Data classification levels
All Confluence spaces must have a data classification that reflects the sensitivity of the content stored. Confluence space admins are responsible for ensuring classifications are accurate and kept up to date.
Summary of classification changes
| Effective date | Change | Applicable for |
|---|---|---|
| March 2025 | By default, classification set to Org Default - CONFIDENTIAL CLOUD-ELIGIBLE (CCE) – SENSITIVE-NORMAL | All spaces |
| February 2026 | NON-SENSITIVE introduced as additional sensitivity option for CCE, RESTRICTED and OFFICIAL (CLOSED). OFFICIAL (OPEN) supports NON-SENSITIVE only. |
All spaces |
| 01 April 2026 | By default, classification set or changed to Org Default - RESTRICTED – SENSITIVE-NORMAL. Existing items on Org Default automatically reclassified. |
All spaces |
Available classification levels
The following classification levels are supported for Confluence spaces under SHIP-HATS.
| Security classification | Sensitivity classification |
|---|---|
| CONFIDENTIAL CLOUD-ELIGIBLE (CCE) | - NON-SENSITIVE - SENSITIVE-NORMAL |
| RESTRICTED | - NON-SENSITIVE - SENSITIVE-NORMAL |
| OFFICIAL (CLOSED) | - NON-SENSITIVE - SENSITIVE-NORMAL |
| OFFICIAL (OPEN) | - NON-SENSITIVE |
Action recommended before 31 March 2026
Step 1: Identify your current classification
Go to your Confluence space.
In the sidebar, next to your space name, select More actions (•••).
Select Space settings.

Select Data classification.
View which classification is selected.

Step 2: How to interpret what you see
| Current classification | 01 April 2026 impact | Action required |
|---|---|---|
| Org Default – CONFIDENTIAL (Cloud-Eligible) – Sensitive Normal | Changes to Org Default – RESTRICTED – Sensitive Normal | Modify the classification before 31 March 2026 if you do not want the update |
| Any other classification | No automatic change | No action required |
Example – Impact of Org Default update
Before 01 April 2026
Classification inherited from organisational default, appears as:

Effective 01 April 2026
Spaces classified as Org Default – CONFIDENTIAL (Cloud-Eligible) – Sensitive Normal
reflect the updated organisational default:
Org Default – RESTRICTED – Sensitive Normal

Example – No automatic change
If the space classification is explicitly set (not inherited from organisational default), no automatic update applies on 01 April 2026.

Step 3: Modify the classification (if required)
If the current classification does not reflect the sensitivity of your content, refer to: