As of late January 2022 availability of Data Residency has been rolled out to all Atlassian paid customers for the products in scope.  For detailed information of the products and data set scope please visit: https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency/ 

Hi again everyone!

We have started to roll out Data Residency to the remaining instances of Jira Software, Confluence, and Jira Service Management for instances created before June 30th.  

Due to the higher than expected volume of customers using Data Residency between June and October, we've decided to roll this out in a phased approach. With approximately 10% of the customer base per week, with full rollout being finished in 10 weeks.  We will adjust this based on the new incoming demand. 

The phased rollout is just to ensure that there is a smooth transition, given the sheer volume of customers we have in our cloud, and ensuring everyone has time to turn it on if they want to.  Once we have completed the rollout, I will be closing out this request!

RJ Gazarek

Sr Product Manager, Data Residency

Hello Everyone! 

We are about halfway through our work on providing data residency to ALL Standard and Premium users for no additional cost.  At the end of June, we released Data Residency for brand new instances of JSW/JSM/Confluence on Standard or Premium.  The idea is that these instances should be relatively empty, and easy for us to move.  https://community.atlassian.com/t5/Feedback-Forum-articles/Announcing-Data-Residency-for-Standard-and-Premium-licenses/ba-p/1732876 

However, we still have some work to do to open this up to already existing instances with data in them.  We are hoping to have this done no later than October of this year.  In the meantime, if you do require data residency, and you are on Standard or Premium, please open up a support ticket, and we may be able to manually accommodate you before October.  

In the event that you have a larger dataset, you may still have to wait until we are finished with this body of work by October. 

If you have any questions, please let me know!

RJ

I wondered if this will be rolled out in 1 hit to all standard and premium plans, or in batches? I've a customer who's very keen for this!

+1, I agree with the previous comments. Atlassian should provide the data center option with smaller user tiers. 500 is just too big to start. That's why most SMEs cannot opt for data centers. On the other hand, it is the only (data security) compliant way in the EU. 

@Atlassian: Please listen to your customers. It will be a win-win, since there is huge demand and scalability.  

Like others, we planned to migrate to the cloud, but hat missed that little word "enterprise" in the description of data residency. We stopped our migration efforts!

Additionally, i must agree to the voices that state that regulations aren't met even if the data residency option for standard/premium plans become available. According to the information site from Atlassian concerning data residency, account information (e.g. user name and e-mail) can not be pinned to a realm.  https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency-and-realms/

Atlassian should provide a Data Center option with smaller user tiers! Then customers are in control of their data.

Guys, I suggest you to watch https://jira.atlassian.com/browse/CLOUD-11064 because it looks like, that there is no data residency at all.

Quotation: 

513b59bdeb2e added a comment - Yesterday

Basically the only way out would be apropriate Datacenter User Tiers. Also Dataresidency is according to our Lawers useless, the main point is EU Court has stopped Privacy Shield. (Schremps II) and the issue is arround the cloud provider and in no way related to the country in which it is stored.

The next big thing is, even you have standard clauses or rules, the EU Court pointed out you have to prove the effectivness of those claues. This is simply not possible for any US American Company due to the Patriot Act. So even Atlassian likes it or not, there is at the moment NO legal way to use the Atlassian cloud for sensitive data.

In short - Atlassian Cloud plugins are processed on the partners servers, anywhere in the world. This will never go thru EU regulations. Only way is to host your data on DC. 

+1 As a public transport company in Germany, which btw wants to introduce the Atlassian suite to the whole company for hundreds of employees, we also absolutely need data residency in the EU for the standard plan.

As a federal public law institution we absolutely need data residence in EU for standard-plan. Hope this will come soon! As long as we are global, we have strong limitation which data can be kept in the Atlassian-tools what makes the tools quite unusable.

I see that the published roadmap doesn't show any residency controls for bitbucket. Controlling where the meta data resides doesn't help when the data itself is in the wrong country.

Absolute must-have feature for EU-based companies / organizations where information security and data protection is taken seriously. Size of an organization is irrelevant from a regulatory perspective, so the limitation to enterprise plan doesn't make sense.
 

This is an absolute dealbreaker! We would love to migrate to cloud, but can't because of that reason. Data Center and Enterprise are ridiculously expensive Options if you are below 500 Users.

Unfortunately, my hunch that nothing tangible is going to be presented at the beginning of the year turned out to be correct - all we have by now is "sometime Q4 2021 maybe, not sure about the price", so the decision we made back in December to start migrating off Jira to YouTrack to ensure GDPR-compliance by March 2021 was the right one to take... It's a painful and unnecessary migration, and the crappiest Xmas I've ever had, but whatever - so much for "Don’t #@!% the customer".

As Cathy says, it's very far off, we are unable to take a decision for cloud until this has been implemented. The pricing will also be a factor, going to the cloud will already increase our price from $15K to about $20K/year for us.

