What security/confluence aspects need to be considered when copying the JSM PROD to the sandbox?

[Bettina Schierholz]

Test User? Employees-Data?

[Arkadiusz Wroblewski]

Hello @Bettina Schierholz 

From a security/privacy point of view, you should assume the sandbox may contain real production content, including comments, attachments, employee/customer data, and KB content, unless you deliberately limit what you copy. Atlassian confirms comments, media attachments, users/groups, and Confluence permissions/settings can be copied to sandboxes.

Everything depending too, on your Internal Security Policies.

Test users, but also real data + KB permissions + linked Confluence spaces. That is usually where the bigger risk is, not the sandbox copy itself.

[Nikola Perisic]

Hello @Bettina Schierholz 

For all data security regarding the migrations, you can find it here: https://support.atlassian.com/migration/docs/migrations-trust-and-security-faqs/

In general, Atlassian takes data security seriously in terms of preserving data. In terms of your own data like deleting, Atlassian is not responsible for that based on the shared responsibility model.