# Data Security in the Atlassian Cloud > How secure is your data in the Atlassian Cloud? An overview of GDPR compliance, certifications, data locations, and the Data Center alternative. Source: https://www.xalt.de/en/blog/data-security-in-the-atlassian-cloud/ TEAM XALT Atlassian Platinum Partner · 5 March 2021 · 5 min A key advantage of having your own environment and using servers is that you always know what happens to your data and where it is stored. Data security in the Atlassian Cloud is a core factor for many companies when considering a migration to the cloud. However, as Atlassian has now announced in its [Cloud Roadmap](https://www.xalt.de/en/blog/atlassian-cloud-migration-from-server-and-data-center-to-the-cloud/) that Server products will only be supported until early 2024, many companies are asking themselves what options they now have. On the one hand, you and your company have the choice to migrate natively to the Atlassian Cloud. Or to host Atlassian products such as Jira or Confluence via a Data Center (AWS, Azure, on-premises). In either case, you are using a cloud solution and reaping several benefits. You want to learn more about the benefits of switching to the cloud? Our article ‘ [5 reasons to switch to the cloud](https://www.xalt.de/en/blog/5-reasons-you-should-move-to-the-cloud/)’ goes into this in more detail. ## Guaranteed data security in the Atlassian Cloud? Depending on which system or “cloud type” you ultimately decide on, your data should in any case be secure and protected in accordance with data protection regulations such as the GDPR. ### Secure data in the cloud? A globally operating company like Atlassian must, of course, also comply with the data protection regulations of the EU and Germany. This means that if products such as Jira or Confluence are offered in the local market, all guidelines must be followed. Atlassian states that it supports “customers in meeting GDPR-related requirements and local laws \[with\] considerable effort.” ( [More on Atlassian data protection](https://www.atlassian.com/de/trust/privacy/gdpr)). In addition to GDPR compliance, Atlassian has established further security measures to further secure access to the cloud. ### Below, we have summarised the most important precautions for data security in the cloud for you: - GDPR: The internal handling of sensitive customer data is GDPR-compliant. Tools are provided to comply with legal obligations and local laws. - Data classification: Internal control for access restrictions on customer data. - ISO 27001 Certification: Information Security Management System. - ISO 27018 Certification: Data Protection in the Cloud. - Encryption of data at rest: All your data is fully encrypted in the cloud. - Mandatory Two-Factor Authentication: Option to enable two-factor authentication. - Multiple authentication policies per domain: Configure different authentication requirements; e.g. SSO, two-factor authentication, password policy For more information on cloud security and Atlassian's precautions, see [here](https://www.atlassian.com/de/roadmap/cloud?category=compliance&status=shipped). ![5 Gründe für einen Wechsel in die Cloud](https://cdn.sanity.io/images/c475o02b/production/5ca890cdcc52bc30f552ebc5659b68041b15fdb3-1920x700.jpg?w=1504&q=75&fit=max&auto=format) ### Where is your data stored? #### Atlassian Cloud (Native) When using the native cloud, i.e. a cloud hosted by Atlassian, there is currently no option for the Standard and Premium tiers to choose a specific location where your data is stored. This means that, despite GDPR compliance, it cannot be guaranteed that your company's data will be stored in Germany. It is further stated that data is secured in a way that minimises latency. For companies in Germany, this logically (but not guaranteed) means that your data will be stored in Frankfurt or Dublin. For Enterprise customers, Atlassian offers the option to assign data to a “Realm”. This means that if your company is based in Germany, you can pin your data to the Frankfurt or Dublin Realm. You can find more information about this [here](https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency-and-realms/). #### Confluence and Jira in Data Center In addition to the native cloud environment, there is the option to use Atlassian Data Center and host the products using a Cloud Solution Provider such as AWS or Azure. This allows you to determine the location where your data is stored yourself and thus be GDPR-compliant. Furthermore, Atlassian Data Center products offer similar security measures to protect your sensitive company data and additionally the option to customise Confluence and Jira to your needs. ## Summary: Data security in the cloud Depending on which security factors are ultimately most important for you and your company, you have two options for migrating to the cloud. Both offer similar options for protecting your data. If the location of storage is important to you and you want to ensure 100% that your company data is stored in Germany, then a data centre solution is the better choice for you. Do you need support with migrating to the cloud or would you like an initial consultation on your options? Are you looking for a strong partner for the Atlassian Cloud? Our experts in [cloud migration](https://www.xalt.de/en/blog/atlassian-cloud-migration-from-server-and-data-center-to-the-cloud/) and the Atlassian ecosystem are happy to help you. ## Questions about data security in the Atlassian Cloud? Our experts in cloud migration and the Atlassian ecosystem will advise you on your options between Cloud and Data Center. [Talk to us](https://www.xalt.de/en/contact/) ## More articles ### [Personal AI Agents Compared: Rovo, OpenClaw, and Agent SDKs Like Claude or OpenAI](https://www.xalt.de/en/blog/personal-ai-agents-compared-rovo-openclaw-and-agent-sdks/) Rovo, OpenClaw, or Claude/OpenAI: how personal AI agents differ in 2026 and which approach fits your team. *Atlassian* ### [BaFin Compliance for Atlassian Cloud – What Financial Institutions Need to Know Now](https://www.xalt.de/en/blog/bafin-compliance-atlassian-cloud-migration/) New EU FSA rules have been in effect for Atlassian Cloud in financial services since December 2024. We show what has changed and how you can migrate to the cloud in a BaFin-compliant way. *Atlassian* ### [Atlassian Team '26 Recap: The Shift to the AI-Native Organization and the Role of the Teamwork Graph](https://www.xalt.de/en/blog/atlassian-team-26-recap-teamwork-graph/) XALT was on the ground at Atlassian Team '26 in Anaheim. Our recap covers the Teamwork Graph, Rovo, and the new Teamwork, Service, Product, Software, and Strategy Collections – and what it means for enterprises in Germany. *Atlassian* --- *This version is for AI agents. Every page of this site is available as Markdown: append `index.md` to its path. Index of all pages: [llms.txt](https://www.xalt.de/llms.txt)*