What’s new and next: Upcoming capabilities to securely scale Rovo

[#1]

Hi Atlassian Community!

As your teams are increasingly using AI and agents across everyday workflows, the impact ranges from replacing small repetitive workflows to reshaping the delivery of full projects. But as teams rush to adopt new tools and to fully realize that value, you need more than exciting features - you need enterprise-grade guardrails to use AI confidently. Our teams have been hard at work delivering on those capabilities, so I wanted to share an update on what we’ve recently shipped and what’s coming next.

Adopt AI without compromising security and control, with new Guard Premium capabilities that allow you to secure sensitive data in AI workflows.

• Rovo Chat security [Available in EAP]: Set detections that block sensitive data from being used in prompts or surfacing in responses.

• Connector data security [Available in EAP]: Scan third-party data from tools like Google Drive and prevent it from being ingested into the Teamwork Graph (the data intelligence layer that supports Rovo). When models reach out to query the Teamwork Graph for data across your organization, the sensitive data won’t be there to surface.

Both of these capabilities also feature a dashboard that shows their effectiveness, including active policies, blocked content, and potential coverage gaps, so you can validate that protections are working as intended. You can try these Guard Premium AI controls now by signing up for early access.

Enable AI with policies and controls to manage AI’s access to data end to end.

• AI Access Controls [Now available]: Roll out AI on your terms by managing Rovo access so you can gradually scale up.

• Flexible agent controls [Now available]: Manage permissions and access for agents with the option to set default access that can limit what data agents can access, determine who has the ability to create and edit agents with agent permissions, and safely edit an active agent with agent versioning.

• Agent reasoning and model selection [Now available]: Fuel your agents with more powerful thinking to tackle more complex use cases - alongside giving users the trust and ability to choose what specific model powers their agent.

• Rovo MCP server controls [Now available]: Set domain restrictions so only approved AI tools and domains (such as Claude.ai or ChatGPT) can connect to Jira, Confluence, and Compass. Control which Atlassian apps and connected tools the Atlassian Rovo MCP server has permission to read, write, and search in across your organization’s Atlassian apps and connected tools. Then, use enterprise-managed authentication to handle MCP authorization through your IdP (such as Okta) instead of asking every user to sign in and authorize individually.

• Agent identities [Available in EAP]: Give agents their own scoped identity with access that can be managed, audited, and revoked independently. This supports least-privilege access as agent use grows. You can try this capability now by signing up for early access.

Maintain visibility and identify opportunities for added value as you scale AI.

• Rovo Overview dashboard [Now available]: Get a quick, centralized view of usage and activity across your organization. Use Rovo Overview to stay on top of your AI rollout with insights into active users and enablement numbers, or quickly navigate to manage connectors, user access, or agents.

• Rovo Trends dashboard [Now available]: Understand how AI is being adopted across your organization, including the capabilities and teams driving usage. These insights make it easier to spot momentum, identify adoption gaps, and help teams get more value from Rovo.

• Agent Insights [Now available]: Monitor how often an agent is used and understand its effectiveness using metrics like average daily users and total conversations within the Studio app.

• Agent usage audit logs [Now available]: See how agents are being used across your organization directly in your audit log with Guard Premium. Now, every time someone invokes an agent, an "Invoked Rovo agent" event is captured to address your visibility and compliance requirements.

Address your evolving regulatory and compliance requirements

• Rovo coverage for HIPAA-obligated customers [Now available]: Rovo is now covered under Atlassian's existing Business Associate Agreement (BAA) for eligible customers. You can see a full list of HIPAA-eligible apps by visiting our Compliance Resource Center.

• Support for EU AI Act compliance [Ongoing]: Atlassian takes a proactive approach to the EU AI Act. As an EU AI Pact signatory, Atlassian supports your EU AI Act compliance through its ongoing work on transparency measures, guardrails implemented across our products, and more.

Our goal is simple: help you unlock AI’s value while keeping the controls, visibility, and safeguards your organization needs.

If you’re joining us in Amsterdam, stop by the Secure your AI adoption booth or attend our Team '26 breakout session, Reactive to Ready: Building an AI governance strategy that scales with you, to see these capabilities in action and hear real-life use cases directly from a customer. After the event, be on the lookout for more content and announcements from me. As always, feel free to add your comments or questions below so we can keep the conversation going.