Product Update: Encryption at rest is here! 🔒

[lauren]

Encryption at rest is here!

Following up on a previous product update we made, we are excited to announce that encryption at rest now applies to all existing and new Atlassian cloud sites, so you can rest assured that your data is protected at all times.

Here are the details:

Data drives on servers holding customer data and attachments in Jira Software Cloud, Jira Service Desk Cloud, Jira Core Cloud, Confluence Cloud, Statuspage, OpsGenie, and Trello use full disk, industry-standard AES-256 encryption at rest. Customer data on Bitbucket Cloud is not fully encrypted at rest.

By encryption at rest we mean that we encrypt customer data that is stored on a disk such as Jira issue data (details, comments, attachments) and Confluence page data (page content, comments, attachments). Data encryption at rest helps guard against unauthorized access and ensures that data can only be access by authorized roles and services with audited access to the encryption keys.

For more information about our encryption, see the Security Practices page on the Atlassian Trust Center.

[jrearle]

Hello, can the following statement be expanded on? "Customer data on Bitbucket Cloud is not fully encrypted at rest".

I am hoping the Security Practices page is possibly out of date as it still states: "Bitbucket does not offer encryption at rest for repositories at this time."

Is it true that Bitbucket still does not support encryption at rest for repositories? If yes, I do not see anything in the roadmap for implementing this capability. Are there plans?