Provision record
Atlassian · Atlassian Cloud Terms · View original document ↗

HIPAA protected health information upload prohibition

High severity High confidence Explicit document language Common · 245 of 352 platforms

Key Facts

What must the customer not upload to or use the Cloud Products to process unless the parties have entered into a Business Associate Agreement?
Atlassian requires that, unless the parties have entered into a Business Associate Agreement, the customer must not upload to or use the Cloud Products to process any patient, medical, or other protected health information.
Can the customer upload patient, medical, or other protected health information to the Cloud Products?
Atlassian requires that, unless the parties have entered into a Business Associate Agreement, the customer must not upload to or use the Cloud Products to process any patient, medical, or other protected health information.
Stay ahead of the changes
Track Atlassian and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Atlassian's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Uploading protected health information without a Business Associate Agreement would violate this contractual prohibition, exposing the customer to contractual liability regardless of any separate regulatory obligations.

Clause Stability Stable

0
Changes
3
Months Monitored
Jul 10, 2026
First Seen
Jul 10, 2026
Last Seen
This clause type exists across 1777 other provisions on other platforms.

Consumer impact (what this means for users)

You cannot use Atlassian's Cloud Products to store or process patient, medical, or other protected health information unless you have a Business Associate Agreement in place with Atlassian.

How other platforms handle this

Tinder Medium

May harm the reputation of Tinder or its affiliates, meaning the uploading or sharing of content on the Tinder platform that is defamatory to Tinder or its affiliates or advocates misuse of the Service...

Afterpay Medium

Political content, including for dissemination in electoral campaigns.

Runway Medium

Gore, such as dismemberment, beheadings, mutilations, and exposed organs/bones/muscle

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Unless the parties have entered into a 'Business Associate Agreement,' Customer must not (and must not permit anyone else to) upload to the Cloud Products (or use the Cloud Products to process) any patient, medical or other protected health information...

Excerpt from Atlassian's Cloud Terms

Provision details

Document information
Document
Atlassian Cloud Terms
Entity
Atlassian
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 12, 2026
Record ID
CA-P-056167
Document ID
CA-D-00707
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
43d2f9eb25e260f7f82440abad02e2eba835af6870815ec9bb7ba9cddb25b8ec
Analysis generated
May 8, 2026 01:00 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Atlassian
Document: Atlassian Cloud Terms
Record ID: CA-P-056167
Captured: 2026-05-08 01:00:52 UTC
SHA-256: 43d2f9eb25e260f7…
URL: https://conductatlas.com/platform/atlassian/atlassian-cloud-terms/provision/CA-P-056167/hipaa-protected-health-information-upload-prohibition/
Accessed: Aug. 18, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Atlassian's HIPAA protected health information upload prohibition clause do?

Uploading protected health information without a Business Associate Agreement would violate this contractual prohibition, exposing the customer to contractual liability regardless of any separate regulatory obligations.

How does this clause affect you?

You cannot use Atlassian's Cloud Products to store or process patient, medical, or other protected health information unless you have a Business Associate Agreement in place with Atlassian.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 245 platforms. See the full comparison.

Is ConductAtlas affiliated with Atlassian?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Atlassian.