Is JIRA Cloud FeDRAMP certified?

[Dimas_Pluguez]

Hello

  Does anyone know if Atlassian JIRA is FedRAMP certify for their cloud product? 

Thanks

Dimas Pluguez

[Jimmy Van (GLiNTECH)]

The answer is highly likely to be no.

From https://www.atlassian.com/trust/security/security-practices, you can see they are ISO27001, SOC2 and PCI DSS certified, but not FedRAMP.

Any customer who is sensitive about their information probably should be using Server anyway.

Anyway, to be sure, you can raise a ticket at https://support.atlassian.com/

[Dimas_Pluguez]

Thanks for the information.

Dimas

[Dave Kendig]

That's unfortunate.  I also need a FedRAMP Atlassian solution for a NASA development project.  Does anyone have any recommendations?

Dave

[Peter Samwel]

@Dave Kendighttps://www.contegix.com/products-and-services/application-management/atlassian-jira/  is the only option I've found for FedRAMP approved providers.  Confluence as well.  They are not exactly cheap though.

[Hassan Hashmi]

With the recent announcment of Jira server sunsetting, what should people like me do that cannot use Jira Cloud due to it not being FedRamp certified. Jira data center is way too costly and we dont have anywhere near 500 users (lowest tier). Am I out of luck?

[Filiberto Selvas]

Hello everybody, 

We have work in progress to achieve FedRAMP ATOs for Jira and Confluence Cloud, please check the estimated timelines for this and other regulation frameworks in our Roadmap: https://www.atlassian.com/roadmap/cloud?category=compliance&selectedProduct=cloud 

(BTW: Trello recently received an ATO for FedRAMP Tailored, in case that is of interest)