Cloud Fortified Apps Program approval process

Submitting your app

Read all pages in the Cloud Fortified Apps Program documentation, including this page.
Check you're eligible for the program.
Start working on the requirements.
When you're ready to submit an app for approval, create a ticket at Developer and Marketplace support.

Tracking your submission

After you've created a ticket, our team triages and reviews your submission for any missing or incomplete elements.
We'll update you on your progress, and might ask you to clarify your responses, or update your submission in line with some requirements.
For some requirements, such as security and support, we might need to verify the status of your app. For other requirements, such as reliability, we might need to configure your app, give accounts access to new views, and arrange test-runs of some of the processes.

Throughout this process, we use the workflow below to reflect where responsibility for the next step lies, and track the individual components of app approval.

Cloud Fortified app submission tracking process

We endeavor to review and take your app through the approval steps in a reasonable time. While we designed the process to avoid idle time, we're keen to learn and improve. Please note that some requirements, however, such as the security program requirements, inherently have some "soak" time before becoming active and approval can be granted.

After approval

Once approved, your app is automatically updated in the Atlassian Marketplace to indicate the Cloud Fortified App badge. Your app will also be included in a periodically updated list of Cloud Fortified Apps in go-to-market materials for our field teams and channel partners.
From time to time we might get in touch to gather feedback, share updates about any upcoming changes that we're exploring or plan to make for the program.
Your app has an annual review process where we verify that your app is in good order, and any new requirements are met. There is also an escalation process where Atlassian or customers can raise concerns about an app's compliance with the program requirements.

Updates to approval process

Annual review process: We plan to review each Cloud Fortified app's approval status on an annual basis. The details of this will be worked out after the launch of the program.
Escalation/violation process: We plan to formalize an escalation process for when a Cloud Fortified app fails to meet requirements after approval.

Updates to program and requirements

We continue to develop and release improved developer tooling and guidelines on monitoring and improving the reliability and security of Atlassian Cloud products. As we do so, we also update the Cloud Fortified app requirements, documentation, and guidelines. We communicate these alterations ahead of time and release clear guides on how they should be adopted.