Data managed with encryption

Who can do this?
Role: Organization admin
Atlassian Cloud: Enterprise plan that covers core apps including Jira, Confluence, and Jira Service Management
Atlassian Government Cloud: Not available

✅ All attachments

✅ Asset data (Jira Service Management)

✅ Board and sprint data

✅ Comments

✅ In-app notification data

✅ Jira work item and field content (including system and custom fields)

✅ Jira search data

✅ Link related work

✅ Overview name

✅ Permissions and restriction configuration data

✅ Rovo Search*

Data not in-scope (lower sensitivity or transient):

• App analytics

• Attachment metadata

• Connected DevOps data:
  Commits, Branches, Pull requests, Builds, Deployments, Feature flags, and Remote links

• Project configuration data:
  Workflows, Custom field configuration, and Board configuration

• Suggest sub-items

Jira Service Management Operations

✅ Alerts, escalations, and teams:
Alert, Alert attachment, Alert note, Alert log, Saved search, Alert policy, Escalation, Maintenance, Responder name, Team, Team log, Platform team, Team routing rules, Notification preference, Central notification setting, and Heartbeat

✅ Chat:
Chat channel, and Chat conversation

✅ Incident:
Incident, Incident saved search, Incident alert policy register, Incident response role, Incident template saved search, Incident service, Incident service saved search, Incident service problem, Incident service problem comment, Incident service problem alert setting, Incident external service, Incident external service relation, Incident status page entry, Incident stakeholder notification email template, Incident stakeholder notification info, Incident log, Incident note, Incident timeline entry, and Stakeholder updates

✅ Integrations:
Integration, Integration action, Integration action group, Integration new framework, Integration alias mapping

✅ JEC (Jira Edge Connector) channel name

✅ Rovo Search*

✅ Schedule:
Schedule, Schedule on-call events, Schedule deleted rotation metadata, and Deleted schedule

✅ User and team roles:
User, Deleted user, User saved search, User role, Customer account log, Customer tags, and Customer onboarding

Data not in-scope (lower sensitivity or transient):

• Alerts, escalations, and teams:
  Alert alias, Alert messages, Alert tags, Policy name, Escalation name, Customer team role name, Heartbeat name, Alert saved search name, and Forwarding alias

• Incident:
  Incident messages: Tags, and Incident saved search name

  Incident response role name lowercase

  Incident service saved search name

  Incident external service name

• Integration name

• Schedule:
  Schedule name, and Override alias

• Service name

Confluence

✅ AI summaries

✅ Attachments

✅ Blog content

✅ Comments

✅ Confluence questions

✅ Databases

✅ In-app notification data

✅ Page content

✅ Permission and restriction configuration data

✅ Rovo Search*

✅ Search data

✅ Whiteboards

Data not in-scope (lower sensitivity or transient):

• App analytics

• Attachments metadata

• Page and blog URL

• Link Confluence content

✅ Data from BYOK or CMK-enabled apps queried from the Atlassian Data Lake and data shares

✅ Dashboards (including dashboard titles, settings except URL slugs, content elements, images, variables, subscription configurations, and activity logs)

✅ Charts (including chart titles, settings, annotations, queries, and other Visual SQL steps)

✅ Comments (for charts and dashboards)

✅ Data source schemas

Data not in-scope (lower sensitivity or transient):

• Dashboard URL slugs

• Data source settings (including display names)

• Data source change histories

• Query logs (for charts and data sources)

Rovo

Data not in-scope (lower sensitivity or transient):

Rovo is not initially available for BYOK/CMK customers until it supports the use of customers' encryption keys. However, if desired, BYOK/CMK customers can request activation of Rovo in its current form (encrypted with Atlassian-managed keys) through their account teams.

Atlassian Administration

Data not in-scope (lower sensitivity or transient):

• Audit log events (user-created activity settings in audit log can hide data created by users)

• All other features

All apps

Data not in-scope (lower sensitivity or transient):

• Atlassian marketplace app data

• Cached content (up to 30 days)

• Data in transit (up to 30 days)

• Team profile information data

• Third-party app integration data

• User account information data

• User analytics