Skip to content
Attested.
VendorsCloud8h ago
Vendor · Cloud

OracleCompliance, certifications and attestations

Certifications held, by family43 held
Status
Public
Headquarters
Austin, United States
Founded
1977
Website
oracle.com
Trust center Company profile
43
Certifications held
7
Backed by a registry
52
Pieces of evidence
Sep 24, 2026
Last captured
Across fru.devAcquisitionsEarningsPaydaysConferences

SOC reports

ISO standards

AI governance

US government

Health

Payments

Privacy

Cloud security

Regional

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

Added or renewedUpgradedIn process or ReadyLapsed or removed
  1. In processFedRAMP ModerateOracle Primavera Cloud for Government
  2. AddedFedRAMP ModerateOracle Enterprise Performance Management (EPM)
  3. ReadyFedRAMP ModerateOracle Guided Learning (OGL)
  4. In processFedRAMP ModerateOracle Enterprise Performance Management (EPM)
  5. AddedFedRAMP ModerateAconex for Defense
  6. AddedFedRAMP HighOracle Cloud Infrastructure-Government Cloud
  7. In processFedRAMP ModerateAconex for Defense
  8. AddedFedRAMP ModerateFusion Cloud
  9. ReadyFedRAMP HighOracle Cloud Infrastructure-Government Cloud
  10. AddedCSA STARFirst listed in the CSA STAR Registry
  11. In processFedRAMP ModerateFusion Cloud
  12. UpgradedFedRAMP HighGovernment Cloud - Common Controls
  13. In processFedRAMP HighGovernment Cloud - Common Controls
  14. In processFedRAMP LowOracle Enterprise Performance Management (EPM)
  15. AddedData Privacy FrameworkOracle America Inc.
  16. ReadyFedRAMP ModerateTaleo Cloud - U.S. Government Cloud
  17. In processFedRAMP ModerateOracle Service Cloud (DOD)
  18. AddedFedRAMP ModerateOracle Service Cloud (OSvC)
  19. AddedFedRAMP ModerateFederal Managed Cloud Services
  20. In processFedRAMP ModerateOracle Service Cloud (OSvC)

Evidence

Every source, what it says and when it was read.

SOC 11 source

HeldVendor compliance page
...Artificial intelligence — Management system PCI DSS Payment Card Industry Data Security Standard SOC 1 System and Organization Controls 1 SOC 2 System and Organization Controls 2 SOC 3 System and Organization Controls...
Captured Sep 24, 2026Open source

SOC 21 source

HeldVendor compliance page
...DSS Payment Card Industry Data Security Standard SOC 1 System and Organization Controls 1 SOC 2 System and Organization Controls 2 SOC 3 System and Organization Controls 3 Americas Attestation Oracle Cloud...
Captured Sep 24, 2026Open source

SOC 31 source

HeldVendor compliance page
...Standard SOC 1 System and Organization Controls 1 SOC 2 System and Organization Controls 2 SOC 3 System and Organization Controls 3 Americas Attestation Oracle Cloud Infrastructure Oracle Applications NetSuite...
Captured Sep 24, 2026Open source

ISO/IEC 270011 source

HeldVendor compliance page
...20000-1: Service Management Systems ISO 22301 ISO 22301: Business Continuity Management Systems ISO/IEC 27001 ISO/IEC 27001: Information Security Management Systems ISO/IEC 27017 ISO/IEC 27017: Cloud Specific Controls ISO/IEC...
Captured Sep 24, 2026Open source

ISO/IEC 270171 source

HeldVendor compliance page
...Continuity Management Systems ISO/IEC 27001 ISO/IEC 27001: Information Security Management Systems ISO/IEC 27017 ISO/IEC 27017: Cloud Specific Controls ISO/IEC 27018 ISO/IEC 27018: Personal Information Protection Controls ISO/IEC...
Captured Sep 24, 2026Open source

ISO/IEC 270181 source

HeldVendor compliance page
...Information Security Management Systems ISO/IEC 27017 ISO/IEC 27017: Cloud Specific Controls ISO/IEC 27018 ISO/IEC 27018: Personal Information Protection Controls ISO/IEC 27701 ISO/IEC 27701: Privacy Information Management...
Captured Sep 24, 2026Open source

ISO/IEC 277011 source

HeldVendor compliance page
...Cloud Specific Controls ISO/IEC 27018 ISO/IEC 27018: Personal Information Protection Controls ISO/IEC 27701 ISO/IEC 27701: Privacy Information Management ISO/IEC 42001:2023 ISO/IEC 42001:2023: Information technology —...
Captured Sep 24, 2026Open source

ISO/IEC 420012 sources

HeldCSA STAR Registry

Partner entry in the STAR Registry

Listed as Oracle America, Inc. since 2019-01-15; ISO/IEC 42001 entry
Captured Sep 23, 2026Since Jan 15, 2019Open source
HeldVendor compliance page
...Information Protection Controls ISO/IEC 27701 ISO/IEC 27701: Privacy Information Management ISO/IEC 42001:2023 ISO/IEC 42001:2023: Information technology — Artificial intelligence — Management system PCI DSS Payment...
Captured Sep 24, 2026Open source

CSA STAR for AI1 source

Held · Level 2CSA STAR Registry

AI-CAIQ, validated

Listed as Oracle America, Inc. since 2019-01-15; STAR for AI Level 2
Captured Sep 23, 2026Since Jan 15, 2019Open source

