Updates to Marketplace Trust
- Announced
- APIs
- marketplace-platform
- Severity
- info, set by
reef/atlassian-rule-v1 - Source
- https://developer.atlassian.com/changelog/#CHANGE-3303
We wanted to share a few updates on the trust front:
- Atlassian Enterprise Certified — our new trust program
We've heard your feedback, and we're excited to announce that our new trust program is officially named Atlassian Enterprise Certified. This badge will recognize apps that meet rigorous enterprise standards for security, reliability, privacy, accessibility, and responsible AI — going beyond the baseline cloud standards required of all Marketplace apps. We plan to begin rolling out the program in Q3 CY2026 and phase out the Cloud Fortified Apps program by the end of the year.
- New trust filters and verified indicators on the Marketplace
We're introducing enhancements that make it easier for customers to evaluate apps against their security, privacy, compliance, and procurement requirements.
New filters for faster shortlisting
Today, customers can filter Marketplace apps by Runs on Atlassian and Cloud Fortified. We're adding filters for:
- SOC 2
- ISO 27001
- Penetration testing
- Bug bounty
- Partner trust center
- Standard Legal Agreement
Verified indicators on the Privacy & Security tab
We're also adding a blue verified-tick icon to selected Privacy & Security tab fields, helping customers distinguish Atlassian-verified information from partner-attested responses at a glance.
At launch, verified indicators will appear on:
- App REST APIs
- Integration permissions with Atlassian apps
- Marketplace Security Bug Bounty Program participation
- Atlassian trust programs
We plan to expand verified indicators to more fields over time.
What you need to do
The new filters and verified indicators draw from information Atlassian already holds or that partners have already provided through existing Marketplace processes and Privacy & Security tab responses.
That said, to ensure your apps show well in trust-based evaluations, we recommend reviewing your Privacy & Security tab to confirm that your security, privacy, and compliance details are complete and up to date.
The text above is Atlassian's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.