Great news! Thanks for the links too @Rudy & @Jacques! 

Thanks for the update, good to see this is in the works, unfortunately not soon enough though if Q3/Q4 this year

Check the "Data residency for Premium and Standard plan customers" on this page: https://www.atlassian.com/roadmap/cloud?selectedProduct=&category=dataManagement&status=inTheWorks 

Yes, take a look at the Cloud roadmap: https://www.atlassian.com/roadmap/cloud 

This has been added yesterday.

(Ok, I'm not allowed to add attachments, so take a look at the URL > Data management section

any news on this topic? Any timeline?

We have clients in a very similar position to the ones you're describing @dominic As a result of Atlassians decision, we're actively evaluating alternatives that our clients may be able to migrate to, in order to act in their best interests. Happy to chat about what we're discovering as alternate platforms for this use-case if it turns out that Atlassian will not be servicing these markets with the rigour needed, or in the timeframe required. In your case, you're got a useful German made open-source system candidate that would function in the pattern you're describing. We can't avoid having to do contingency planning for affected customers and want them to have options, informed due diligence opinions.

I am speaking for a SME company based in germany with a 50 users tier.

As we are working for law enforcement agencies there are very strict regulations and all of our Atlassian tools have to be set up in an airgapped environment without any internet connection as they contain confidential criminal case data. We achieved this using the server licenses but currently have no idea on how to continue using Atlassian tools with the new cloud based roadmap.

We are in contact with many law enforcement agencies throughout germany and know that most of german law enforcement agencies work with criminal case data solely in airgapped environments. We love Atlassian and their great software but if this use case won't be addressed, we are forced to migrate.

According to the new German Trade Secrets Protection Act (Geschäftsgeheimnisschutzgesetz), legal protection for protection for trade secrets can only be claimed if adequate technical and organizational can only be claimed if adequate technical and organizational security measures have been implemented to protect them, which I see as problematic with the existing solution.

The transfer of data to a third country must be in accordance with the GDPR. This also seems to me to be highly problematic at the moment, as the ECJ found the EU-US Privacy Shield agreement to be invalid in July 2020 with the Schrems II ruling.

We therefore need to make a decision quickly, so a concrete offer incl. timeline would be important to even consider Atlassian. If this is not available within the next 2 weeks, I see no alternative but to migrate to another provider.

I work for a research institute in Germany and we have very strict privacy rules, not just because of GPDR but also because it is part of our institute's culture since we handle a lot of personal data. Data residency could be a show stopper for us. Many thanks

Some goes for lawyers, tax consultants and most public services in Germany. They are SME and in most cases not allowed by law to use a cloud service which is under control of a non EU (or even non Germany) company.

We aren't even big enough to be out of the free tier, but defence work means we want data residency tools.

Hi everyone,

We're actively planning a solution for data residency outside of the Enterprise plan and are looking to get some early feedback on the options we're considering. If you are able to spend 15-30 minutes on a call with our team to share your thoughts, we would greatly appreciate it (and offer a small gift as a thank you).

Please contact me directly if you are able to participate at dmeyer@atlassian.com

Regards,

Dave Meyer

Senior Group Product Manager

Also very important in this regard is https://jira.atlassian.com/browse/CLOUD-10905 - ability to bring your own key. 

The new service model is a show stopper to use Jira Service Desk in the future. My customer is using Server version and cant´t move to cloud or Datacenter due to data security requirements.  They are in 250 user tier.

Have worked with a couple of clients in Europe who both had to choose server / datacenter due to the data residency issue. They were not in the Enterprise Segment and cloud is therefore not an option, despite they both have a vision to put as much in the cloud as possible.

we are on the 10-20 user tier, and cloud is not possible due to data confidentiality. 

We have financial institutions being our customers willing to go to cloud, but they need to be sure where their data are being stored. They don't need 1000 or bigger instances, so Enterprise is not an option for them.

On the other hand, data residency only for Enterprise is being perceived more as a paint point in other plans rather than outstanding feature for choosen Enterprise users.

Few European customers have any reason to want to store data in the US, so I agree, make EU default.  And it is equally a requirement that SMALL companies with no need for an Enterprise plan for any other reason than data residency should be able to comply with European regulations. 

I agree with the proposition of @Bernhard Reiter, it is the only solution which could be sold as a one-step-ahead reason to go for Atlassian products. 

That is an excellent suggestion @Bernard! This would put Atlassian ahead of many other US companies and surely make great PR in Europe. 

A very good suggestion, Bernhard.

There are probably many customers within the EU who's not aware of the issues Atlassian have with regards to data residency when buying their cloud services.

This puts these customers at a quite significant risk if they get an audit from the Data Protection Authorities (DPAs). It's very likely they will not be entirely happy with Atlassian for not clearly having stated they are currently not GDPR-compliant with regards to data storage.

