Digital Operational Resilience Act (DORA)

[Piotr Chachaj]

Hi Guys!

I've got a question about the Digital Operational Resilience Act (DORA), which will be held in the EU quite soon. It's some kind of milestone for every finance company in the EU. 

https://www.eiopa.europa.eu/digital-operational-resilience-act-dora_en

https://www.esma.europa.eu/esmas-activities/digital-finance-and-innovation/digital-operational-resilience-act-dora

Due to some talks and processes, based on Cloud vs DC competition, please let me know if you have any plans for DORA with documentation or any compliance feature like commitment. 
It will be really beneficial! 

Thanks, in case of any doubt or question please contact me bravely.

Regards

[Tom Hausmann]

Hello Piotr,

Atlassian is dedicated to supporting financial services customers amidst the ongoing evolution of EU regulations, particularly the EU Digital Operational Resilience Act (DORA).

We're actively monitoring updates from the European Supervisory Authorities (ESAs), including the actual EU directive as well as ITS and RTS documents, in order to gain a comprehensive understanding of this framework. We have dedicated teams that are collaborating with industry groups to proactively address these upcoming regulatory changes. We're actively engaging with existing financial customers to ensure we not only meet regulatory standards but address our customer expectations.

Atlassian already supports financial services customers to meet EBA, BaFin, and other compliance needs. We're prepping for DORA with the same focus – updating our processes and docs for clarity and compliance.

Our Compliance Resource Center and Trust Center offer detailed insights into Atlassian's ongoing efforts to ensure security and reliability. We'll continue to provide transparent updates on our compliance initiatives and any changes impacting our customers in the financial industry.

Please don't hesitate to reach out for further questions or detailed information.

[Piotr Chachaj]

Hello Tom, 

Big thanks for your response. I'm sure that in the next few weeks, we will have ready strict plan for this process. I'll be back ;)

Regards

[Claus Østergaard Pedersen]

Hi @Tom Hausmann 

Is there any timeline for Atlassian documentation regarding DORA compliance?

As far as I can see, there is still no reference to this subject in the Compliance Resource Center or the Trust Center.

Best regards

Claus

[Tommi Kemppainen]

Hi

Can you point to where I can find the relevant documentation that Atlassian Confluence is DORA compliant. We will need this documentation from all our providers.

[Yichi Zhang]

Hi @Tom Hausmann

Would you share the link to the compliance documentation?

Thanks!

[Tomislav Tobijas _Koios_]

This is a hot topic for us/our clients too.

From what I've seen and heard at Team '24 in Barcelona, docs related to DORA should be published (by Atlassian) within the next couple of weeks.

[Joshua Issac]

Were these documents published? If so, where can I find them? I do not see anything related to DORA in the Compliance Resource Center.

[Thomas Siwik]

Dear @Tom Hausmann 

On the brink of DORA becoming effective, is there any statement of Atlassian on their compliance with DORA as if Atlassian is regarded as an ICT-service provider supporting a critical or important function of a financial entity?

Thanks.

Best regards

Thomas

[zdenek_cerny]

Hello, 

We are using the Atlassian Service Desk as a main tool for providing support for our services. Our services are DORA-relevant, and as such, some of our customers want us to have a DORA-relevant contract with Atlassian itself—on the basis that Atlassian is our subcontractor for offering support.

Are there any T&Cs or addendums available from Atlassian we can use? I found only this question, nothing in Trust Center or Compliance Resource Center. 

Is there going to be some mapping like for EBA outsourcing guidelines? 

Thanks

[Geoff Larkin]

We are in the same position. It is very disappointing that Atlassian haven't engaged on this important regulation. This comes into force on 17th January!

@Tom Hausmann please respond!