{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"ukg","name":"UKG","domain":"ukg.com","category":"HR and HRIS","one_liner":"HR, Payroll, & Workforce Management","trust_center_url":"https://trustcenter.ukg.com/","security_page_url":null,"url":"https://certreports.com/vendors/ukg/security","last_verified_at":"2026-09-19T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Drata) as of 18 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/ukg/soc-2","evidence":[{"source_type":"trust_center","source_name":"UKG trust centre (Drata)","url":"https://trustcenter.ukg.com/","fetched_at":"2026-09-18 22:40:32.361904+00","content_hash":"70f2a1ea4a8f5b894ff06399caaba9d0c2d15d9c10eaae7f53f4c915b3aff65d","wayback_url":null,"quote":"SOC 2 Type 2","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/ukg/gdpr","evidence":[{"source_type":"trust_center","source_name":"UKG trust centre (Drata)","url":"https://trustcenter.ukg.com/","fetched_at":"2026-09-18 22:40:32.361904+00","content_hash":"70f2a1ea4a8f5b894ff06399caaba9d0c2d15d9c10eaae7f53f4c915b3aff65d","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"fedramp","framework_name":"FedRAMP","state":"verified_registry","state_label":"Verified","sentence":"Listed in the FedRAMP Marketplace as of 19 Sep 2026.","kind":"listing","status_text":"Agency In Process","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":"Schellman Compliance, LLC","impact_level":"Moderate","as_of":"2026-09-19","under_review":false,"source":"fedramp","url":"https://certreports.com/vendors/ukg/fedramp","evidence":[{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2421943168","fetched_at":"2026-09-19 08:30:01.700532+00","content_hash":"b2bb3e031fda16f1f3201a5640ae64a639a15e4997f9d1ca43ef13a2942600e6","wayback_url":null,"quote":"UKG Inc. - UKG Government Cloud: Agency In Process","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2421943168","fetched_at":"2026-09-18 22:35:17.44827+00","content_hash":"db2d03fa40cba0e5287b9cc7361e71b7c30c7ca9d51efb7b540477105fb30c7b","wayback_url":null,"quote":"UKG Inc. - UKG Government Cloud: Agency In Process","confidence":1},{"source_type":"registry","source_name":"FedRAMP Marketplace","url":"https://www.fedramp.gov/marketplace/products/FR2421943168","fetched_at":"2026-09-17 15:44:39.301965+00","content_hash":"395e7ad35dd25d1c547414140161c47ec22827b7ffae3bdbbd5256c38a3b940f","wayback_url":null,"quote":"UKG Inc. - UKG Government Cloud: Agency In Process","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27001 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/ukg/iso-27001","evidence":[{"source_type":"trust_center","source_name":"UKG trust centre (Drata)","url":"https://trustcenter.ukg.com/","fetched_at":"2026-09-18 22:40:32.361904+00","content_hash":"70f2a1ea4a8f5b894ff06399caaba9d0c2d15d9c10eaae7f53f4c915b3aff65d","wayback_url":null,"quote":"ISO/IEC 27001","confidence":1}]},{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider","issued_at":"2025-06-16","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/ukg/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/ukg","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"ukg: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider","confidence":1}]},{"framework":"cyber-essentials","framework_name":"Cyber Essentials","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an Cyber Essentials certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states Cyber Essentials on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/ukg/cyber-essentials","evidence":[{"source_type":"trust_center","source_name":"UKG trust centre (Drata)","url":"https://trustcenter.ukg.com/","fetched_at":"2026-09-18 22:40:32.361904+00","content_hash":"70f2a1ea4a8f5b894ff06399caaba9d0c2d15d9c10eaae7f53f4c915b3aff65d","wayback_url":null,"quote":"Cyber Essentials","confidence":1}]},{"framework":"soc-1","framework_name":"SOC 1","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 1 Type II report on its trust centre (Drata) as of 18 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 1 Type 2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/ukg/security","evidence":[{"source_type":"trust_center","source_name":"UKG trust centre (Drata)","url":"https://trustcenter.ukg.com/","fetched_at":"2026-09-18 22:40:32.361904+00","content_hash":"70f2a1ea4a8f5b894ff06399caaba9d0c2d15d9c10eaae7f53f4c915b3aff65d","wayback_url":null,"quote":"SOC 1 Type 2","confidence":1}]},{"framework":"soc-3","framework_name":"SOC 3","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a public SOC 3 report on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states SOC 3 