Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The document discloses that Atlassian engages third-party subprocessors for customer support and analytics functions, establishing that customer interaction data, usage data, and potentially support ticket content may be accessible to named third-party vendors.
This analysis describes what Atlassian's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that customer-facing interaction data and platform usage analytics are processed by third parties, which is operationally significant for customers whose support communications may contain sensitive business or personal information.
Interpretive note: The document lists subprocessors by functional category but does not specify the granularity of data access for each support or analytics subprocessor; the scope must be determined by reference to Atlassian's DPA and product documentation.
Under these terms, data submitted through customer support channels and usage analytics generated by Atlassian cloud products may be processed by named third-party subprocessors. Customers should review the listed support and analytics vendors against their data classification policies.
Cross-platform context
See how other platforms handle Customer Support and Analytics Subprocessor Engagement and similar clauses.
Compare across platforms →Monitoring
Atlassian has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Atlassian subprocessors who process customer data.Excerpt from Atlassian's Sub-Processors
1) REGULATORY LANDSCAPE: GDPR applies to personal data processed by support and analytics subprocessors, including names, contact details, and any personal data included in support ticket content. Analytics data involving device identifiers or behavioral tracking may engage the EU ePrivacy Directive and its national implementations. The FTC has jurisdiction over analytics data practices affecting US consumers. 2) GOVERNANCE EXPOSURE: Medium. Support ticket content may include customer personal data, business-sensitive information, or data subject to sector-specific confidentiality requirements. Customers in regulated industries (healthcare, financial services, legal) should assess whether support subprocessors are subject to appropriate confidentiality and security obligations under Atlassian's DPA. 3) JURISDICTION FLAGS: EU customers face GDPR obligations regarding personal data processed by support subprocessors. UK customers face equivalent obligations under UK GDPR. Australian customers should assess Privacy Act obligations. Customers in the healthcare sector should evaluate whether support data could constitute protected health information under HIPAA. 4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise DPAs should specify that support and analytics subprocessors are restricted from using customer data for their own purposes, including analytics benchmarking or product improvement. Procurement teams should confirm that support subprocessors are subject to data deletion obligations consistent with the customer's retention policies. 5) COMPLIANCE CONSIDERATIONS: Data protection impact assessments should account for support and analytics subprocessors when processing involves special category data or sensitive business information. Customers should review whether support channel data is subject to separate data retention or deletion timelines and confirm that listed support subprocessors comply with those timelines.
This provision establishes that customer-facing interaction data and platform usage analytics are processed by third parties, which is operationally significant for customers whose support communications may contain sensitive business or personal information.
Under these terms, data submitted through customer support channels and usage analytics generated by Atlassian cloud products may be processed by named third-party subprocessors. Customers should review the listed support and analytics vendors against their data classification policies.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Atlassian.