A Singapore Government Agency Website

Plugin review process

To request for a plugin review, you must raise a service request. The information contained herein is subject to change and the plugins can be rejected at the discretion of SHIP-HATS team.

Evaluating Atlassian Cloud plugins

The following evaluation applies to Free, Trial and Paid plugins.

Trial plugins

The typical trial duration for an Atlassian Cloud Marketplace plugin is 7, 14, or 30 days, depending on the app’s configuration. When the trial expires, the user must transition to a paid subscription unless the app offers a free tier (subjected to SHIP-HATS acceptance. raise a service request if required).

Paid plugins

Paid plugin requests in the shared model will be reviewed by the product team on a regular basis, typically quarterly. Based on demand and internal evaluations, the decision will be made whether to procure the plugin(s).

When we evaluate an Atlassian plugin, it should either meet Group A criteria or Group B criteria or both. The following table outlines the key criteria considered while evaluating plugins for Atlassian Cloud.

Criteria Requirements Description
Group A: Cybersecurity Practices Atlassian Trusted Signal Must have the Cloud Fortified badge, ensuring adherence to advanced security standards.
Compliance Certifications - Must be certified for SOC2 Type 2.
- Additionally, must have CSASTAR or one of the following ISO certifications:
- ISO 27001
- ISO 27017
- ISO 27018
Group B: Reliability/Assurance/Reputation Data Residency - Data must reside within Atlassian Only (SG).
- If transient data (overseas) is supported, plugin must also have:
- ISO 27017
- ISO 27018
Install Base - Must have at least 1,000 installations as per Atlassian Marketplace data, ensuring proven usage and reliability.
Chat with me!
Bot Launcher