FedRAMP7 sources

Held · ModerateFedRAMP Marketplace

Oracle Service Cloud (OSvC)

FedRAMP Authorized, Moderate impact; authorized 2014-12-05 (JAB); assessor Coalfire Systems, Inc.; 4 agency authorizations
Captured Sep 23, 2026Since Dec 5, 2014Open source
Held · ModerateFedRAMP Marketplace

Federal Managed Cloud Services

FedRAMP Authorized, Moderate impact; authorized 2014-02-26 (JAB); assessor Coalfire Systems, Inc.; 9 agency authorizations
Captured Sep 23, 2026Since Feb 26, 2014Open source
Held · ModerateFedRAMP Marketplace

Fusion Cloud

FedRAMP Authorized, Moderate impact; authorized 2020-01-13 (Agency); assessor Coalfire Systems, Inc.; 9 agency authorizations
Captured Sep 23, 2026Since Jan 13, 2020Open source
Held · ModerateFedRAMP Marketplace

Oracle Enterprise Performance Management (EPM)

FedRAMP Authorized, Moderate impact; authorized 2025-02-28 (Agency); assessor Coalfire Systems, Inc.; 12 agency authorizations
Captured Sep 23, 2026Since Feb 28, 2025Open source
Held · ModerateFedRAMP Marketplace

Aconex for Defense

FedRAMP Authorized, Moderate impact; authorized 2020-10-30 (Agency); assessor Schellman Compliance, LLC; 2 agency authorizations
Captured Sep 23, 2026Since Oct 30, 2020Open source
Held · HighFedRAMP Marketplace

Oracle Cloud Infrastructure-Government Cloud

FedRAMP Authorized, High impact; authorized 2020-10-01 (JAB); assessor Coalfire Systems, Inc.; 16 agency authorizations
Captured Sep 23, 2026Since Oct 1, 2020Open source
In process · ModerateFedRAMP Marketplace

Oracle Primavera Cloud for Government

Agency In Process, Moderate impact; assessor Coalfire Systems, Inc.
Captured Sep 23, 2026Open source

HIPAA (BAA)1 source

HeldVendor compliance page
...applicable Not applicable HITRUST CSF Health Information Trust Alliance Common Security Framework HIPAA Health Insurance Portability and Accountability Act State RAMP: TX-RAMP Texas Risk and Authorization Management...
Captured Sep 24, 2026Open source

HITRUST1 source

HeldVendor compliance page
...Processing Standards Publication 140 Not applicable Not applicable Not applicable Not applicable HITRUST CSF Health Information Trust Alliance Common Security Framework HIPAA Health Insurance Portability and Accountability...
Captured Sep 24, 2026Open source

PCI DSS1 source

HeldVendor compliance page
...ISO/IEC 42001:2023: Information technology — Artificial intelligence — Management system PCI DSS Payment Card Industry Data Security Standard SOC 1 System and Organization Controls 1 SOC 2 System and Organization...
Captured Sep 24, 2026Open source

Data Privacy Framework1 source

HeldData Privacy Framework List

EU-US, UK extension, Swiss-US; non-HR data. Oracle America Inc.

EU-US status: Active; certified since 2016-08-31; recertification due 2027-02-02; verification: Outside Compliance Review
Captured Sep 23, 2026Since Aug 31, 2016Renewal due Feb 2, 2027Open source

EU Cloud Code of Conduct2 sources

HeldCSA STAR Registry

Partner entry in the STAR Registry

Listed as Oracle America, Inc. since 2019-01-15; EU Cloud Code of Conduct entry
Captured Sep 23, 2026Since Jan 15, 2019Open source
HeldVendor compliance page
...ISO/IEC 20000-1: Service Management Systems ENS Esquema Nacional de Seguridad (Law 11/2007) EU Cloud CoC European Union (EU) Cloud Code of Conduct Verification ID - 2022LVL02SCOPE4214 HDS Hébergeur de Données de Santé...
Captured Sep 24, 2026Open source

CSA STAR1 source

Held · Level 2CSA STAR Registry

CAIQ, certification, attestation

Listed as Oracle America, Inc. since 2019-01-15; Level 2 (third-party audit)
Captured Sep 23, 2026Since Jan 15, 2019Open source

IRAP1 source

HeldVendor compliance page
...Hosting Certification Framework Australia Hosting Certification Framework (the Framework) IRAP Information Security Registered Assessor Program ISMAP Information System Security Management and Assessment Program...
Captured Sep 24, 2026Open source

ISMAP1 source

HeldVendor compliance page
...Certification Framework (the Framework) IRAP Information Security Registered Assessor Program ISMAP Information System Security Management and Assessment Program ISMS (formerly K-ISMS) Information Security Management...
Captured Sep 24, 2026Open source

TISAX1 source

HeldVendor compliance page
...- PASF Third Party Assurance for Policing (TDAP): Police-Assured Secure Facilities (PASF) TISAX Trusted Information Security Assessment Exchange UAE IAR Information Security Requirements United Arab Emirates...
Captured Sep 24, 2026Open source

Compare with

Oracle vs Microsoft Oracle vs AWS Oracle vs Google Cloud Oracle vs IBM Oracle vs Cloudflare Oracle vs Alibaba Cloud

Weekly: vendors that gained or lost a certification, Wednesdays.