Atlassian maintains submissions to the Cloud Security Alliance (CSA) STAR Registry for our major Cloud Services. The STAR Registry hosts the Consensus Assessment Initiative Questionnaire (CAIQ), which is a spreadsheet made up of ~300 questions and responses to common cloud security practices.
Atlassian originally completed the CAIQ for Jira and Confluence cloud in early 2016, and have updated the responses as there have been changes to our operations, our products or our internal processes. Over time, we have also extended the CAIQ submissions for each of our major cloud services, creating responses for Opsgenie, Bitbucket, Statuspage, Trello and most recently Jira Align. More recently, we put a program in place to update the CAIQ for each of our cloud services on a quarterly basis.
The CAIQ also serves as our primary response for our customers asking us to complete a Vendor Security and Risk Review.
Download the current Questionnaires
We published updated CAIQ responses to the STAR registry in July 2020. Go to the Atlassian CSA STAR registry entry and download our current questionnaires. Please let us know if you have questions.
