Consistent with Atlassian's DPA, this list represents the mechanism through which Atlassian discloses subprocessor additions and replacements, with customers entitled to receive advance notice and to exercise objection rights as specified in the DPA.
This analysis describes what Atlassian's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational mechanism for GDPR Article 28(2) compliance, requiring Atlassian to provide prior notice of subprocessor changes and permitting customers to object to new subprocessors before they begin processing customer data.
Interpretive note: The specific notice period, objection mechanism, and consequences of objection are governed by each customer's individual DPA with Atlassian and are not stated in this public subprocessor list.
This provision establishes that customers are entitled to advance notice when Atlassian adds or replaces a subprocessor, and may object to such changes under the terms of their DPA. The agreement requires customers to monitor this list or subscribe to change notifications to exercise this right in practice.
Cross-platform context
See how other platforms handle Subprocessor Change Notification and similar clauses.
Compare across platforms →"Atlassian subprocessors who process customer data.Excerpt from Atlassian's Sub-Processors
1) REGULATORY LANDSCAPE: GDPR Article 28(2) requires that data processors obtain prior specific or general written authorization from the data controller before engaging subprocessors, and requires notification of intended changes.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the operational mechanism for GDPR Article 28(2) compliance, requiring Atlassian to provide prior notice of subprocessor changes and permitting customers to object to new subprocessors before they begin processing customer data.
This provision establishes that customers are entitled to advance notice when Atlassian adds or replaces a subprocessor, and may object to such changes under the terms of their DPA. The agreement requires customers to monitor this list or subscribe to change notifications to exercise this right in practice.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Atlassian.