CRM for JIRA Cloud version is hosted by Atlassian. Here are the relevant documents from Atlassian regarding hosting security and terms for your review: