Plugin review process
To request for a plugin review, you must raise a service request. The information contained herein is subject to change and the plugins can be rejected at the discretion of SHIP-HATS team.
Evaluating Atlassian Cloud plugins
The following evaluation applies to Free, Trial and Paid plugins.
Trial plugins
The typical trial duration for an Atlassian Cloud Marketplace plugin is 7, 14, or 30 days, depending on the app’s configuration. When the trial expires, the user must transition to a paid subscription unless the app offers a free tier (subjected to SHIP-HATS acceptance. raise a service request if required).
Paid plugins
Paid plugin requests in the shared model will be reviewed by the product team on a regular basis, typically quarterly. Based on demand and internal evaluations, the decision will be made whether to procure the plugin(s).
When we evaluate an Atlassian plugin, it should either meet Group A criteria or Group B criteria or both. The following table outlines the key criteria considered while evaluating plugins for Atlassian Cloud.
| Criteria | Requirements | Description |
|---|---|---|
| Group A: Cybersecurity Practices | Atlassian Trusted Signal | Must have the Cloud Fortified badge, ensuring adherence to advanced security standards. |
| Compliance Certifications | - Must be certified for SOC2 Type 2. - Additionally, must have CSASTAR or one of the following ISO certifications: - ISO 27001 - ISO 27017 - ISO 27018 |
|
| Group B: Reliability/Assurance/Reputation | Data Residency | - Data must reside within Atlassian Only (SG). - If transient data (overseas) is supported, plugin must also have: - ISO 27017 - ISO 27018 |
| Install Base | - Must have at least 1,000 installations as per Atlassian Marketplace data, ensuring proven usage and reliability. |