Add-ons and ISO certification

Question

We are an ISO12K7 certified company, and any new software needs to go through our InfoSec team for approval before it can be implemented. I've been looking at add-ons for Confluence Cloud (Standard) and I haven't found a way to search the marketplace for addons that have certifications, and most of the addons i've looked at do not have any certs.

I'm wondering if there are other ISO certified companies out there that have been through a similar process for add-ons. Has anyone been successful? How did you get the add-ons through an audit review?

Thanks!

January.Ford · Answer

Thanks Aron. That is what we have been doing to check. Glad to know we haven't been missing an obvious shortcut. :)

Aron Gombas _Midori_ · Answer

@January.Ford When you are looking at the listing of an app on Atlassian Marketplace, click to the "Privacy & Security" tab in the top, then scroll down to the "Security and compliance" section. If the app has certifications, it will be listed there (assuming that the app vendor filled out the information precisely):

It is not really a convenient "search" method, but something you can use in the context of a concrete app to verify if it meets security standards.