{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"oracle","name":"Oracle","domain":"oracle.com","category":"Data platforms","one_liner":"Oracle Corporation is an American multinational technology company headquartered in Austin, Texas","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/oracle/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 18 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2025-02-28","expires_at":null,"period_start":null,"period_end":null,"auditor":"Coalfire Systems, Inc.","impact_level":"Moderate","as_of":"2026-09-18","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/oracle/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/F1607077914A","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"Oracle - Oracle Enterprise Performance Management (EPM): FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/F1607077914A","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"Oracle - Oracle Enterprise Performance Management (EPM): FedRAMP Authorized","confidence":1}]},{"framework":"pci-dss","framework_name":"PCI DSS","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Visa Global Registry of Service Providers as of 17 Sep 2026.","kind":"attestation","status_text":"Listed on the Visa Global Registry as PCI DSS validated through 2027-04-30","issued_at":"2007-03-27","expires_at":"2027-04-30","period_start":null,"period_end":null,"auditor":"Schellman Compliance, LLC.","impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"visa_grsp","url":"https://certreports.com/vendors/oracle/pci-dss","evidence":[{"source_type":"registry","source_name":"Visa Global Registry of Service Providers","url":"https://www.visa.com/splisting/","fetched_at":"2026-09-17 15:58:50.01528+00","content_hash":"a59094f0807d8b157ba55bc41f301e77570d13b048d717425f6eef61ae828b28","wayback_url":null,"quote":"Oracle Corporation: PCI DSS, assessor Schellman Compliance, LLC., valid through 2027-04-30","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: UK Extension Certification, SW-US Certification, EU-US Certification","issued_at":"2016-08-31","expires_at":"2027-02-02","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/oracle/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/3400","fetched_at":"2026-09-17 15:48:00.80649+00","content_hash":"c55aecc060213b11a86403e7ac54c64b9394d04332ed64a9e0d501fe7a291dbb","wayback_url":null,"quote":"Oracle America Inc.: Active: UK Extension Certification, SW-US Certification, EU-US Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Oracle is listed in the FedRAMP registry as FedRAMP Authorized, with the authorization originally issued 5 Dec 2014 by auditor Coalfire Systems, Inc. As of 17 Sep 2026, Oracle is listed in the Visa Global Registry as PCI DSS validated, with validation issued 1 Feb 2012 by Schellman Compliance, LLC and an expiry of 31 May 2027. As of 17 Sep 2026, Oracle is listed in the EU-US Data Privacy Framework registry as active for the UK Extension, Swiss-US, and EU-US Certifications, originally issued 31 Aug 2016 and expiring 2 Feb 2027. As of 17 Sep 2026, no public evidence found for SOC 2 for Oracle. As of 17 Sep 2026, no public evidence found for HIPAA for Oracle.","bullets":["FedRAMP: listed in fedramp registry as FedRAMP Authorized, issued 5 Dec 2014, auditor Coalfire Systems, Inc. (as of 17 Sep 2026)","PCI DSS: listed in Visa Global Registry as validated, issued 1 Feb 2012, expires 31 May 2027, auditor Schellman Compliance, LLC (as of 17 Sep 2026)","EU-US Data Privacy Framework: listed in dpf registry as active (EU-US, Swiss-US, UK Extension), issued 31 Aug 2016, expires 2 Feb 2027 (as of 17 Sep 2026)"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:36:52.41212+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T02:21:58.198Z"}