The document lists US-based subprocessors including Amazon Web Services and Google Cloud Platform as infrastructure providers, establishing that customer data may be hosted and processed in the United States.
This analysis describes what Atlassian's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision is operationally significant for EU, UK, and Australian customers because it establishes that personal data may be transferred to and processed in the United States, requiring valid transfer mechanisms such as Standard Contractual Clauses to be in place between Atlassian and each US-based subprocessor.
Interpretive note: The document lists subprocessors and their locations but does not specify which transfer mechanism applies to each cross-border transfer; the applicable mechanism must be determined by reference to Atlassian's DPA.
Under these terms, customer data processed by Atlassian cloud products may be transferred to and stored on infrastructure operated by US-based providers. Customers subject to GDPR or UK GDPR should confirm that Atlassian's DPA includes valid transfer safeguards covering these providers.
Cross-platform context
See how other platforms handle Cross-Border Data Transfer to US-Based Infrastructure Providers and similar clauses.
Compare across platforms →"Atlassian subprocessors who process customer data.Excerpt from Atlassian's Sub-Processors
1) REGULATORY LANDSCAPE: GDPR Chapter V (Articles 44-49) governs transfers of personal data to third countries.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision is operationally significant for EU, UK, and Australian customers because it establishes that personal data may be transferred to and processed in the United States, requiring valid transfer mechanisms such as Standard Contractual Clauses to be in place between Atlassian and each US-based subprocessor.
Under these terms, customer data processed by Atlassian cloud products may be transferred to and stored on infrastructure operated by US-based providers. Customers subject to GDPR or UK GDPR should confirm that Atlassian's DPA includes valid transfer safeguards covering these providers.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Atlassian.