Is JIRA Software HIPAA compliant?

[zubair.magdum]

Is JIRA Software HIPAA compliant? I am reading online that the server desktop product is but not the cloud based. Is this true?

[Thomas B]

@zubair.magdum - thats correct, currently cloud software is not hipaa compliant but Atlassian is on the way to compliance. It is recommended to have a locked down server and use server software if you need to maintain hipaa compliance. I'm excited for cloud to be compliant, its in the works!

See here - https://www.atlassian.com/trust/roadmap?tab=compliance

[Danyale Clay]

Do you happen to know rough time frame for the Jira Cloud HIPAA compliance road map task?  We are trying to determine if we need to move to the server based Jira application. 

[Alan Pryor]

What is the status of becoming HIPPA Compliant?

[Dena Campasano]

Also looking for an update as we would like to expand our use of Jira and this prevents us from doing so.

[Alan Pryor]

Its been several months since Atlassian has commented on this.  Is this still in the works?

[Blake Burdeen]

Since Atlassian is discontinuing Server products - it would be helpful to know if they will begin to offer compliance and BAA for Cloud.

[Dante Peralta Lopez]

My company wants to go cloud but bc of HIPAA we're unable and still working in sever version. Pls fix this ASAP

[Greg Jones]

I understand they are not HIPAA compliant today, but is their database encrypted at rest?

[Brooklyn Trumpy]

Be careful...the HIPAA compliance on their roadmap only applies to software & confluence, not to service desk. 

[Brooklyn Trumpy]

Be careful, all. Jira is moving toward HIPAA compliance for software and confluence only at this point. Service desk is not on the current road map.

[Justin Berneburg]

Where you do see HIPPA compliant on their roadmap?

[Brooklyn Trumpy]

Q1 2022