Fili Atlassian Team

Hello @Dina Goncharenko , Given the deployment and operation model for Data Center (on premise by our customers) we don't think a BAA for it is required, please let us know of any questions 

Hi @Rebecca Dean , I agree that it is very inconvenient, unfortunately it is a binary decision as we can't sign a BAA with the vendor that Atlassian uses for notifications (they don't offer it), so we simply can not pass sensitive data to that vendor. We have customers that have implemented integrations with Microsoft…

No solid timeline for that @Robert Adler , we will share an update in community when that changes 

Hi @mmogollon , Due to the number of customers and challenges to scale our legal department only gets directly involved in large deals, not sure about the number of licenses. If you can share details please send those to fselvas at Atlassian dot Com 

@mmogollon , Circling back: After consulting with the Atlassian legal team, they confirmed that the /s/ signature is legally binding, and that the DocusSign certificate of completion is only reporting one signee because only one party signed through DocuSign, and the other party, Atlassian, signed outside of DocuSign. I…

Will bring this to the attention of our Legal Commercial team. FYI hundreds of customers have signed the BAA already, but will seek clarification 

Hello @Andy Levesque , The term “relevant” is not one that is defined by Atlassian. This is because it is up to our customers to decide which third-party plugins and apps they will use, how they will use them, and what data they share with them. Which third-party vendors are considered relevant will be specific to each of…

Hello @Brent Lee , Atlassian HIPAA offerings are only available for active subscriptions of eligible cloud products. Because of the inherent risks and costs that Atlassian incurs when offering HIPAA we decided to not make it available for free offerings, such as trials. You can test the functionality and capabilities of…

Please see related HIPAA updates at the bottom of this post: https://community.atlassian.com/t5/Trust-Security-articles/Expand-what-s-possible-with-HIPAA/ba-p/2250357 

Please see the related updates at the bottom of this post: https://community.atlassian.com/t5/Trust-Security-articles/Expand-what-s-possible-with-HIPAA/ba-p/2250357 

Relevant HIPAA updates at the bottom of this post: https://community.atlassian.com/t5/Trust-Security-articles/Expand-what-s-possible-with-HIPAA/ba-p/2250357 

Please see the HIPAA updates at the bottom of this post: https://community.atlassian.com/t5/Trust-Security-articles/Expand-what-s-possible-with-HIPAA/ba-p/2250357 

For anyone reading the thread of comments above ^^^. Issues have been resolved, BAA signing is flowing now! 

@Rebecca Dean : can you email me the ticket number to FSelvas at Atlassian dot Com? 

Hello @Rob Horan , @Rebecca Dean and @Slavisha Karach We are already 50% deployed for expansion of eligibility, aim to be 100% by the end of next week. The capability is a self service processes handled by Org Admins through the products administrative interfaces. You can license the products through the normal channels,…

@Rob Horan , We are still on track to begin releasing HIPAA for Standard and Premium by the end of Q3, meaning end of September. We will have a "throttled" release, not all customers will see the capability at the same time. We do this to allow to detect any issues that we may have failed to identify through our testing…

@ckennedy and @Nate Whitehead , There is currently no roadmap plans for HIPAA compliance of other products, but we are tracking customer desire for those. Can you list specifically which ones are more critical for you? Here the Compliance Roadmap: https://www.atlassian.com/wac/roadmap/cloud?category=compliance& 

Hi @Angela Stephens , For Standard and Premium we will offer a non negotiable BAA to be signed, which supersedes the terms of service in regards to the ability to capture PHI data in our products. Always in accordance to the implementation…

Hi @Shari Barchus , Any customer licensing a paid plan will be eligible for HIPAA compliance. There will be no specific minimum number of users required for HIPAA itself. 

Hi @Jake Sullivan , Our yearly HIPAA audit process targets specific products, so even when JWM leverages a lot of the same platform as JSW does, we would still have to go through a product focused audit for it. We currently don't have timeline to include JWM in the yearly audit process, but I will raise this with the…

Hi @Angela Stephens We aim to expand eligibility for HIPAA in this timeframe: https://www.atlassian.com/wac/roadmap/cloud/hipaa-eligibility-expansion?p=349697da-b8 

Hi @Angela Stephens , We are not planning an EAP, feedback is always sought. Will circle back when we open for that. 

Hello @Angela Stephens , Customer can sign a BAA for eligible products - Cloud Enterprise today. For Standard and Premium we are aiming to make the BAA signing available by calendar year 2023 Q2-Q3 per: https://www.atlassian.com/wac/roadmap/cloud/hipaa-eligibility-expansion?p=349697da-b8 Please make sure your customer does…

Hi @Andy Levesque , Yes - HIPAA will also apply to community licenses for the eligible products (currently JSM, JSW & Confluence)

Hi @Phil Cooper , I am glad that this comes as good news. There will be no additional cost for HIPAA. 

@Jordan Fuller calendar year 2023, thank you for the catch! 

@Maria Ahvenlampi and @A.Kemper , Please see https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency/ For more information on the scope of Data Residency we offer. When JSW, Confluence are configured for Data Residency in Germany the data in scope is stored in country as explained in that…

Correct @Sander Huijssen , that should be the behavior. If you configure Data Residency prior to the final migration it should be fine. (maybe you have a lot of attachments as well? The numbers you wrote are not that high) 

@Sander Huijssen , unfortunately there is no straight answer to "what is a lot of data" question. We have an process that evaluates your db at the time you enter the admin pages, it takes into account all aspects of your data set. If it determines your Data Residency process is above a certain threshold of time - couple…

Hello @Sander Huijssen , Because of what you write you are migrating from on premise to Cloud Atlassian, please make sure you are configuring Data Residency for your Cloud products prior to the migration of the on premise data. A new Jira Software instance, with not a lot of data, should present you the option for Data…