AgileTest, the test management app for Jira, has earned the Atlassian Enterprise Certified (AEC) badge. As of October 23, 2026, AgileTest is one of the first test management apps on the Atlassian Marketplace to earn this badge. AEC is Atlassian’s verification program for eligible Marketplace cloud apps that meet additional requirements for security, compliance, reliability, privacy, accessibility, and responsible AI use. AgileTest is developed by DevSamurai, whose TeamBoard ProScheduler was the first app to earn the badge.
What is Atlassian Enterprise Certified?
Atlassian Enterprise Certified is a verification program for eligible Forge-based Marketplace cloud apps. Atlassian introduced it in early October 2026, and it replaces Cloud Fortified as Atlassian’s main trust designation for Marketplace apps. Certified apps show a badge on their Marketplace listing. In addition, customers can filter the Marketplace by the badge to find certified apps.
Although Cloud Fortified is no longer accepting new submissions, existing Cloud Fortified badges remain visible through December 31, 2026.
Learn more about Atlassian Enterprise Certified Program.
What the badge covers
In each area below, the last column links to AgileTest’s supporting documentation, so you can verify each requirement yourself.
| Area | What AEC requires | Where to verify for AgileTest |
|---|---|---|
| Advanced security and vulnerability management | Annual third-party penetration tests (CREST-accredited), participation in Atlassian’s Bug Bounty program, automated vulnerability scanning, strict least-privilege data access, full-disk encryption at rest for any data stored outside Atlassian infrastructure | [Trust Center] |
| Enterprise privacy and compliance | Independently verified SOC 2 Type 2 or ISO 27001 certification, full data residency support (data pinning and migration), documented data retention and deletion lifecycles, a public Trust Center and Privacy Policy | [Trust Center] |
| Operational reliability and dedicated support | A public status page, coordinated incident response with Atlassian engineering, a 24-hour response SLA (5 days per week) for critical support issues | [Status Page] |
| Accessibility and responsible AI governance | A publicly available Voluntary Product Accessibility Template (VPAT), and AI usage policies (where applicable) covering data handling, model training, and privacy controls | [VPAT for AgileTest] & [AI Policy] |
The 24-hour requirement is a response time, not a resolution guarantee.
Why it matters for test management?
A test management app holds test cases, execution results, requirement links, and evidence attached to releases. Because of this, security and procurement teams reviewing an app like this need clear answers about data handling, vendor practices, and support. AEC gives them a consistent, Atlassian-verified starting point. As a result, teams send fewer separate questions to the vendor. To see how AgileTest handles test data in Jira, visit the [Trust Center].
Certification does not replace your organization’s own security assessment. Instead, it provides verified information that makes that assessment more efficient.
For the wider DevSamurai certification effort, read the ProScheduler announcement.
Frequently asked questions
1) What does Atlassian Enterprise Certified mean for AgileTest?
It means Atlassian has verified that AgileTest meets the program’s requirements for security, privacy and compliance, reliability and support, accessibility, and responsible AI use.
2) Is Atlassian Enterprise Certified the same as Cloud Fortified?
No. AEC replaces Cloud Fortified. Cloud Fortified no longer accepts new submissions, and existing badges stay visible through December 31, 2026.
3) Does the badge replace our own security review?
No. It provides verified vendor information that can shorten your review, but your organization still decides whether the app fits its requirements.
4) Where can I find AgileTest’s security and compliance documentation?
Visit the DevSamurai Trust Center for security, privacy, and compliance documents, [VPAT] for accessibility information, and the status page for service status.
