Atlassian Apps: More Transparency and Security for the Atlassian Marketplace

If your organization is migrating to the Atlassian Cloud or is already using Cloud products, chances are your teams will want to use the Marketplace apps alongside these core products. And, of course, these apps should meet your organization's privacy, security and compliance requirements. However, with thousands of apps from hundreds of vendors, sifting through solutions to meet these requirements is no trivial task.

To simplify the process, increase transparency, and give customers more control over Marketplace apps, Atlassian recently rolled out a series of enhancements to the Marketplace and product administration.

A New Marketplace Privacy & Security Tab

Atlassian Apps: More Transparency and Security for the Atlassian Marketplace - Atlassian marketplace privacy and security tab

The new Privacy and Security tab shows important details about the apps of Marketplace partners

Evaluating apps against an organization's security needs is an important part of the selection process. To make the app assessment more straightforward, Atlassian has added a new tab to the Marketplace listings that provides all relevant information about data management, security, and privacy details. It answers the following questions at a glance:

  • Is data stored outside of Atlassian products and services?
  • What types of data does the app store?
  • Does the app support data residency or have specific compliance certifications?
  • Is the app part of the Marketplace security or trust programs?
  • Is a Data Processing Agreement available for the app?

Links provide detailed information and contact details about security issues, so customers can contact the right vendor contacts directly. This tab provides a consistent place to start the app evaluation, where customers can get the most important information and dig deeper if needed.

A New Interface with Info on Data Management

Atlassian Apps: More Transparency and Security for the Atlassian Marketplace - atlassian cloud admin options

The admin area offers info on app data storage and the option to pin data in specific geographical regions

Organizations that have specific data storage location requirements know that Atlassian products offer the option to explicitly specify the data storage location for in-app data, such as Germany. However, Marketplace partners can also independently provide the option to pin data stored outside of Atlassian locally in specific geographic regions.

In the new Privacy & Security tab, it is immediately apparent before installation which apps support regional data storage. But what about the apps that are already installed? The new beta features at admin.atlassian.com for app Data Residency provide direct information on whether an app is pinned in the same region as the base product (Jira or Confluence) and where Data Residency is supported. Customers can even arrange for data migration to a desired region for some apps.

If customers want to request the Data Residency feature for an app that does not support local data storage or want to know more about the reasons why the feature is not supported, they can contact the responsible team directly using the contact details in the Marketplace entry.

Other Enhancements for Simplified App Management

The previously mentioned features are just the latest innovations. Atlassian has made significant investments in centralizing app management in recent years. At admin.atlassian.com, administrators can find a comprehensive overview of all connected apps for existing Atlassian instances. They have the ability to filter the apps based on various administrative criteria, install private apps, prevent installations by end users, and much more.

Atlassian Apps: More Transparency and Security for the Atlassian Marketplace - connected apps settings

The settings for connected apps on admin.atlassian.com

Admins therefore obtain a comprehensive view of their environment in the same location where they control and manage their app settings.

These changes represent significant strides toward enhancing privacy and security within the Atlassian Cloud ecosystem, but they are not the only ones. Atlassian's Roadmap offers more information about future initiatives and upcoming features that will continue to enhance the Marketplace and app management.

Your Partner for Atlassian Cloud Migration

In February 2024, Atlassian will discontinue support for its Server products. Do you want to learn more about the Atlassian Cloud and embark on the migration to Confluence Cloud, Jira Cloud, or Jira Service Management Cloud? Feel free to ask your questions via email at atlassian-licensing@seibert-media.net or schedule a consultation directly with us (available in German or English). As a long-standing Atlassian Platinum Solution Partner, we are here to assist you in evaluating your project, planning the migration, and transitioning your existing systems.


Further Reading

Forget Less and Ensure Quality with didit Checklists for Atlassian Cloud Forget Less and Ensure Quality with didit Checklists for Atlassian Cloud Forget Less and Ensure Quality with didit Checklists for Atlassian Cloud