Project Copilot

How we protect your data

Project Copilot brings the power and magic of AI into writing user stories in Atlassian Jira and Design documents on confluence. Built with our Responsible Technology Principles in mind, Project Copilot handles your data responsibly.

How does Project Copilot work?

Project Copilot combines state-of-the-art models developed by OpenAI with the power and data inside the Atlassian platform. This means we provide a native artificial intelligence experience that is contextual to you, your teams, and your workflows, all in a way that respects the privacy of your data.

What was the approach to building Project Copilot?

All of the work we do is guided by our Responsible Technology Principles, which focus on transparency, trust, accountability, human-centricity, and teamwork. These principles help us to take accountability for considering and using technologies like AI responsibly and in line with our company values.

How do I start using Project Copilot?

An organization administrator needs to install Project Copilot and activate it for your site. The app is available at Project Copilot in Atlassian Marketplace.

How should I use Project Copilot?

Some of the models used as part of Project Copilot, including the models developed by OpenAI, generate responses based on your inputs and are probabilistic in nature. This means that their responses are generated by predicting the most probable next word or text, based on the data that they have been trained on.

Because of this approach, these models can sometimes behave in ways that are inaccurate, incomplete, or unreliable. For example, the responses that you receive could not accurately reflect the content they are based on or generate content that sounds reasonable but is incomplete and should not be relied on.

We encourage you to think about the situations when you use Project Copilot — for example, not in cases where you need current and accurate information about people, places, and facts — and review the quality of the responses you receive before sharing them with others.

Does Project Copilot send customer data to OpenAI’s platform to train its services?

The data you submit and the responses you receive via Project Copilot are not used to fine-tune or improve OpenAI’s models or service. Each data request is sent to OpenAI individually, over an SSL encrypted service, to process and send back to Project Copilot.

Does Project Copilot use my data to serve other customers?

The data you submit and the responses you receive are used only to serve your experience. They are not used to train models across customers or shared between customers.

Does OpenAI store Project Copilot customer data?

No, OpenAI does not store the data you submit or the responses you receive.

Does Project Copilot respect data residency?

Yes. If you have turned on data residency, all of your in-scope product data will remain stored in the region you’ve selected.

Does Project Copilot impact my compliance with GDPR?

We are committed to helping our customers stay compliant with GDPR and their local requirements. As we do today for all of our products, we will process and transmit data for Project Copilot in accordance with our Privacy Policy, Data Processing Addendum, and GDPR commitment.

Is Project Copilot SOC 2 and ISO compliant?

No, at this time Project Copilot has not undergone external assessment for SOC 2 or ISO certification.

Is Project Copilot HIPAA compliant?

No, at this time Project Copilot is not HIPAA compliant, and our Business Associate Agreement (BAA) does not cover this feature. If you are required to comply with HIPAA, we recommend that you do not opt-in to this feature until we have expanded our coverage to include it.

Can I limit the data or restrict the data that is shared with Project Copilot?

You can restrict which sites and their products have access to Project Copilot.

Does Project Copilot respect existing permissions?

Yes, Project Copilot honors existing permissions. Users will not be able to create or generate content based on resources they do not have access to.