TL;DR
Certification: Elements Connect and Elements Copy & Sync for Jira Cloud are now Atlassian Enterprise Certified (AEC), Atlassian’s primary trust designation for Marketplace apps.
What AEC verifies: The AEC program checks that a Forge app meets enterprise requirements for security, compliance, reliability, privacy, accessibility, and responsible AI use.
Early adopters: Both apps are part of the first cohort of AEC-certified apps, a group of around 30 apps across the Atlassian Marketplace.
No action needed: Existing Elements Connect and Elements Copy & Sync customers don’t need to change anything to benefit from the certification.
Faster reviews: The AEC badge gives security and procurement teams an Atlassian-verified starting point for vendor assessments.
Elements Connect and Elements Copy & Sync, two Jira Cloud apps from Elements Apps, have earned the Atlassian Enterprise Certified (AEC) badge. AEC is the Atlassian Marketplace trust program for apps that meet enterprise requirements for security, compliance, reliability, privacy, accessibility, and responsible AI use. It replaces the Cloud Fortified program.
Both apps were certified as part of the program’s first cohort. Existing customers don’t need to do anything: the badge now appears on both Marketplace listings.
See it on the Elements Connect Marketplace listing and the Elements Copy & Sync Marketplace listing.
What is the Atlassian Enterprise Certified (AEC) program?
Atlassian Enterprise Certified is a Marketplace program for Forge cloud apps that pass a shared set of enterprise requirements. These go beyond the baseline security rules every Marketplace cloud app must follow. Atlassian validates each requirement before granting the badge, then scans certified apps daily to confirm they still comply.
| Pillar | What Atlassian checks |
|---|---|
| Security | Participation in Atlassian’s Bug Bounty program; no open high or critical Marketplace security tickets; fixes delivered within Atlassian’s timelines |
| Compliance & privacy | Independently verified SOC 2 Type 2 or ISO 27001; full-disk encryption at rest for any customer data stored outside Atlassian |
| Reliability & support | Incident response coordinated with Atlassian; 24-hour response to critical support issues, 5 days a week |
| Accessibility & AI | A public Voluntary Product Accessibility Template (VPAT); AI usage policies where the app uses AI |
Customers can find certified apps through the AEC badge on Marketplace listings and a dedicated AEC filter in Marketplace search.
Why does AEC certification matter for Jira admins and security teams?
Adding an app to Jira Cloud in a large organization usually means a security review: questionnaires, document requests, and back-and-forth with the vendor. AEC is designed to make that process repeatable. Reviewers start from requirements Atlassian has already verified, not from zero. For Elements Apps, this includes an independently audited SOC 2 Type 2 report.
- Jira admins: fewer blockers when proposing a new app to IT or security.
- Security teams: a verified baseline that reduces the number of questions to send the vendor.
- Procurement teams: a Marketplace filter that narrows the shortlist to certified apps.
- IT leaders: ongoing monitoring through daily scans, not a one-time audit.
What does AEC mean for Elements Connect and Elements Copy & Sync users?
Both apps handle data that teams rely on every day. Elements Connect brings data from outside Jira into work items, and Elements Copy & Sync moves work items between projects and instances. In both cases, how the vendor secures, monitors, and supports the app matters as much as the features. Read more about connecting Jira to external data sources securely.
| App | What it does | Why AEC matters here |
|---|---|---|
| Elements Connect | Brings data from SQL databases and REST APIs into Jira work item fields | It connects Jira to internal systems such as CMDBs, CRMs, or ERPs, so data handling must meet enterprise standards |
| Elements Copy & Sync | Clones and syncs work items across projects or Jira instances | It often runs across teams, departments, or partner instances, where security and incident response practices are closely reviewed |
In practice, a service desk team can use Elements Connect to make a Jira CRM integration to let agents select a customer’s asset from the company CRM directly in a Jira issue.
A product team can use Elements Copy & Sync to escalate a Jira support ticket into a a developement project and keep status and comments in sync.
Bring trusted external data into Jira work items with Elements Connect, or watch the Elements Copy & Sync cross-instance Jira issue sync walkthrough.
How is AEC different from Cloud Fortified?
AEC replaces Cloud Fortified as Atlassian’s main trust designation for Marketplace apps. Cloud Fortified stopped accepting new submissions once AEC onboarding began. The new program adds requirements on compliance, accessibility, and responsible AI, and is open to Forge apps only.
| Category | Cloud Fortified | Atlassian Enterprise Certified |
|---|---|---|
| Status | Being phased out | Atlassian’s primary trust designation |
| Platform | Cloud apps, including Connect apps | Forge cloud apps only |
| Scope | Security, reliability, support | Adds compliance certification, privacy, accessibility, responsible AI |
| Ongoing checks | Program-level monitoring | Daily automated scans after certification |
AEC is also separate from the Runs on Atlassian badge, which marks apps hosted entirely on Atlassian’s infrastructure. An app can hold one, the other, or both.
Do existing customers need to do anything?
No. The certification applies to the Jira Cloud versions of both apps that customers already use.
- No update, reinstall, or configuration change is needed.
- Pricing and licensing stay the same.
- The certification covers Cloud only; Data Center versions are outside the program’s scope.
- Security teams can look at every compliance documentation, including the SOC 2 Type 2 report, on our Trust Center.
Frequently asked questions
Couldn’t find what you need?
Atlassian Enterprise Certified (AEC) is an Atlassian Marketplace program that recognizes Forge cloud apps meeting enterprise requirements for security, compliance, reliability, privacy, accessibility, and responsible AI use. Atlassian validates each requirement before granting the badge and scans certified apps daily. AEC replaces Cloud Fortified as Atlassian’s primary trust designation.
Elements Connect and Elements Copy & Sync for Jira Cloud are Atlassian Enterprise Certified. Both apps were certified on the same date as part of the program’s first cohort. The certification covers the Cloud versions only, since AEC is open exclusively to apps built on Atlassian’s Forge platform.
No. Runs on Atlassian marks apps hosted entirely on Atlassian’s cloud infrastructure, while AEC verifies enterprise requirements such as compliance certification, incident response, accessibility, and support response times. An app can hold one badge, the other, or both. Elements Connect and Elements Copy & Sync hold the AEC badge.
Yes. Atlassian Enterprise Certified is replacing the Cloud Fortified Apps program as Atlassian’s primary trust designation for Marketplace apps. Atlassian stopped accepting new Cloud Fortified submissions once AEC onboarding began in the third quarter of 2026. Customers evaluating apps for enterprise use should now look for the AEC badge.
Certified apps display the Atlassian Enterprise Certified badge on their Marketplace listing and on app tiles in search results. You can also apply the dedicated AEC filter in Marketplace search, or browse Atlassian’s Enterprise Certified collection, to see only apps that meet the program’s requirements.
Conclusion
- Elements Connect and Elements Copy & Sync for Jira Cloud are Atlassian Enterprise Certified.
- AEC verifies security, compliance, reliability, privacy, accessibility, and responsible AI requirements, with daily monitoring after certification.
- Existing customers have nothing to change.
- Security and procurement teams can use the badge as a verified starting point for their review.
Next step: if you’re evaluating either app for an enterprise rollout, share the AEC badge and the security documentation with your security team at the start of the review, not the end.