Oracle compliance, certifications and attestations
Cloud · 43 certifications held · 8 from public registries · read Sep 24, 2026
| Certification | Evidence | ||
|---|---|---|---|
| SOC reports | |||
| SOC 1 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| SOC 2 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| SOC 3 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO standards | |||
| ISO/IEC 27001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27017 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27018 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 27701 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO 9001 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO 22301 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISO/IEC 20000-1 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| AI governance | |||
| ISO/IEC 42001 Held Partner entry in the STAR Registry CSA STAR Registry and vendor page | Held | CSA STAR Registry and vendor page | Sep 24, 2026 |
| CSA STAR for AI Level 2 AI-CAIQ, validated CSA STAR Registry | Level 2 | CSA STAR Registry | Sep 23, 2026 |
| US government | |||
| FedRAMP High Oracle Service Cloud (OSvC); Federal Managed Cloud Services FedRAMP Marketplace | High | FedRAMP Marketplace | Sep 23, 2026 |
| GovRAMP (StateRAMP) High Oracle Fusion Cloud (Authorized, Moderate); Oracle Cloud Infrastructure Government Cloud (Authorized, High); Oracle Taleo Cloud (Authorized, Moderate) GovRAMP product list | High | GovRAMP product list | Sep 24, 2026 |
| TX-RAMP Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| NIST SP 800-171 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| FIPS 140 validated FIPS 140-3 9 active FIPS 140-3 modules: #5345 Acme Packet VME; #5344 Acme Packet 4600 and Acme Packet 6350; #5343 Acme Packet 1100, Acme Packet 3900, Acme Packet 3950 and Acme Packet 4900; #5339 Oracle Linux 9 NSS Cryptographic Module; #5294 Oracle Linux 9 OpenSSL FIPS Provider; #5037 Oracle Linux 9 GnuTLS Cry NIST CMVP | FIPS 140-3 | NIST CMVP | Sep 24, 2026 |
| ITAR Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| IRS Publication 1075 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Finance | |||
| PCI DSS Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| SEC 17a-4 / FINRA 4511 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| FFIEC Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| MAS TRM (Singapore) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| APRA CPS 234 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| OSFI B-13 Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| FISC (Japan) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| DORA Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Health | |||
| HIPAA (BAA) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| HITRUST Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| HDS (France) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| NHS DSPT (UK) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Life sciences (GxP) | |||
| GxP qualification Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| Privacy and cloud | |||
| Data Privacy Framework Held EU-US, UK extension, Swiss-US; non-HR data. Oracle America Inc. Data Privacy Framework List | Held | Data Privacy Framework List | Sep 23, 2026 |
| EU Cloud Code of Conduct Held Partner entry in the STAR Registry CSA STAR Registry and vendor page | Held | CSA STAR Registry and vendor page | Sep 24, 2026 |
| CSA STAR Level 2 CAIQ, certification, attestation CSA STAR Registry | Level 2 | CSA STAR Registry | Sep 23, 2026 |
| Regional programs | |||
| Cyber Essentials (UK) Basic Vendor page | Basic | Vendor page | Sep 24, 2026 |
| UK G-Cloud Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ENS (Spain) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| IRAP (Australia) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| ISMAP (Japan) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| MTCS (Singapore) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| K-ISMS (Korea) Held Vendor page | Held | Vendor page | Sep 24, 2026 |
| TISAX Held Vendor page | Held | Vendor page | Sep 24, 2026 |
From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.
History
| Date | Change | |
|---|---|---|
| In process FedRAMP Moderate Oracle Primavera Cloud for Government | FedRAMP Marketplace | |
| Added FedRAMP Moderate Oracle Enterprise Performance Management (EPM) | FedRAMP Marketplace | |
| Ready FedRAMP Moderate Oracle Guided Learning (OGL) | FedRAMP Marketplace | |
| In process FedRAMP Moderate Oracle Enterprise Performance Management (EPM) | FedRAMP Marketplace | |
| Added FedRAMP Moderate Aconex for Defense | FedRAMP Marketplace | |
| Added FedRAMP High Oracle Cloud Infrastructure-Government Cloud | FedRAMP Marketplace | |
| In process FedRAMP Moderate Aconex for Defense | FedRAMP Marketplace | |
| Added FedRAMP Moderate Fusion Cloud | FedRAMP Marketplace | |
| Ready FedRAMP High Oracle Cloud Infrastructure-Government Cloud | FedRAMP Marketplace | |
| Added CSA STAR First listed in the CSA STAR Registry | CSA STAR Registry | |
| In process FedRAMP Moderate Fusion Cloud | FedRAMP Marketplace | |
| Upgraded FedRAMP High Government Cloud - Common Controls | FedRAMP Marketplace | |
| In process FedRAMP High Government Cloud - Common Controls | FedRAMP Marketplace | |
| In process FedRAMP Low Oracle Enterprise Performance Management (EPM) | FedRAMP Marketplace | |
| Added Data Privacy Framework Oracle America Inc. | Data Privacy Framework List | |
| Ready FedRAMP Moderate Taleo Cloud - U.S. Government Cloud | FedRAMP Marketplace | |
| In process FedRAMP Moderate Oracle Service Cloud (DOD) | FedRAMP Marketplace | |
| Added FedRAMP Moderate Oracle Service Cloud (OSvC) | FedRAMP Marketplace | |
| Added FedRAMP Moderate Federal Managed Cloud Services | FedRAMP Marketplace | |
| In process FedRAMP Moderate Oracle Service Cloud (OSvC) | FedRAMP Marketplace |
About Oracle
Oracle Cloud Infrastructure and Oracle's cloud applications.
- Status
- Public
- Headquarters
- Austin, United States
- Founded
- 1977
- Website
- oracle.com
No public evidence found for
- ISO standards
- ISO 27799
- US government
- DoD IL, CMMC, 800-53, CJIS, 508/VPAT
- Finance
- PCI 3DS, SWIFT, GLBA, SOX
- Health
- PHIPA
- Life sciences (GxP)
- Part 11, Annex 11, CSV
- Privacy and cloud
- CBPR
- Regional programs
- C5, SecNum
- Education
- FERPA, HECVAT, COPPA
Compare with Microsoft, AWS, Google Cloud, IBM, Alibaba Cloud