Note: The Privacy & Security tab is now live to 100% of Marketplace visitors! If you haven't yet, we recommend filling out the tab for all of your cloud apps.
Today, we are beginning gradual rollouts of two important features for customer trust and Marketplace transparency.
- We are introducing a new Privacy & Security tab on the Atlassian Marketplace to connect the dots between Marketplace Partners and prospective cloud customers.
- We are also introducing a new UI for app data residency, which will display app data residency options on admin.atlassian.com.
Starting today, a small but increasing cohort of customers will begin seeing more information about your cloud apps. We are planning a customer-facing announcement when 100% of customers can see these experiences in June (final release date subject to change).
These experiences are designed to streamline the app assessment process and help us create a more trustworthy cloud experience for customers with apps. Most importantly, they will allow Marketplace Partners to showcase and benefit from your investments in cloud security, privacy and compliance.
What should Marketplace Partners do to prepare?
Fill out the Privacy & Security tab for your cloud apps
The Privacy & Security tab is populated with information provided directly by you, Marketplace Partners and developers, for the apps you list on the Marketplace. You're welcome to also include links to more information and context. There is also a field for security contact information so you can more directly connect customers with security questions to the correct subject matter expert on your team.
To help you prepare, we published documentation in January and released an API and web form UI in February. We appreciate that many of you have already submitted information for your apps, and we’re encouraged to see hundreds of apps already providing Privacy & Security tab information.
Anyone with a cloud app listed on the Atlassian Marketplace is encouraged to review the documentation on the Privacy & Security tab, and then take the following steps:
- Prepare your responses using the questions provided in the documentation
- Submit your responses to display on your cloud app listings
- via API if you'd like to submit information in a scaled manner
- via a web form UI on the Marketplace, where you currently manage other aspects of your app listing (see instructions here)
- Keep your information up to date as your cloud app privacy & security posture changes
If you need help, reach out to Marketplace Support here.
Invest in Data Residency for apps that require it
Data residency is a requirement for many Atlassian customers, particularly customers based in Europe, Germany, the USA, and Australia. In fact, 80% of Atlassian cloud enterprise customers say that apps supporting data residency is very or extremely important.
If your cloud app stores data, it is likely that your customers will require data residency options to comply with local regulations. We currently support realm pinning for Connect apps in GA and realm migration for Connect apps in EAP, and plan to support data residency for apps built on Forge in the coming year.
If you haven't yet, please review our documentation on data residency and the most recent data residency update. Please feel free to add questions here on the developer community.
What is the timeline for the customer announcements?
In January, we published the following timeline for Privacy & Security tab:
- ✅ January 2023: Marketplace Partners can start preparing responses using the documented questions
- ✅ February 2023: Marketplace Partners can start submitting responses via API or web form
- ⭐️ We are here → March 2023: 10-20% of customers will begin seeing Privacy & Security tab on cloud app listings. To ensure a smooth rollout, we will be releasing the tab to customers in a staged manner. Not all customers will see the tab at this stage, and we will not announce it.
- June 2023: Customer announcement. 100% of customers will see the tab on cloud app listings.
- August 2023: Tab must be completely filled out for all Cloud Fortified apps and Security Self Assessment will be deprecated.
Data residency is on a slightly different timeline, with an overlapping customer rollout:
- ✅ 2021: Partners can support realm pinning for apps built on Connect
- ✅ November 2022: Partner EAP for realm pinning. Marketplace Partners can start testing (and deploying onto production with caution) realm migration for apps built on Connect
- ⭐️ We are here → March 2023: Customers will begin seeing app data residency options on admin.atlassian.com. Not all customers will see the app data residency UI at this stage.
- April/May 2023: Partner PREVIEW release for realm migration. Marketplace Partners are encouraged to support realm migration on production.
- June 2023: Customer announcement. 100% of customers with self service data residency will see the app data residency UI and options in admin.atlassian.com.
- September 2023: Improved visibility of app data residency status on admin.atlassian.com
We plan to give customers a preview of the new Privacy & Security tab at Team 23, and then announce both of these features when they are live to 100% of customers (currently planned for June). In the meantime, we recommend ensuring your cloud app information is up to date and ready for customers.
Thank you all for your continued partnership on initiatives like these that create a more transparent and trustworthy cloud Marketplace.
Feel free to visit the Partner Portal or Developer Community if you have general questions about app trust.