Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Earn badges and make progress

You're on your way to the next level! Join the Kudos program to earn points and save your progress.

Deleted user Avatar
Deleted user

Level 1: Seed

25 / 150 points

Next: Root


1 badge earned


Participate in fun challenges

Challenges come and go, but your rewards stay with you. Do more to earn more!


Gift kudos to your peers

What goes around comes around! Share the love by gifting kudos to your peers.


Rise up in the ranks

Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!


Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
Community Members
Community Events
Community Groups

Systems validation according to Regulation (EU) 2017/746

As part of the Regulatory department at a medical device manufacturing company and according to  Regulation (EU) 2017/746 we are required to validate the systems we daily use during the company's product development.


I wondered if besides the technical information I have found based on the cloud's security compliance of the cloud there would be any kind of information/documentation Atlassian would be able to share to facilitate the PQ/OQ/IQ validation we are planning on carrying out on our own.


Thank you!

2 answers

Hi @Manuel Navarro & @Jose Galvez


Altlassian generally not produce design control documentation that you would need to demonstrate that the application is validated.  And, unfortunately, for a long time companies have been stuck producing their own validation documentation like your organization did @Manuel Navarro


As an alternative, you could purchase a product like ours - Ketryx - that creates a validated connection to Jira and automatically configures it to be compliant.  We provide you with all of the documentation you would need to demonstrate validation. 


We think that self validating Jira is generally a bad idea for product focused organizations because it takes up resources better devoted to product development.  I wrote a blog post about that here


We created Ketryx to help organizations focus on the work that really matters.  If you'd like to learn more, check us out here


All the best,



Screenshot 2023-04-17 at 18.44.26.png

1 vote
Bill Marriott
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
Jun 01, 2022

We have not yet evaluated for EU 2017/746, however, we recently aligned our practices with HIPAA, which is a US medical data framework. It might be similar enough to help with your evaluation. Please see : 

Hello Bill,

Thank you very much for your answer!

Concerning the EU 2017/746 I only mentioned it to give context to my question. The validation of informatic systems is a pretty common process in many companies and countries as you probably already know.

While HIPPA is an excellent example of how different requirements or specifications of Jira has probably been adapted in order to comply with specific regulations, in this case, HIPPA is focused on data management and security of such information. This will be helpful concerning the validation of that aspect.

However, the validation of the whole process of how Jira works is what I'm struggling with. At this point, we are proceeding with doing such validation (performance/ operative and installation) on our own. But it becomes difficult as Jira does not share (as far as I am aware) any documentation concerning how the different requirements or specifications of the SW have been built.

Also, I found myself not being able to come across any specific information on how the Installation of the SW of Jira cloud has been validated. As a cloud system, this is information only the supplier would have access to.

Hi Manuel, Bill

I am looking for a guide or documentation to help us validate Jira Cloud as our main tool that we use to develop software as a medical device.
Any information that any of you can provide me with would be a great help.

Thank you very much.


Hi Jose,

As we did not find any information that could be of real help concerning the validation of Jira as a development tool for Medical devicesat a OQ/PQ level, we validated the system following our own internal process.

We are confident of such a process but until an audit that reviews this specific validation is not carried out we will not be 100% sure is enough.

Concerning the IQ validation, we have used the information available on the Jira website concerning the norms with which Jira is compliant at a security and installation level.

Hope this helped,

Best Manuel

Like Jose Galvez likes this
Matteo Gubellini _SoftComply_
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
Sep 19, 2022

Hi all,

I'm not sure how much information you'll be able to get from Atlassian, but the FDA has just released a new guidance document that may give you some directions.



Like Jose Galvez likes this

Suggest an answer

Log in or Sign up to answer
AUG Leaders

Atlassian Community Events