Is Jira FedRamp compliant?

[Eddie Bibisi]

Website seems to say yes, but it does not call out Jira by name - just one other product.

[Jim Knepley - ReleaseTEAM]

I can't speak to Jira Cloud.

I believe that Jira Data Center can be configured (particularly in AWS) so that it doesn't violate FedRAMP, but there's more to it.

Jira Data Center itself doesn't cover the entire scope of FedRAMP compliance at any impact level. Much of FedRAMP is around operational procedures like account management, authentication, log monitoring, incident response, and maintenance procedures.

[Joe Pitt]

I've worked on multiple government agencies projects and they all had either the server or data center version. Some of the issues @Jim Knepley - ReleaseTEAM mentions are covered in overall security and operational documents outlining how they do the functions. I don't know about the cloud service. 

[Jovin]

Searching FedRamp (https://marketplace.fedramp.gov/products) I can see only Trello is, if you search Atlassian it'll show you all products authorized by them. Jira is not in this list.#

You can email Atlassian's contact to find out more: fedramp@atlassian.com

[Rudy Holtkamp]

Hi @Eddie Bibisi and welcome to the community,

It is not, take a look at the Atlassian pages about compliancy: https://www.atlassian.com/trust/compliance/resources

Cheers