Is JIRA Cloud FeDRAMP certified?

[Dimas Pluguez]

Hello

  Does anyone know if Atlassian JIRA is FedRAMP certify for their cloud product? 

Thanks

Dimas Pluguez

[Jimmy Van (GLiNTECH)]

The answer is highly likely to be no.

From https://www.atlassian.com/trust/security/security-practices, you can see they are ISO27001, SOC2 and PCI DSS certified, but not FedRAMP.

Any customer who is sensitive about their information probably should be using Server anyway.

Anyway, to be sure, you can raise a ticket at https://support.atlassian.com/

[Dimas Pluguez]

Thanks for the information.

Dimas

[Dave Kendig]

That's unfortunate.  I also need a FedRAMP Atlassian solution for a NASA development project.  Does anyone have any recommendations?

Dave

[Peter Samwel]

@Dave Kendighttps://www.contegix.com/products-and-services/application-management/atlassian-jira/  is the only option I've found for FedRAMP approved providers.  Confluence as well.  They are not exactly cheap though.

[Hassan Hashmi]

With the recent announcment of Jira server sunsetting, what should people like me do that cannot use Jira Cloud due to it not being FedRamp certified. Jira data center is way too costly and we dont have anywhere near 500 users (lowest tier). Am I out of luck?

[Filiberto Selvas]

Hello everybody, 

We have work in progress to achieve FedRAMP ATOs for Jira and Confluence Cloud, please check the estimated timelines for this and other regulation frameworks in our Roadmap: https://www.atlassian.com/roadmap/cloud?category=compliance&selectedProduct=cloud 

(BTW: Trello recently received an ATO for FedRAMP Tailored, in case that is of interest) 

[tim comella]

Hi Filiberto,

Checked timelines you mentioned and wanted to see if the FedRamp certification was still targeting 2023 as we are facing a similar situation.  Federal government customer, we realize Server is in process of sunsetting.  Interest in going to Cloud for Jira and Jira Align.  However.  If we end up needing to move to Data Center version of Jira (missing FedRamp cert) what are our options for Jira Align with Jira Data Center if Align is not FedRamp certified?  Thanks.

[Filiberto Selvas]

Hi @tim comella , 

We will be updating information in the roadmap in the next couple months.  To your question of: 

>  If we end up needing to move to Data Center version of Jira (missing FedRamp cert) what are our options for Jira Align with Jira Data Center if Align is not FedRamp certified?  

There is an on premise version for Jira Align, please ask your sales representative about it. 

[Solomon Gifford SVP - Customer Operations, Contegix]

Contegix has an interim solution on their FedRAMP Moderate (IL2) PaaS - and also has FedRAMP High solutions (IL4, IL5).

https://partnerdirectory.atlassian.com?pid=a4p0O000000PRzJQAW&lid=a4n0O000000N6CIQA0