Atlassian · Atlassian Cloud Terms · View original document ↗

HIPAA protected health information upload prohibition

High severity High confidence Explicitdocumentlanguage Common · 247 of 352 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Atlassian Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Atlassian's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Uploading protected health information without a Business Associate Agreement would violate this contractual prohibition, exposing the customer to contractual liability regardless of any separate regulatory obligations.

Consumer impact (what this means for users)

You cannot use Atlassian's Cloud Products to store or process patient, medical, or other protected health information unless you have a Business Associate Agreement in place with Atlassian.

How other platforms handle this

Tinder Medium

May harm the reputation of Tinder or its affiliates, meaning the uploading or sharing of content on the Tinder platform that is defamatory to Tinder or its affiliates or advocates misuse of the Service...

Afterpay Medium

Political content, including for dissemination in electoral campaigns.

Runway Medium

Gore, such as dismemberment, beheadings, mutilations, and exposed organs/bones/muscle

See all platforms with this clause type →

Monitoring

Atlassian has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Get Monitor Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Unless the parties have entered into a 'Business Associate Agreement,' Customer must not (and must not permit anyone else to) upload to the Cloud Products (or use the Cloud Products to process) any patient, medical or other protected health information...

— Excerpt from Atlassian's Atlassian Cloud Terms

Provision details

Document information
Document
Atlassian Cloud Terms
Entity
Atlassian
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 12, 2026
Record ID
CA-P-056167
Document ID
CA-D-00707
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
43d2f9eb25e260f7f82440abad02e2eba835af6870815ec9bb7ba9cddb25b8ec
Analysis generated
May 8, 2026 01:00 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Atlassian
Document: Atlassian Cloud Terms
Record ID: CA-P-056167
Captured: 2026-05-08 01:00:52 UTC
SHA-256: 43d2f9eb25e260f7…
URL: https://conductatlas.com/platform/atlassian/atlassian-cloud-terms/provision/CA-P-056167/hipaa-protected-health-information-upload-prohibition/
Accessed: July 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Get Compliance

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Atlassian's HIPAA protected health information upload prohibition clause do?

Uploading protected health information without a Business Associate Agreement would violate this contractual prohibition, exposing the customer to contractual liability regardless of any separate regulatory obligations.

How does this clause affect you?

You cannot use Atlassian's Cloud Products to store or process patient, medical, or other protected health information unless you have a Business Associate Agreement in place with Atlassian.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 247 platforms. See the full comparison.

Is ConductAtlas affiliated with Atlassian?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Atlassian.