Skip to main content
Auth0 logo

Auth0

Security and trust center evidence

Secure users, AI agents, and more with Auth0, an easy-to-implement, scalable, and adaptable authentication and authorization

auth0.comIdentity and accessLast verified 21 Sep 2026
Request the report Are you Auth0?

Summary

HIPAA mark, CertReports state Vendor-stated as of 21 Sep 2026HIPAAVendor-statedSOC 2 mark, CertReports state Vendor-stated as of 21 Sep 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 21 Sep 2026GDPRVendor-statedFedRAMP mark, CertReports state Vendor-stated as of 21 Sep 2026FedRAMPVendor-statedPCI DSS mark, CertReports state Vendor-stated as of 21 Sep 2026PCI DSSVendor-statedISO/IEC 27001 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27001Vendor-statedCSA STAR mark, CertReports state Vendor-stated as of 21 Sep 2026CSA STARVendor-statedSOC 1 mark, CertReports state Vendor-stated as of 21 Sep 2026SOC 1Vendor-statedSOC 3 mark, CertReports state Vendor-stated as of 21 Sep 2026SOC 3Vendor-statedISO/IEC 27017 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27017Vendor-statedISO/IEC 27018 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27018Vendor-statedGovRAMP mark, CertReports state Vendor-stated as of 21 Sep 2026GovRAMPVendor-statedTISAX mark, CertReports state Vendor-stated as of 21 Sep 2026TISAXVendor-statedBSI C5 mark, CertReports state Vendor-stated as of 21 Sep 2026C5Vendor-statedENS mark, CertReports state Vendor-stated as of 21 Sep 2026ENSVendor-statedIRAP mark, CertReports state Vendor-stated as of 21 Sep 2026IRAPVendor-stated

Auth0 has 16 vendor-stated rows in the CertReports index, last verified 21 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Auth0 displays a HIPAA badge on its trust centre as of 21 Sep 2026, though the underlying claim's BAA availability is not captured in the evidence. Auth0 states SOC 2 on its trust centre as of 21 Sep 2026. Auth0 states FedRAMP High on its trust centre as of 21 Sep 2026. As of 21 Sep 2026, Auth0 also states GDPR, PCI DSS, ISO/IEC 27001:2022, CSA STAR, SOC 1 and SOC 3 on its trust centre. As of 21 Sep 2026, Auth0 further states ISO/IEC 27017:2015, ISO/IEC 27018:2019, GovRAMP, TISAX, BSI C5, ENS and IRAP on its trust centre.

  • SOC 2: vendor-stated on trust centre, no report evidence captured (as of 21 Sep 2026).
  • HIPAA: vendor displays a badge; BAA availability not confirmed (as of 21 Sep 2026).
  • FedRAMP High: vendor-stated claim, no registry listing found in the evidence (as of 21 Sep 2026).

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 22 Sep 2026; it is regenerated whenever a row changes.

Among identity and access vendors

0verified rows

Category median 1, across 78 indexed identity and access vendors. Auth0 has no registry-verified row yet, like 42 percent of them; its evidence is vendor-stated or reported.

authenticationauthorizationmfasso

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors

No subprocessor list captured yet.

Security profile

Pen test cadence
report available

Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.

Change history

  1. 22 Sep 2026First indexed by CertReports16 evidence rows across 16 frameworks entered the index.

Similar vendors with evidence

Related by product tags and the Identity and access category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

Okta logo

Okta

Identity and access

Okta is an Identity-as-a-Service (IDaaS) platform that provides a comprehensive suite of services focused on managing and securing user

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state VerifiedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-stated
3 verified · 14 stated6 Nov 2026
FusionAuth logo

FusionAuth

Identity and access

FusionAuth provides complete auth software and user management solutions, with customizable tools like SSO, MFA, and integrations for

DPF mark, CertReports state Verified
1 verified2 Nov 2026
RSA Security logo

RSA Security

Identity and access

RSA Security provides identity intelligence, authentication, access, and governance for government, finance, and high-assurance

FedRAMP mark, CertReports state Verified
1 verified5 Nov 2026
Ory logo

Ory

Identity and access

Ory delivers identity and access management (IAM) for applications, enterprises, and AI

DPF mark, CertReports state Verified
1 verified2 Nov 2026

Evidence against regulations

All regulations for Auth0

How much of each regulation’s vendor requirements Auth0’s public evidence reaches.

Reviewing a vendor on public evidence

All articles