I am interested to hear what atlassian have to say about it, they have been quite pro-australian. But.. what effort do you think the AU police are going to put in to get the data out of your JIRA tickets?

Because if you want to punish Australia for it's poor laws that seems a weak lever to pull.

And if your concern is MITM between servers, virtual machines or clients- well USA has had sufficient inference, probably by government actors, that some big players instituted SSL inside the data centers- I presume after finding taps.

This is legislation to say they can do that sort of thing- it just seems to happen elsewhere but under some seal of secrecy. At least they acknowledge it.

Was more thinking about Confluence than Jira

Where there is troves of data and schematics about various companies infrastructures

Atlassian helped with the COVIDSafe app, and one of their founders came here and telling us to trust the government, they know what they're doing, they won't spy on us.

... and then the spy agencies requested access to said app data.

Atlassian products are varied across different jurisdictions. Chances are that if you’re using an Atlassian product in the USA, all your data is hosted in the USA too.

Source: I work for Atlassian, platform stuff

At the end of the day though, Atlassian won't even sign NDAs with it's clients.

Make of that what you will.

I'm an EU customer but my Atlassian Cloud contract is still between me and Atlassian Pty Ltd in Australia.

So wherever the data is, the problem is still the same in my opinion.

Their BitBucket Server to Cloud migration tools are atrocious. Gitlab actually provides a smoother migration process, as it migrates any Pull Requests as well as everything else that the Atlassian tools did.