HIPAA Compliance

[IT Administration]

Which plan do I need to get to ensure HIPAA compliance?  The size of the team is just 4 developers and 4 support staff.  Thanks

[anna drozd]

Thanks for bringing up HIPAA compliance in the context of Jira—definitely an important consideration for teams in healthcare or related fields. If you're evaluating your options, working with experienced hipaa compliant software development consultants can help ensure everything from data storage to workflows aligns with regulations. This guide dives into the specifics and might be helpful for your setup.

[Marc - Devoteam]

Hi @IT Administration 

Welcome to the community.

There is no difference in plans in relation to Atlassians compliancy to Security guidelines.

Atlassian as a company is complained to the HIPAA guidelines and so all products offered.

For HIPAA, the following products are compliant:

"The tier Standard, Premium, and Enterprise plans for Jira, Jira Service Management, and Confluence.

Free and trial plans are not eligible"

So you need a paid plan to be compliant.

[Walter Buggenhout]

Hi @IT Administration and welcome to the Community!

From the HIPAA Compliance page in Trust Center:

Customers who are subject to HIPAA compliance and want to partner with Atlassian purchase a Standard, Premium, or Enterprise Plan and enter into a Business Associate Agreement (BAA) that covers the applicable products and services

Hope this helps! 

[Dan Breyen]

Hi @IT Administration welcome to the Community!  Based on this article, it appears that if you are subject to HIPAA compliance, you will at least need to be on a Standard License for Cloud products.

There are several other links from that page that you can get more information on.

Here's another link with more info: HIPAA and Atlassian 

Hope that helps.

[IT Administration]

Very helpful.  Thanks!