Data protection in trial license

[Alok Juneja]

Hi,

We are evaluating confluence data center with trial license. Before we make any decision regarding the number of licenses, we are evaluating also how our needs are fulfilled by Confluence. We have once concern that bothers us. How is our data protected during the period when we evaluating confluence with trial license. I do not find any licensing regulation that states about the security of data during the trial license. Is it so that Confluence can access our data. How about the security of data when we buy the license.

BR

[Nic Brough -Adaptavist- · Accepted solution]

There is an easy starting point for this - Atlassian don't treat trials any differently to a production system in terms of data security.

So...

1. How is our data protected during the period when we evaluating confluence with trial license.
   • Same as if you bought a production licence.
2. I do not find any licensing regulation that states about the security of data during the trial license.
   • Same as if you bought a production licence.
3. Is it so that Confluence can access our data
   • Depends on which platform you are on - if it's Server or DC, then you are running it on your own hardware (albeit that hardware might be AWS or Azure or some other third party), then only you (and the hosting company) have access.  If it's on Atlassian Cloud, then yes, Atlassian can see it all (because they're hosting it all).  Of course, there's also the people you explicitly add so they can use it too, but that's up to you.
4. How about the security of data when we buy the license
   • The licence just changes what functions can be used and how many people can do them.  Not the security or ownership.

[Alok Juneja]

Thanks Nic for providing the explaination.

BR

[Brant Schroeder]

@Alok Juneja 

Data Center is a product that is self-hosted.  Since the data is stored on your servers you would be responsible for securing that.  Atlassian is responsible for providing releases of Confluence that keep the application secure when you apply them.

[Alok Juneja]

Thanks @Brant Schroeder . Does that means that we are the gate keepers of the data since it is on server and Confluence can not pull it even for its research purpose. I hope that is true even in the evaluation period when we are using the trial licence. 

[Brant Schroeder]

@Alok Juneja Where are you seeing in the license agreement that they have access to your data?  Is this it "Atlassian may collect certain data and information from you and Secondary Users in connection with your and Secondary Users’ use of the Software and otherwise in connection with this Agreement. All such data and information will be collected and used by Atlassian in accordance with Atlassian’s Privacy Policy, which you acknowledge. You may disable data collection by the Software through the settings in the Software."   If so I believe that is in reference to usage data and like it says you can opt-out.   I will escalate this to Atlassian so they can better address your question.  

[Alok Juneja]

Hi @Brant Schroeder Thanks for the explanation. The reply from @Nic Brough -Adaptavist- is very informative.

[Fabian Lim]

Hi @Alok Juneja

You can find some details here regarding security practices and policies: https://www.atlassian.com/trust/security

Regards

[Alok Juneja]

Thanks @Fabian Lim for sharing the link. I really have hard time finding about customer data protection for Confluence data center under trial verison. Please share in case you have stepped upon some relevant information.

BR

Alok