Customers often ask how to find Marketplace apps that run on Forge, Atlassian’s next-gen developer platform. It’s no surprise customers are seeking out apps that fit this profile. When apps store data in the Atlassian Cloud, it can be much easier to get security approval because data stays in the same environment their company already trusts.
The Runs on Atlassian badge, now available on the Marketplace, addresses that exact need. Runs on Atlassian apps run on the Atlassian platform via Forge, just like the name says. But these apps aren’t just Forge apps—they also must meet additional criteria.
Runs on Atlassian apps don’t transmit data outside the platform unless allowed by the customer, and they offer data residency. That means customers with strict requirements can easily filter for apps that keep data on-platform, speeding up approvals and helping teams get access to the Marketplace solutions they need.
What does it mean for an app to “Run on Atlassian”?
All Runs on Atlassian apps are built on Forge, but not all Forge apps qualify for Runs on Atlassian. In order to get the badge, an app must:
- Only use Atlassian-hosted compute and storage
- Provide data residency in the same regions as Atlassian apps
- Allow customers to control data egress and block it at any time, if desired
These requirements are automatically checked by Atlassian, and if checks pass, the badge appears. Apps are continually monitored via automation to verify that all qualifications are met.
Can integrations be Runs on Atlassian?
Because of the way Runs on Atlassian apps restrict access to external services, not every app and use case can qualify. Apps must be able to function entirely within Atlassian’s environment. Certain categories of apps have to communicate with external services, like integrations that exchange data between software products. These apps aren’t a fit for Runs on Atlassian because they have to operate outside the Atlassian platform.
Many customers need integrations, and Runs on Atlassian isn’t the only trust signal customers will want to consider. Cloud Fortified is a broader program that recognizes partners who go above and beyond in many areas: operational practices, support, reliability AND security. Compliance certifications are another great way to evaluate apps that aren’t (or can’t be) Runs on Atlassian.
What’s the difference between Runs on Atlassian and Cloud Fortified?
Both Runs on Atlassian and Cloud Fortified are trust badges, but they reflect different aspects of an app’s security posture.
- Runs on Atlassian indicates that apps are Atlassian-hosted and won’t egress data without the customer’s consent, a technical fact that Atlassian can programmatically verify.
- Cloud Fortified is a broader set of signals that includes organizational behaviors and practices, like support, reliability, and bug bounty participation.
Because they reflect different requirements, an app might have one of the badges, or both. Cloud Fortified is an important signal that a partner has invested in advanced trust practices across their business.
The Runs on Atlassian advantage
Many Marketplace apps already meet advanced standards for security and data management, whether hosted by Atlassian or a partner. However, there can be quite a bit of variation among partner-hosted apps: different configurations, different infrastructure, and servers located in different regions around the world. It can be time-consuming to research and evaluate each environment before installing the apps you need.
Runs on Atlassian can substantially reduce the time it takes to evaluate apps because every app runs in the same standardized environment, in the Atlassian Cloud. Each app runs on infrastructure subject to Atlassian’s robust security controls, reducing complexity and risk. That means less time spent on security questionnaires and more time spent on meaningful work for admins.
“At Appsvio, security is a top priority, and having our apps in the Runs on Atlassian program is a key part of our strategy. This investment ensures a secure, reliable, and high-performing ecosystem that protects customer data—something increasingly vital for companies of all sizes.”
Piotr Patrzek, Chief Technology Officer at Appsvio
For enterprise customers, especially those in regulated industries or regions, data security and residency are top priorities. As we work to better support those customers, the Runs on Atlassian badge provides:
- Peace of mind: Apps with this badge minimize risk by letting customers keep data within Atlassian’s secure environment.
- Confidence in security: Atlassian verifies that badge requirements are met, ensuring accuracy.
- Streamlined decision-making: Customers can easily identify apps that meet their security and compliance needs.
Try Runs on Atlassian for yourself
Consider a real-life example: A project manager at a bank is tasked with finding a time-tracking app. Security is a top concern, and it’s critical that sensitive data won’t leave Atlassian’s environment. In the Marketplace, the Runs on Atlassian badge instantly indicates apps that can meet the bank’s strict data residency and security requirements, without giving the security team a headache or reason to delay the install. A process that once involved lengthy, back-and-forth security reviews is now streamlined and stress-free.
Julian Wolf, Technical Coordinator at Seibert Media, has seen this scenario play out with security conscious customers:
“Our customers visualize business-critical data with draw.io. Especially for our customers in regulated industries, the key question in their app assessment has always been, What security practices are in place to protect that critical information? For us, it was clear we had to invest in compliance with the necessary platform changes, such as the migration to Forge and qualifying for Runs on Atlassian,” Wolf said. “Now, customers can verify draw.io’s commitment to strict egress rules through an easily understandable badge. The new program allows us to give customers the greatest possible control over the path their data takes.”
The Runs on Atlassian badge is now available on the Atlassian Marketplace. Check out the collection and join our upcoming virtual ACE event to learn more.