How secure is Jira Software for use in Australia?

[Jen]

My team and I are keen to use Jira Software for project management but have a few concerns about security. Some of our questions are: 

1. Who is the vendor of Jira?

2. Is Jira hosted in Australia, and if not, how can I host it in Australia?

3. Is Jira administered by foreign nationals?

4. What is the connection to the cloud services provider (Amazon Web Services?)?

5. Has it been hardened using vendor, Australian Signals Directorate or other advice, guidance or templates?

[John Funk]

Hey Jen - Welcome to the Atlassian Community!

I think you will find that Jira meets all of your criteria - even to the point that they are an Australian company! Granted they also have offices around the world and more than 3,000 employees. 

I also imagine there are other Australian government customers supported by Jira. :-)

[Ste]

Hi @Jen

This will be a good read I think: https://www.atlassian.com/trust

This covers Cloud and Data Center - there is a Server option also where you can host Jira locally within your organisation.

There are Atlassian Partner that can help setup and administer Jira on your behalf - or your company could purchase it directly and self-service, its up to you! See more about Atlassian partners in your locale here: https://www.atlassian.com/partners

Ste

[Robert Battam]

It meets the highest level of certification withing Australian Government Hosting Framework (because it is hosted with AWS Australia, who holds that certification level).  Just pin your cloud app instance to the Australia Region, and you will be using government level certified hosting guidelines.

https://community.atlassian.com/t5/Confluence-discussions/Australian-Government-Hosting-Framework-quot-Strategic-quot/m-p/2524811#M11853?utm_source=dm&utm_medium=unpaid-social&utm_campaign=P:online*O:community*I:social_share*

Oh, and Jira is Australian Owned, the Vendor is Australian, it's Atlassian as you can see on this website.

Nobody administers your Jira except for you or whover you choose to allow, it's your instance of Jira.

A foreign person can only get access to your Jira if you granted it to them.