Security of Atlassian Intelligence

[Shawn_Giese]

Anyone have information about the security of Atlassian Intelligence?

I could not find mention or guarantees around security of data. The sources the AI would be reading can be very confidential. How can an enterprise consider using these AI tools without the confidence internal data is not being used to retrain models or employees without permission not able to see document summaries they normally have no access to (company wiki pages).

Also, info about what kinds of controls exist to block the release of PII / PHI data into new streams. Don't want people asking questions like "Which agent has the worst attitude". 

[Michel Neeser · Accepted solution]

Hi @Shawn_Giese

Atlassian has a dedicated page answering the most important questions here. For questions that go beyond this, I would recommend asking Atlassian Support directly.

Hope this helps!

[Shawn_Giese]

Thanks Michael, I was not finding that page. Looks like it is currently not SOC 2, ISO, or HIPAA compliant.

It is good to know they send all your corporate data to OpenAI, especially in case your company forbids using OpenAI for sensitive company documents. 

If I understand correctly, OpenAI endpoints are in the US... so GDPR concerns as well. Not to mention https://openai.com/index/openai-appoints-retired-us-army-general/.

Thanks for making me aware of this!

[Michel Neeser]

@Shawn_Giese Glad this helped! Please consider accepting the answers that were helpful, as this post may be found by others in the future. Thank you!

[Guanglin Zhang (XDevPod)]

Atlassian Intelligence provides AI capabilities through OpenAI, so your data will be sent to OpenAI.
Based on documentation from Atlassian and OpenAI, your data will not be used for training.

You can refer to these documents:
https://www.atlassian.com/trust/atlassian-intelligence
https://www.atlassian.com/trust/security/security-practices
https://openai.com/security-and-privacy/

As I understand it, Atlassian Intelligence, as a product for a large number of users, is bound to meet the needs of its customers to the highest standards when it comes to data security.