Germany, you can pin your data to the Frankfurt or Dublin Realm.
You can find more information about this here.
Confluence and Jira in Data Center
In addition to the native cloud environment, there is the option to use Atlassian Data Center and host the products using a Cloud Solution Provider such as AWS or Azure. This allows you to determine the location where your data is stored yourself and thus be GDPR-compliant.
Furthermore, Atlassian Data Center products offer similar security measures to protect your sensitive company data and additionally the option to customise Confluence and Jira to your needs.
Summary: Data security in the cloud
Depending on which security factors are ultimately most important for you and your company, you have two options for migrating to the cloud. Both offer similar options for protecting your data. If the location of storage is important to you and you want to ensure 100% that your company data is stored in Germany, then a data centre solution is the better choice for you.
Do you need support with migrating to the cloud or would you like an initial consultation on your options? Are you looking for a strong partner for the Atlassian Cloud? Our experts in cloud migration and the Atlassian ecosystem are happy to help you.
