Complianceby GlyphOkta compliance, certifications and attestations
Security and infra · 5 certifications held · 5 from public registries · read Nov 4, 2026
Authorization to sell a cloud service to US federal agencies.
HighFedRAMP MarketplaceOkta IDaaS Regulated Cloud; Okta IDaaS Government High Cloud (GHC)
A security verification for US state and local government cloud buyers.
ModerateGovRAMP product listOkta IDaaS (Authorized, Moderate)
Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.
HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data. Okta
Adherence to the GDPR code of conduct for cloud processors.
HeldCSA STAR RegistryPartner entry in the STAR Registry
A listing in the Cloud Security Alliance STAR Registry.
Level 2CSA STAR RegistryCAIQ, certification
History
About Okta
Workforce and customer identity.
- Status
- Public
- Headquarters
- San Francisco, United States
- Founded
- 2009
- Website
- okta.com
No public evidence found for
- SOC reports
- SOC 1SOC 2SOC 3
- ISO standards
- ISO 27001ISO 27017ISO 27018ISO 27701ISO 9001ISO 22301ISO 20000ISO 27799
- AI governance
- ISO 42001STAR AI
- US government
- DoD ILTX-RAMPCMMC800-171800-53FIPS 140ITARCJISIRS 1075508/VPAT
- Finance
- PCI DSSPCI 3DSSWIFT17a-4GLBASOXFFIECMAS TRMAPRAOSFIFISCDORA
- Health
- HIPAAHITRUSTHDSNHS DSPTPHIPA
- Life sciences (GxP)
- GxPPart 11Annex 11CSV
- Privacy and cloud
- CBPR
- Regional programs
- Cyber Ess.G-CloudC5ENSSecNumIRAPISMAPMTCSK-ISMSTISAX
- Education
- FERPAHECVATCOPPA
Compare with CrowdStrike, Wiz, Twilio, PagerDuty, Stripe