# Confluence privacy rating

Atlassian's team wiki for writing, organizing and sharing pages and documentation. Available as a hosted cloud service and as a self-managed Data Center edition.

## Summary

Confluence scores 41 out of 100 (grade D) on the wikis and knowledge bases criteria. It meets 3 of 8 criteria: transparency report, tells users about requests and TLS configuration. It partly meets no ads or data sales and security headers. It does not meet open source, no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://www.atlassian.com/software/confluence
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Web, Android, iOS
- Home page trackers: none found
- Category: [Wikis and knowledge bases](https://privacyratings.com/wikis/)
- Also rated: [Atlassian Statuspage](https://privacyratings.com/status-pages/atlassian-statuspage/) (Status pages and uptime monitoring), [Jira](https://privacyratings.com/task-management/jira/) (Task management)
- Grade: D (41/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | Atlassian and its advertising and analytics partners use cookies and other tracking technologies on its sites and services. | https://www.atlassian.com/legal/privacy-policy |
| No ads or data sales | Partial | Funded by subscriptions with no ads in the product, but the policy allows targeted advertising and sharing identifiers with third-party advertising providers. | https://www.atlassian.com/legal/privacy-policy |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | Yes | Publishes yearly counts of government requests for user data and how Atlassian responded. | https://www.atlassian.com/trust/privacy/transparency-report |
| Tells users about requests | Yes | Atlassian notifies customers of requests for their data unless prohibited by law. | https://www.atlassian.com/trust/privacy/guidelines-for-law-enforcement |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=id.atlassian.com&hideResults=on |
| Security headers | Partial | Grade B (70/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=id.atlassian.com |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/wikis/confluence/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/wikis/confluence.md