And they will be even less happy if they in the future see there was a switch for data residency, the default country was something outside of the EU, and they didn't understand it's almost always mandatory to have switched it to a country within the EU.

All our customers are asking for data residency inside the EU.

Please, make this happen soon.

As Atlassian I would do it the other way round: For EU customers, EU data residency is the default. Quick global access through "world cloud" should be premium.

So, dear Atlassian. Clone your cloud instance to a german AWS and sell this as standard in the EU. Would be very nice.

I'm currently evaluating different PM tools and wiki software for a 2bn€ company from germany. We have a future cloud only policy and I can't even list Jira and Confluence as long as there is no way to even hosting it in the EU. We'd start with a small user number (50-200) in the first run. I'd like to have you on the list but without a quick decision about this, sorry, no brainer you won't make it. Very sad.

Data residency should obviously be offered to all tiers or you can forget about EU companies signing up, should their other policies allow this.

We have a similar issue now when you have presented EOL for your server products.

If you cannot provide data residency within the EU for at least the Premium Plan, we need to consider moving away from Confluence and Jira in the very near future.  

As far as I can see, this does not address one major problem: SME's in the EU that want to implement Jira from Feb 21 on, are forced to use sth. other. Because Enterprise and Data Center are too expensive and Cloud is not an option, unless data residency is available.

This is obviously very important to all EU customers large and small. Now Jira server has an EOL notice to help EU customers this is really important.

We were hoping to migrate our service desk  of 70 users over to JSM & Confluence Premium Cloud, but now realise that in order to ensure data residency in the EU Enterprise is the only option, this is well out of reach for an SME like ours, very disappointing! 

Are Atlassian wanting to shake off SME's and only have an Enterprise clients base?  That's how it feels sadly at the moment.

Please prioritise this and extend this ability to smaller user band customers.

Agreed with everyone else. We guarantee EU data residency for our clients. You made us shift over to cloud and promised data residency... now we are learning that we have to spend 100k USD for this... its total nonsense... I hope this gets prioritized we may have to drop the product over this.

I'm joining others... we are 50 users and without Data Residency we will be force to migrate to something else then Jira. We are also introducing Jira to more people and need to move to 150 users by end of 2021 but with current limitations it will be impossible. So for us it's Cloud or in Feb we need to think to migrate to something other then Jira (our support license are ending in mid Feb 2021)

So this is really important for us. Please consider: 

1) introduction to Data Residency in Standard plan or

2) allowing data center for smaller number of users or

3) allowing to purchase additional license for companies that already have a support license till 2024.

I cannot stress this enough. For EU-located companies, with any size, it is absolutely inacceptable to use cloud instance without data residency. This is not restricted to GDPR legislation. There are many other areas of concern.

Case:

Deal breaker for us (SME ~ 30 FTE) due to customer pushback after Schrems II / Privacy Shield. Self-hosted offering has been discontinued und Datacenter is not applicable. Enterprise is only available from 1000 seats and the features are not needed anyways.

Wanted:

Data residency on a plan available at lower seat numbers.

Use case:
Many small to medium sized companies (e.g. 30 - 100 employees) within the security industry currently using the Server version that can not afford an expensive Data Center license (since it becomes as much as 10 times more expensive for a company below 50 employees when they have to buy a 500 user license) when the Server version is discontinued. These companies are therefore forced to migrate to the Atlassian Cloud if they want to continue using Atlassian products. The Atlassian Cloud is however not an alternative for most of these companies since they lose control of where their data is stored. Besides this they also usually have many integrations with other systems and advanced scripting (via the ScriptRunner plugin that might not work with a cloud solution).

Wanted solution (in prioritized order):

1. A Data center license model that starts from 50 or 100 users
2. Data residency for smaller companies (50 - 100 users)

Use case:

Company is not a government organization, but is partly state-owned, and is by law required to operate under strict government regulations due to the industry it operates in (power grid). 

The regulations require the company to perform a risk assesment, and recommends the company to avoid cloud solutions where 

1. The company cannot control where data is stored, geographically. Storage within the EU is recommended.
2. The data can be accessed by persons belonging to a vendor that is located outside the EU.

The company does not need other enterprise features, and only have 50-100 users. They also rely on custom integrations with other systems. 

Feedback received at Team Tour, Cloud Migration Support booth:

Use case:

"Our customer would want to know if there any target date when data residency will come to premium.

This is required because they have customers that only have 100 users, that require data residency because they are government instances, so to low tier for data center or enterprise..."

Thank you for reporting this helene1. Atlassian has definitely heard the feedback from our customers about the need for data residency at smaller user tiers and without the remaining features under the Enterprise plan. I have updated the issue summary to be a little less prescriptive, but we are actively exploring strategies to address this. I will provide an update as soon as we have something to share.

Regards,

Dave Meyer

Senior Group Product Manager, Cloud Enterprise