HIPAA Compliance

[IT Administration]

Which plan do I need to get to ensure HIPAA compliance?  The size of the team is just 4 developers and 4 support staff.  Thanks

[Marc - Devoteam]

Hi @IT Administration 

Welcome to the community.

There is no difference in plans in relation to Atlassians compliancy to Security guidelines.

Atlassian as a company is complained to the HIPAA guidelines and so all products offered.

For HIPAA, the following products are compliant:

"The tier Standard, Premium, and Enterprise plans for Jira, Jira Service Management, and Confluence.

Free and trial plans are not eligible"

So you need a paid plan to be compliant.

[Walter Buggenhout]

Hi @IT Administration and welcome to the Community!

From the HIPAA Compliance page in Trust Center:

Customers who are subject to HIPAA compliance and want to partner with Atlassian purchase a Standard, Premium, or Enterprise Plan and enter into a Business Associate Agreement (BAA) that covers the applicable products and services

Hope this helps! 

[Dan Breyen]

Hi @IT Administration welcome to the Community!  Based on this article, it appears that if you are subject to HIPAA compliance, you will at least need to be on a Standard License for Cloud products.

There are several other links from that page that you can get more information on.

Here's another link with more info: HIPAA and Atlassian 

Hope that helps.

[IT Administration]

Very helpful.  Thanks!