Hi @WAJDI ALZINATI ,
My first thought is that certification requirements vary by certificate. While some certifications require that your vendors (in this case, us - Atlassian) meet certain criteria such as being certified themselves, others don't. You need to examine this on a case-by-case basis for each certification you're trying to meet.
The second thought is that using a certain provider doesn't automatically mean that you've met compliance specifications. As an example, Jira Service Desk sends out emails. While Jira Service Desk itself might meet end-to-end encryption standards necessary for a particular certification, does your mail provider? If email notifications contain customer data and your mail provider doesn't use encryption at rest, you might not be meeting some certification guidelines.
That all being said, the information provided on the trust and compliance page can be used as a pointer when assessing an overall compliance standpoint. I would just recommend viewing it as something that supplements your own company's compliance program, rather than giving you automatic compliance.
Cheers,
Daniel
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.