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/ukg/security","evidence":[{"source_type":"trust_center","source_name":"UKG trust centre (Drata)","url":"https://trustcenter.ukg.com/","fetched_at":"2026-09-18 22:40:32.361904+00","content_hash":"70f2a1ea4a8f5b894ff06399caaba9d0c2d15d9c10eaae7f53f4c915b3aff65d","wayback_url":null,"quote":"SOC 3","confidence":1}]},{"framework":"iso-27017","framework_name":"ISO/IEC 27017","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27017 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27017:2015 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/ukg/security","evidence":[{"source_type":"trust_center","source_name":"UKG trust centre (Drata)","url":"https://trustcenter.ukg.com/","fetched_at":"2026-09-18 22:40:32.361904+00","content_hash":"70f2a1ea4a8f5b894ff06399caaba9d0c2d15d9c10eaae7f53f4c915b3aff65d","wayback_url":null,"quote":"ISO/IEC 27017:2015","confidence":1}]},{"framework":"iso-27018","framework_name":"ISO/IEC 27018","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27018 certificate on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO/IEC 27018:2019 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/ukg/security","evidence":[{"source_type":"trust_center","source_name":"UKG trust centre (Drata)","url":"https://trustcenter.ukg.com/","fetched_at":"2026-09-18 22:40:32.361904+00","content_hash":"70f2a1ea4a8f5b894ff06399caaba9d0c2d15d9c10eaae7f53f4c915b3aff65d","wayback_url":null,"quote":"ISO/IEC 27018:2019","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, SW-US Certification, UK Extension Certification","issued_at":"2016-09-16","expires_at":"2026-10-10","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/ukg/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/5300","fetched_at":"2026-09-17 15:48:54.995114+00","content_hash":"0b1f097a7c776127e3135225dffd7fc0e913ce519722c0ee3960d76c3e75e39b","wayback_url":null,"quote":"UKG Inc.: Active: EU-US Certification, SW-US Certification, UK Extension Certification","confidence":1}]},{"framework":"ccpa","framework_name":"CCPA / CPRA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an CCPA / CPRA privacy notice on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states CCPA on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/ukg/security","evidence":[{"source_type":"trust_center","source_name":"UKG trust centre (Drata)","url":"https://trustcenter.ukg.com/","fetched_at":"2026-09-18 22:40:32.361904+00","content_hash":"70f2a1ea4a8f5b894ff06399caaba9d0c2d15d9c10eaae7f53f4c915b3aff65d","wayback_url":null,"quote":"CCPA","confidence":1}]},{"framework":"irap","framework_name":"IRAP","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an IRAP assessment on its trust centre (Drata) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states IRAP on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"drata","url":"https://certreports.com/vendors/ukg/security","evidence":[{"source_type":"trust_center","source_name":"UKG trust centre (Drata)","url":"https://trustcenter.ukg.com/","fetched_at":"2026-09-18 22:40:32.361904+00","content_hash":"70f2a1ea4a8f5b894ff06399caaba9d0c2d15d9c10eaae7f53f4c915b3aff65d","wayback_url":null,"quote":"IRAP","confidence":1}]}],"brief":{"summary":"UKG states on its trust centre that it holds SOC 2 Type II, SOC 1 Type II and SOC 3 reports, as of 18 Sep 2026. UKG also states on its trust centre that it addresses GDPR, CCPA, ISO/IEC 27001, ISO/IEC 27017:2015, ISO/IEC 27018:2019, Cyber Essentials and IRAP, as of 18 Sep 2026. UKG is listed in the FedRAMP registry with a status of Agency In Process, with Schellman Compliance, LLC named as auditor, as of 19 Sep 2026. UKG is listed in the CSA STAR registry at Level 1 self-assessment (CAIQ) as a Trusted Cloud Provider, issued 16 Jun 2025, as of 17 Sep 2026. UKG is listed in the EU-US Data Privacy Framework registry with an Active status, issued 16 Sep 2016 and expiring 10 Oct 2026, as of 17 Sep 2026.","bullets":["States on its trust centre that it holds SOC 2 Type II, SOC 1 Type II and SOC 3 reports, and addresses GDPR, CCPA, ISO/IEC 27001, ISO/IEC 27017:2015, ISO/IEC 27018:2019, Cyber Essentials and IRAP, as of 18 Sep 2026.","Listed in the FedRAMP registry, status Agency In Process, auditor Schellman Compliance, LLC, as of 19 Sep 2026.","Listed in the CSA STAR registry (Level 1 self-assessment, Trusted Cloud Provider), issued 16 Jun 2025, and the EU-US Data Privacy Framework registry (Active, issued 16 Sep 2016, expires 10 Oct 2026), as of 17 Sep 2026."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:55:43.478565+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T06:07:55.402Z"}