{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-13T23:52:59.204Z",
  "record_id": "VXI-EXT-PROCUREMENT-ATLASSIAN-RESIDENCY-01-v1",
  "record_kind": "external_reference",
  "title": "Atlassian residency evidence: App scope and excluded data",
  "system": "Atlassian Cloud",
  "evidence_family": "vendor_evidence_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Does pinning an Atlassian app to a region keep every account, integration and AI data flow there?",
  "near_questions": [
    "Does Atlassian residency apply at project or app level?",
    "Are all Atlassian user account records region-pinned?",
    "Does a Jira region setting cover Marketplace apps?",
    "Can Atlassian audit logs be outside residency scope?",
    "What does an Atlassian Not Set location mean?",
    "Do Atlassian AI data categories have their own residency scope?",
    "Does an app pinned in Europe prove every data flow stays there?",
    "What evidence should support an Atlassian regional-hosting claim?",
    "Should Commercial and Isolated Cloud residency be reviewed separately?",
    "Can an agent infer legal compliance from a pinned Atlassian region?",
    "What buyer data categories are missing from a residency review?",
    "When should an Atlassian residency assessment be refreshed?"
  ],
  "supported_claims": [
    {
      "claim": "Atlassian Cloud residency applies to defined in-scope app data. The documentation lists exclusions and treats Marketplace app data separately. A pinned product location therefore does not establish that every account record, log, integration or AI-related flow stays in that region. Identify the app and data category before relying on the claim.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "Atlassian Cloud residency applies to defined in-scope app data. The documentation lists exclusions and treats Marketplace app data separately. A pinned product location therefore does not establish that every account record, log, integration or AI-related flow stays in that region. Identify the app and data category before relying on the claim.",
  "related_record_ids": [
    "VXI-EXT-PROCUREMENT-NOTION-AI-01-v1",
    "VXI-EXT-PROCUREMENT-FIGMA-TRAINING-01-v1",
    "VXI-EXT-PROCUREMENT-SUPABASE-BACKUP-01-v1",
    "VXI-EXT-PROCUREMENT-LINEAR-SCIM-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Atlassian Cloud residency inclusions and exclusions",
    "source_url": "https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency/",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-PROCUREMENT-ATLASSIAN-RESIDENCY-01-v1",
    "candidate_record_sha256": "e16f16c55092a79ae004af5a1593585c924f2c5b8c3a307a3ef3f7a7d11628c8",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "Atlassian Cloud residency applies to defined in-scope app data. The documentation lists exclusions and treats Marketplace app data separately. A pinned product location therefore does not establish that every account record, log, integration or AI-related flow stays in that region. Identify the app and data category before relying on the claim.",
    "required_buyer_context": "Cloud deployment type, product and plan, pinned location, data categories and third-party integrations.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "decision_profile": {
    "schema": "varexis-vendor-evidence-review/1",
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "claim_to_check": "All data associated with our Atlassian organization stays in its selected region.",
    "documented_statement": {
      "status": "documented",
      "statement": "Atlassian Cloud residency applies to defined in-scope app data. The documentation lists exclusions and treats Marketplace app data separately. A pinned product location therefore does not establish that every account record, log, integration or AI-related flow stays in that region. Identify the app and data category before relying on the claim.",
      "source_ids": [
        "atlassian-residency"
      ]
    },
    "buyer_evidence_required": [
      "The current app-level residency status",
      "A mapping from the buyer data categories to published inclusions and exclusions",
      "Separate evidence for each Marketplace app or external recipient"
    ],
    "review_condition": {
      "status": "varexis_review_policy",
      "statement": "Require additional evidence for excluded categories and integrations; do not turn a residency setting into a compliance conclusion."
    },
    "unknowns": "The buyer configuration, contract, effective entitlement and operational evidence have not been inspected. Missing evidence does not establish absence or failure of the feature.",
    "evidence_sources": [
      {
        "source_id": "atlassian-residency",
        "url": "https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency/",
        "final_url": "https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency/",
        "title": "Atlassian Cloud residency inclusions and exclusions",
        "checked_on": "2026-10-14",
        "sha256": "35abe5cb989c28d4037508620934c56a40c1e7caf78c1dc302d729ba57c37967",
        "bytes": 672831
      }
    ],
    "observed_deployment": false,
    "commercial_reliance_boundary": "Procurement evidence support only; no supplier clearance, legal conclusion, configuration audit or verification of the buyer's claim is supplied.",
    "paid_value": {
      "decision_context": "Preserve the category-by-category scope behind a regional-hosting claim.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "A saved purchase does not recheck the source or buyer configuration.",
      "specific_watch": "Recheck app type, data-category tables, region setting and integration inventory."
    }
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#atlassian-residency-data-scope-check",
  "machine_readable_record": "/varexis-index/records/atlassian-residency-data-scope-check.json"
}