
Secure File Exchange
Request and send files from any Jira work item. No accounts for your customers.
Customers, contractors and partners rarely have a Jira account, and their files are often too big for email. Secure File Exchange gives the work item one secure link: the outside person uploads files or downloads yours in any browser, even on a phone. Files stay in your organization's Atlassian cloud.
When a file has to cross the company line
Teams in Jira trade files with outside people every day: logs, photos, contracts, builds, reports. The usual workarounds all leave something out.
Outsiders rarely have a Jira account
A licence for a contractor costs money and opens far more than one file needs, and a service desk portal exists only for your service desk’s customers.
Email is too small and leaves no trail
Gmail stops at 25 MB and Outlook.com at 20 MB. Files sent by email live in mailboxes, outside the work item, where nobody can tell who got what.
File-transfer sites are one more vendor
They hold your files outside Atlassian and outside the work item, and whether a link gets a password or a download record depends on the plan someone bought.
Ask for files with one link
Click Request files on the work item, choose how long the link works and which file types it takes, and copy the ready-made message. Your customer drops files in from a laptop or a phone. When they finish, you get a comment with an @mention and the file list, an internal note in Jira Service Management.
Send large files without email
Pick files from your computer, set when the link expires and how many times each file can be downloaded, and add a password if you like. The outside person sees the files on one page and downloads them, with the downloads left in plain view.
A page outsiders trust, on any device
No sign-up and nothing to install: the link opens a clean page in Atlassian’s style, in any modern browser and on a phone. It shows the work item key and nothing else from Jira, says up front which files it accepts, and retries on its own when the connection drops.
One set of rules, and a record of everything
Jira admins set one policy for the site: expiry range, passwords, download limits, file types and sizes, a storage limit, retention, and who may create links. The audit log records every link, upload, download and wrong password, with filters and CSV export.
For teams that work with people outside
Support and service desks
- Collect logs and database dumps too big for email
- Get photos straight from a customer’s phone
- An internal note when files arrive, no email to the customer
Agencies and software houses
- Briefs, logos and designs on the task they belong to
- Builds for clients, with a download limit and a password
- A record of what was sent and when it was downloaded
Finance, HR and back office
- Signed contracts and invoices from people outside the company
- Documents only, with a password and a short expiry
- Files deleted on schedule, not kept in mailboxes
From install to the first link
Install Secure File Exchange
Add the app to Jira Cloud or Jira Service Management. It works with its default policy from the start.
Check the policy
Open Jira settings → Apps → Secure File Exchange → Policies to set expiry, passwords, file types, retention and who can create links.
Create your first link
On a work item, click Request files or Send files in the Secure File Exchange panel, and send the ready-made message to your customer.
Files stay in your Atlassian cloud
Files travel straight between the outside person's browser and Atlassian, with no server of ours in between.

Files, links and the audit log live in your organization's Atlassian cloud. The app has no servers of its own and sends no data to any outside service.
Each link carries a secret key the app never stores. Revoke a link and access ends that moment.
Anyone who can see the work item sees its files. Creating links follows Jira's attachment permission, or a dedicated permission your admin grants.
Files and audit events are deleted on the schedule your admin sets, and the audit log keeps only a shortened IP address.
Exchange files where the work is
Request files from customers, send them yours, and keep every file with its work item, under rules your admin sets.
View on Marketplace