Confluence

Here is the system review for Confluence carried out by the security experts at Harpe

Security Control	Status	Evidence
Access reviews	Yes	https://www.atlassian.com/software/confluence/security
Encryption of data in transit	Yes	https://www.atlassian.com/software/confluence/security
Encryption of data at rest	Yes	https://www.atlassian.com/software/confluence/security
Reviewing of logs	Yes	https://www.atlassian.com/software/confluence/security
Vulnerability management	Yes	https://www.atlassian.com/software/confluence/security
Backup and restore	Yes	https://www.atlassian.com/software/confluence/security
Multi Factor Authentication	Yes	https://www.atlassian.com/software/confluence/security
Data cleanse and quality	N/A	They don't specifically say that they do this but users can do it on their tool.

• ISO/IEC 27001:2013

• SOC 2 Type II

• PCI DSS 3.2

• HIPAA

• CSA STAR Level 2

• FedRAMP Moderate