{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"uipath","name":"UiPath","domain":"uipath.com","category":"DevOps and observability","one_liner":"UiPath Inc. is a Romanian-American multinational software company that develops artificial intelligence (AI) and agentic automation and","trust_center_url":"https://trust.uipath.com/","security_page_url":null,"url":"https://certreports.com/vendors/uipath/security","last_verified_at":"2026-09-19T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"hipaa","framework_name":"HIPAA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states that it will sign a business associate agreement on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/hipaa","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"HIPAA","confidence":1}]},{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Drata) as of 18 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/soc-2","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"SOC 2 Type 2","confidence":1}]},{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 19 Sep 2026.","kind":"authorization","status_text":"FedRAMP Authorized","issued_at":"2024-03-20","expires_at":null,"period_start":null,"period_end":null,"auditor":"Schellman Compliance, LLC","impact_level":"Moderate","as_of":"2026-09-19","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/uipath/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2132958724","fetched_at":"2026-09-19 08:30:01.700532+00","content_hash":"b2bb3e031fda16f1f3201a5640ae64a639a15e4997f9d1ca43ef13a2942600e6","wayback_url":null,"quote":"UiPath - Automation Cloud Public Sector: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2132958724","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"UiPath - Automation Cloud Public Sector: FedRAMP Authorized","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2132958724","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"UiPath - Automation Cloud Public Sector: FedRAMP Authorized","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/iso-27001","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"ISO/IEC 27001:2022","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2026-02-26","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/uipath/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/uipath","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"uipath: STAR Level 1 self-assessment (CAIQ)","confidence":1}]},{"framework":"iso-42001","framework_name":"ISO/IEC 42001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 42001 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 42001:2023 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/iso-42001","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"ISO/IEC 42001:2023","confidence":1}]},{"framework":"soc-1","framework_name":"SOC 1","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 1 Type II report on its trust centre (Drata) as of 18 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 1 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/security","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"SOC 1 Type 2","confidence":1}]},{"framework":"iso-27017","framework_name":"ISO/IEC 27017","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27017 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27017:2015 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/security","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"ISO/IEC 27017:2015","confidence":1}]},{"framework":"iso-27018","framework_name":"ISO/IEC 27018","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27018 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27018:2019 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/security","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"ISO/IEC 27018:2019","confidence":1}]},{"framework":"hitrust","framework_name":"HITRUST","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an HITRUST certification on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states HITRUST on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/security","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"HITRUST","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: SW-US Certification, EU-US Certification, UK Extension Certification","issued_at":"2020-01-09","expires_at":"2027-08-06","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/uipath/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/4865","fetched_at":"2026-09-17 15:48:42.059204+00","content_hash":"1466130777a13d617825d7fdc69112c415a17e1a49dd2fb858d2de2738931de8","wayback_url":null,"quote":"Uipath: Active: SW-US Certification, EU-US Certification, UK Extension Certification","confidence":1}]},{"framework":"cyber-essentials-plus","framework_name":"Cyber Essentials Plus","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an Cyber Essentials Plus certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states Cyber Essentials Plus on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/security","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"Cyber Essentials Plus","confidence":1}]},{"framework":"c5","framework_name":"BSI C5","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an BSI C5 attestation on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states C5 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/security","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"C5","confidence":1}]},{"framework":"ens","framework_name":"ENS","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ENS certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ENS on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/security","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"ENS","confidence":1}]},{"framework":"irap","framework_name":"IRAP","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an IRAP assessment on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states IRAP on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/uipath/security","evidence":[{"source_type":"trust_center","source_name":"UiPath trust centre (Drata)","url":"https://trust.uipath.com/","fetched_at":"2026-09-18 22:40:48.166707+00","content_hash":"9df775154545d64d9e6eb076bcaa1ad8b1c92209259a151bd69c31897246d3aa","wayback_url":null,"quote":"IRAP","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, UiPath is listed in the FedRAMP registry as FedRAMP Authorized, with authorization issued 20 Mar 2024 and audited by Schellman Compliance, LLC. As of 17 Sep 2026, UiPath is listed in the CSA STAR registry at Level 1 self-assessment (CAIQ), issued 26 Feb 2026. As of 17 Sep 2026, UiPath is listed in the EU-US Data Privacy Framework registry as active, covering SW-US, EU-US, and UK Extension Certifications, issued 09 Jan 2020 and set to expire 06 Aug 2027. No public evidence found for SOC 2 as of 17 Sep 2026. No public evidence found for HIPAA as of 17 Sep 2026.","bullets":["FedRAMP: listed in FedRAMP registry as Authorized, issued 20 Mar 2024, audited by Schellman Compliance, LLC (as of 17 Sep 2026)","CSA STAR: listed in CSA STAR registry, Level 1 self-assessment (CAIQ), issued 26 Feb 2026 (as of 17 Sep 2026)","EU-US Data Privacy Framework: listed as active (SW-US, EU-US, UK Extension), issued 09 Jan 2020, expires 06 Aug 2027 (as of 17 Sep 2026)"],"model":"claude-sonnet-5","generated_at":"2026-09-17 18:39:17.803795+00"},"legal_docs":[{"kind":"subprocessors","url":"https://trust.uipath.com/","availability":"public","detail":"7 subprocessors listed on the trust centre","as_of":"2026-09-18"}],"subprocessors":[{"name":"AI Center Automation Suite Cloud","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Automation Cloud","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Elements Insights Test Manager 2. Services","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"Security Operations Center Peak AI Platform","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"UiPath Automation Cloud","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"UiPath is aware that Microsoft","domain":null,"purpose":null,"location":null,"vendor_url":null},{"name":"UiPath products or UiPath Automation Cloud","domain":null,"purpose":null,"location":null,"vendor_url":null}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T09:12:26.544Z"}