Bitbucket Cloud Security

We take security seriously here at Bitbucket, building it into every layer of our infrastructure and processes. Rest easy knowing that your code and data are safe in the Cloud.

Security features

Data encryption in transit

All data is encrypted in transit over public networks using Transport Layer Security (TLS) 1.2+ with Perfect Forward Secrecy (PFS) to protect it from unauthorized disclosure or modification. 

SAML-based SSO

Atlassian Access lozenge

Simplify and strengthen login through SAML-based SSO. Bitbucket supports SAML-based SSO with all major portals through Atlassian Access.

Security key support

Bolster your 2FA with an extra layer of hardware security. Bitbucket supports security key devices that use the FIDO U2F standard. 

IP Whitelisting & Enforced 2FA

Premium lozenge

Fend off data breaches by enforcing security settings on individual accounts. Assign safe, pre-defined IP addresses and require two-factor authentication with Bitbucket Premium.

People putting a key in a lock

Our compliance certifications

SOC II logo


ISO/IEC 27001

ISO/IEC 27001

ISO/IEC 27018

ISO/IEC 27018



GDPR compliance

We are wholly invested in our customers' success and the protection of customer data. The way we deliver this promise is by complying and by helping you understand the EU General Data Protection Regulation (GDPR). 

Map with checkmarks

We host our own data for Bitbucket Cloud. Our main data center is located in Virginia and our disaster recovery center is hosted in California.

More information about the physical security of the data center can be found here.

Atlassian Bug Bounty

We've partnered with Bugcrowd to add an additional layer of security to our products by rewarding unique vulnerability research. If you've found a vulnerability, disclose the issue to our security team through our bug bounty program.

bugcrowd logo

Our partners

okta logo
Microsoft Azure logo
Bitium logo
Onelogin logo
Centrify logo

Got a question? We're here to chat