{{key-takeaways}}
ActivityTimeline is now Atlassian Enterprise Certified
Your team finds a Jira app that finally solves its capacity planning problem. Everyone likes the trial, and then the purchase request reaches security. A questionnaire follows, with questions about data handling, access controls, incident response, and compliance. While the answers go back and forth, the team goes back to its spreadsheets.
Today we're announcing something that should make that process shorter. On October 27, 2026, ActivityTimeline for Jira Cloud received the Atlassian Enterprise Certified badge, Atlassian's enterprise-level trust badge for Marketplace apps. As of October 29, 2026, only 40 apps from 18 vendors on the Atlassian Marketplace hold it.
For us, it's the next step in work that started in July 2021, when ActivityTimeline joined Atlassian's Cloud Fortified program among its first 25 apps. It was the first Atlassian program focused on Cloud Security. For your security team, it means a big part of the vendor review has already been checked by Atlassian, instead of taken on our word.
What is the Atlassian Enterprise Certified program?
Atlassian Enterprise Certified is an Atlassian program that verifies Marketplace cloud apps against common enterprise requirements for security, reliability, privacy, accessibility, and responsible AI use. It goes beyond the baseline security requirements every Marketplace app must meet, and it's open only to apps built on Forge, Atlassian's cloud app platform.
Atlassian checks apps with a mix of automated vulnerability scans, independent compliance audits, and manual reviews. Certified apps show the badge under Trust Signals on their Marketplace listing, and you can filter Marketplace search to see only certified apps (Atlassian Support).
The checks don't stop once the badge is granted. Atlassian keeps scanning code, tracks how quickly vulnerabilities get fixed, and runs random support and security incident tests.
What does an app need to earn the badge?
Atlassian's developer requirements list 26 checks. Here they are, grouped by topic.
How is Enterprise Certified different from Cloud Fortified?
Enterprise Certified asks for more outside proof than Cloud Fortified did. Both programs cover security, reliability, and support. Enterprise Certified adds an independent compliance audit, an annual penetration test, Forge as the platform, and accessibility and AI documentation.
Atlassian has stopped accepting new Cloud Fortified submissions and plans to phase the program out by the end of 2026. If your past vendor reviews relied on Cloud Fortified, Enterprise Certified is the badge to look for from now on.
What security certifications does ActivityTimeline have?
Reliex, the company behind ActivityTimeline, has a SOC 2 Type II report and is ISO/IEC 27001:2022 certified by an accredited certification body. Both appear on the ActivityTimeline Marketplace listing and on the Reliex Trust Center. Here's how we got here:
- July 2021: ActivityTimeline joins Cloud Fortified among its first 25 apps
- 2024: Reliex gets ISO/IEC 27001:2022 certification, with the public Trust Center already live
- March 2025: Reliex completes its SOC 2 Type II audit, covering security, availability, and confidentiality
- 2026: ActivityTimeline Cloud moves to Forge
- October 2026: ActivityTimeline earns Atlassian Enterprise Certified badge.
Oleh Vasyliv, CEO of Reliex, on what the badge means for the team:
"We started this work years before the badge existed. The SOC 2 audit, the ISO certification, moving ActivityTimeline to Forge, writing down exactly how we handle an incident: each of those was its own project. Enterprise Certified is the first time Atlassian checks all of it together, and our customers' success teams can see the result on our Marketplace listing."
What's on the Reliex Trust Center?
The Reliex Trust Center is where your security team can review our controls and request documents for a vendor assessment, without waiting for us to answer each question. It covers six groups of controls: product, data, network, application, endpoint, and corporate security. They range from production database access restrictions and malware protection to change approval and employee offboarding.
All documents are available:
- SOC 2 Type II report
- ISO/IEC 27001:2022 certificate
- Encryption at Rest
- Architecture and Data Flow Diagram
- Subprocessors
- Logging and Retention
- Data Retention and Deletion Policy
- Incident Response Plan
- AI Usage Policy
- VPAT
- Service Status Page
To get a document, open Resources on the Trust Center and click Request access next to it.
What does the badge mean for your security review?
The badge gives your security team a verified baseline. It won't answer every question your company has, but the common ones are already checked. Here's how we'd suggest using it:
- Open the ActivityTimeline Marketplace listing, check the badge under Trust Signals, and read the Privacy & Security tab.
- Request the documents you need on the Reliex Trust Center.
- Compare them with your own requirements, such as industry rules, data residency, or contract terms.
- Send any remaining questions to security@reliex.com.
See how ActivityTimeline fits your team
If you're choosing a capacity planning and time tracking app for Jira, try ActivityTimeline free for 30 days in a Jira sandbox while your security team reads the Trust Center. You'll see the planning side, and they'll see the paperwork.
![Jira Teams with ActivityTimeline: Comprehensive Guide [2026]](https://cdn.prod.website-files.com/60c76f07dc83db305171350c/6a15952034cfc5cca020eedd_thumbnail_Jira%20Teams%20with%20ActivityTimeline.png)
