Breadcrumbs

Dedicated Cloud and BYOK ("Bring your own key")

Feature preview

We’re happy to announce a “Bring your own key” offering, where customers will benefit from their own deployment.

Here is a summary of integration options with Atlassian:

  • Commercial Cloud: This is the normal offer which customers can subscribe on the Atlassian Marketplace. It is multi-tenant: All customers use the same service and are isolated by organization. It is available in several Data Residency zones: EU and US, and more to come.

  • Dedicated Cloud. We deploy an isolated environment per customer, which enables compliance at many levels, but has a fixed cost. It enables BYOK encryption (via AWS KMS) and customers can choose their AWS region.

  • Atlassian Isolated Cloud: The offers are progressing quickly on this topic, we are currently evaluating to support this feature with our Dedicated Cloud.

  • Atlassian Government Cloud: Same as Isolated Cloud.

Feature

Standard

Dedicated Cloud info Feature preview

Isolated
Cloud

Government
Cloud

What it means

The data is stored with the other customers and goes through the same transit points.

Helps customer comply with SOC2, ISO27001, etc.

Your data never transits through the same servers as other customers after leaving the Atlassian platform.

You can revoke access at any time by stopping the sharing of the AWS KMS key.

Controlled egress from the Atlassian platform.

FedRAMP

Where the data is stored

AWS (Requirement Yogi)

AWS (Requirement Yogi, separate deployment)

In evaluation.

In our understanding, Atlassian Isolated Cloud will allow apps with a Dedicated Cloud offering.

In evaluation.

Same as IC, btu we’re reviewing additional regulatory requirements.

Domain names

app.eu.requirementyogi.com

app.us.requirementyogi.com

app.dedicated-{hash}.requirementyogi.com

Encryption in transit

check mark Standard protocols: HTTPS, etc.

check mark Standard protocols: HTTPS, etc.

Encryption at rest

check mark AWS KMS

check mark AWS KMS using the customer’s BYOK

Encrypted data

All

All (Database, backups, logs and files).

Disable AI

check mark Yes

check mark Yes

Choose your AWS region

info Data Residency zones:

  • EU (Default)

  • US

  • We can open new Data Residency zones

See Security Overview

check mark Yes, any AWS region

Backups

check mark Encrypted

check mark Encrypted with the customer's KMS. No customer access.

BYOK

cross mark No

check mark Customer’s AWS KMS

Customer can access the database and logs

cross mark No

cross mark No

VPN and private networking

cross mark No

cross mark No (under consideration)

SIEM

cross mark No

cross mark No (under consideration)

Customer can control the deployments

cross mark No

cross mark No

Payment

Paid-via-Atlassian (PvA) for the apps

Paid-via-Atlassian (PvA) for the apps,

Separate invoicing for the fixed Dedicated Cloud service.

Fixed cost

—

1740€ per month per dedicated subdomain.

A subdomain can have several instances of Confluence connected to it.




Dedicated Cloud

Feature preview

This offering relies on a feature launched by Atlassian which is “production-safe, and you can plan your implementation around it today”, but isn’t officially GA (as of August 2026).

In this model, Requirement Yogi is deployed as a separate stack for each customer.

  • The customer provides their own key by sharing an AWS KMS key. This process is called “Bring Your Own Key”.

  • They can revoke the sharing at any time, interrupting all data access for the stack.

  • All stored data is then encrypted using this AWS KMS key: database, S3, logs.

  • The customer can choose the AWS Region where it is deployed. It is deployed alongside other stacks.

  • Customers must request the installation of a new dedicated stack. Once done, customers can enter the dedicated subdomain in their UI, and all requests are directed to this backend.

  • The customer is billed through the Atlassian Marketplace (PvA) for as many apps as they install,

  • Requirement Yogi alone maintains the stack (deployments, monitoring and logs) as for the Commercial Cloud.

  • The additional cost is 1740€ per month, billed separately as managed hosting fees. The company must still pay for the separate app on the Atlassian Marketplace at its listing price, and follow the pricing evolutions.

Compatibility with Isolated Cloud

  • Our Dedicated Cloud offer is not compatible with Atlassian’s Isolated Cloud, since the Atlassian IC doesn’t allow egress towards any external platform.

What happens if the customer loses the AWS KMS key

  • If the customer removes the sharing of their AWS KMS key by mistake, or destroys the record by mistake, Requirement Yogi is unable to read the data.

  • Requirement Yogi is also unable to read the logs and the backups, which are also encrypted with the AWS KMS key.

The AWS KMS is a real encryption system, it’s a single point of failure and needs to be considered seriously like any powerful tool.