Close
View this page in your language?
All languages
Choose your language

The key to control is in your hands

Customer-managed keys, Atlassian’s advanced
encryption add-on – fully managed by you

Watch the demo

Encryption, on your terms

Unlock greater visibility and control over the encryption
of your Atlassian Cloud data.

no alt text

Lock down your data with KMS key policies

Enforce key policies to restrict access to your cloud data across the Atlassian Cloud Platform.

no alt text

Track and act on encryption events

Analyze when and how your encryption keys are used to identify risks and take action.

no alt text

Fortify your defenses with added controls

Mitigate security risks with added cryptographic and network controls.

Encryption that you control

Manage your encryption key policy
Verify that your Atlassian Cloud encryption policy is configured correctly.
Keep tabs on your encryption keys
Analyze and act on key operation events, such as revocation and re-encryption, for threat detection and reporting.
Prevent key access spoofing
Implement additional authentication and network traffic security controls on your KMS key policy.
Screenshot of Encryption page with account info and Encryption keys
Screenshot of Encryption page with account info and Encryption keys

Resources

no alt text

Further mitigate security risks to your Atlassian Cloud data

Read the whitepaper to learn how Customer-managed keys protect your data

Download
no alt text

Take control of your data encryption

Learn how to setup Customer-managed keys and more

Review documentation
no alt text

Ensure enterprise-grade data protection

Understand how we built the Atlassian Cloud Platform on a secure foundation

Visit the Trust Center

FAQs

How do I get access to Customer-managed keys (CMK)? Copy link to heading Copied! Show
  

Customer-managed keys (CMK) is Atlassian’s advanced encryption add-on. It currently supports selected data across Jira, Confluence, and Jira Service Management apps. Currently, CMK can only be enabled on new cloud sites for Cloud Enterprise customers. Please contact our sales team to learn more.
How do I enable Customer-managed keys (CMK) for my organization? Copy link to heading Copied! Show
  

After you purchase Customer-managed keys (CMK), you can quickly enroll your organization in a CMK encryption policy in Atlassian Administration. For step-by-step guidance, please see our enrollment documentation.
I am a Data Center customer, and I want to use Customer-managed keys (CMK). What do I have to do? Copy link to heading Copied! Show
  

Customer-managed keys (CMK) is not available for Data Center; it is exclusively offered for Atlassian Cloud. As a reminder, we announced that Atlassian Data Center products will reach end of life on March 28, 2029 as we shift our full focus to the cloud. This cloud focus will allow us to innovate even faster and ship even more benefits to help you stay ahead. To explore cloud migration options, contact our sales team.
Can I enable Customer-managed keys (CMK) on existing cloud sites? Copy link to heading Copied! Show
  

No, Customer-managed keys (CMK) can only be enabled on new Cloud Enterprise sites. We are actively developing tooling to enable CMK on existing cloud sites, with availability targeted for 2026. To stay updated, please subscribe to our cloud roadmap.
Which Atlassian Cloud apps and data are supported by Customer-managed keys (CMK)? Copy link to heading Copied! Show
  

Customer-managed keys (CMK) currently support the following Atlassian apps:

  • Jira
  • Confluence
  • Jira Service Management
     

Please refer to this page for the most up-to-date details on in-scope app data.
Which key stores are supported by Customer-managed keys (CMK)? Copy link to heading Copied! Show
  

Customer-managed keys (CMK) currently support AWS Key Management Service (KMS), and we are working to expand support for additional key stores. To stay updated, please subscribe to our cloud roadmap.

Your data, your keys

Get started with Customer-managed keys

Watch the demo