Automation Anywhere

Security and trust center evidence

Automation Anywhere is a developer of robotic process automation (RPA) software, which employs software bots to complete business

automationanywhere.com No-code and automationLast verified 26 Oct 2026

Vendor website Are you Automation Anywhere?

CSA STARVerified

DPFExpired

Automation Anywhere has 1 registry-verified row, and 1 expired in the CertReports index, last verified 26 Oct 2026. The strongest row is CSA STAR: STAR Level 1 self-assessment (CAIQ). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Automation Anywhere is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) dated 3 Jun 2021, as of 17 Sep 2026. Automation Anywhere's EU-US Data Privacy Framework listing is inactive, expired as of 17 Sep 2026, with an original registration date of 12 Sep 2018. No public evidence of a SOC 2 Type II report was found for Automation Anywhere as of 17 Sep 2026. No public evidence of HIPAA compliance documentation was found for Automation Anywhere as of 17 Sep 2026. No public evidence of PCI DSS validation or FedRAMP authorization was found for Automation Anywhere as of 17 Sep 2026.

CSA STAR - listed, Level 1 self-assessment dated 3 Jun 2021 (as of 17 Sep 2026)
EU-US Data Privacy Framework - expired, inactive as of 17 Sep 2026 (registered 12 Sep 2018)
SOC 2, HIPAA, PCI DSS, FedRAMP - no public evidence found as of 17 Sep 2026

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 23 Sep 2026; it is regenerated whenever a row changes.

Among no-code and automation vendors

1verified rows

Category median 1, across 113 indexed no-code and automation vendors. Automation Anywhere has more verified rows than 48 percent of them.

business processprocess automationrpaworkflow automation

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, FedRAMP, PCI DSS, ISO 27001, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.

Subprocessors

No subprocessor list captured yet.

Change history

18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.

Security questionnaires

Automation Anywhere publishes 2 completed questionnaires. The pre-fill tool uses the answers by question ID.

CAIQ self-assessment - Automation 360CSA STAR registry · 311 answers · 10 Feb 2026
CAIQ Self-assessment v4.0.2 - Automation 360CSA STAR registry · 261 answers · 23 Jul 2025

Pre-fill a questionnaire for Automation Anywhere

How to get the report

SOC 2 reports and audit packages are restricted-use documents. CertReports never hosts or summarises them beyond the facts the vendor has made public. Request them from the vendor directly.

Is something wrong?

Every row has a dispute link. Corrections ship within two business days and the row shows “Under review” while pending.

Report an error

Similar vendors with evidence

Nintex3 verified rows

UiPath3 verified rows

AgilePoint0 verified rows

See all alternatives

Similar vendors with evidence

Related by product tags and the No-code and automation category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.