Is JIRA Software HIPAA compliant?

[zubair.magdum]

Is JIRA Software HIPAA compliant? I am reading online that the server desktop product is but not the cloud based. Is this true?

[Thomas B]

@zubair.magdum - thats correct, currently cloud software is not hipaa compliant but Atlassian is on the way to compliance. It is recommended to have a locked down server and use server software if you need to maintain hipaa compliance. I'm excited for cloud to be compliant, its in the works!

See here - https://www.atlassian.com/trust/roadmap?tab=compliance

[Danyale Clay]

Do you happen to know rough time frame for the Jira Cloud HIPAA compliance road map task?  We are trying to determine if we need to move to the server based Jira application. 

[Alan Pryor]

What is the status of becoming HIPPA Compliant?

[Dena Campasano]

Also looking for an update as we would like to expand our use of Jira and this prevents us from doing so.

[Alan Pryor]

Its been several months since Atlassian has commented on this.  Is this still in the works?

[Blake Burdeen]

Since Atlassian is discontinuing Server products - it would be helpful to know if they will begin to offer compliance and BAA for Cloud.

[Dante Peralta Lopez]

My company wants to go cloud but bc of HIPAA we're unable and still working in sever version. Pls fix this ASAP

[Greg Jones]

I understand they are not HIPAA compliant today, but is their database encrypted at rest?

[Brooklyn Trumpy]

Be careful...the HIPAA compliance on their roadmap only applies to software & confluence, not to service desk. 

[Filiberto Selvas]

I am posting this update on a few threads to ensure customers that have expressed interest get to see it:

Yesterday we announced that Atlassian is ready to sign BAA agreements for compliance with the HIPAA law provisions for the Enterprise Plan version of JSW and Confluence. More information here: https://www.atlassian.com/trust/compliance/resources/hipaa 

We will soon update our public roadmap to include a timeline for JSM HIPAA as well, ETA is at the end of calendar year 2022. 

Please let me know of any questions 

[Jason Green]

Hi @Filiberto Selvas I'm considering recommending JSM Cloud for a new to Atlassian healthcare account in Q1 2022. How confident are you the BAA is set for Feb.?

[Filiberto Selvas]

Hi Jason, we will NOT be ready to sign BAAs for JSM in February 

For February we are aiming to sign BAAs for JSW and Confluence only 

I do hope early next year we can publish a timeline for JSM though 

[Jason Green]

Excellent!  That works, I'll make the necessary updates. Also looking forward to JSM Portal SSO next year, some big upgrades on the way!

[Brooklyn Trumpy]

We would love to have a timeline for JSM early next year!!! Thank you

Brooklyn

[Brooklyn Trumpy]

Be careful, all. Jira is moving toward HIPAA compliance for software and confluence only at this point. Service desk is not on the current road map.

[Justin Berneburg]

Where you do see HIPPA compliant on their roadmap?

[Brooklyn Trumpy]

Q1 2022