HIPAA compliance using multiple sites?

[Darryl St_ Pierre]

Our org currently has Jira, Confluence, and JSM. We are actively pursuing use of AI in the environment. We want to launch a HR portal to handle leaves of absence, and want to have it HIPAA-compliant. Atlassian does not certify HIPAA compliance when AI is enabled in a site.

I want to setup a second site for the HR project (example-hr.atlassian.net), which would separate it from the other apps, however, I need to be able to manage user access the same as in our primary site (example.atlassian.net), using Guard (Standard).

I do not see a way to verify our domains for the second/new instance since they've already been verified for the primary.

I have to believe we're not the first to try to need to do this. Is there something I'm missing in order to accomplish this?

[Matteo Vecchiato]

Hi @Darryl St_ Pierre 

Since 2024 the same domain could be verified by differents organization, I have tried it personally and I can confirm it.

Moreover it is reported here https://community.atlassian.com/forums/Articles/Multiple-orgs-can-verify-and-claim-users-from-the-same-domain/ba-p/2688009 

The only limitation is that a user can be set as managed accounts in only one organization at same time.

The procedures to verify the domain in the second site is the same: https://support.atlassian.com/user-management/docs/verify-a-domain-to-manage-accounts/ 

I hope it helps