Deloitte
Security and trust center evidence
Shape the future faster with our innovation and technology
Summary
Deloitte has 3 registry-verified rows in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Under FedRAMP, Deloitte is listed in the FedRAMP registry as FedRAMP Authorized, issued 15 Mar 2016, with audit work by MindPoint Group, A Tyto Athene Company, as of 19 Sep 2026. Under CSA STAR, Deloitte is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ) dated 10 Apr 2025, as of 17 Sep 2026. Under the EU-US Data Privacy Framework, Deloitte is listed in the DPF registry with Active status for the SW-US Certification, the EU-US Certification, and the UK Extension Certification, issued 21 Nov 2016 and expiring 30 Oct 2026, as of 17 Sep 2026. No public evidence was found for a SOC 2 report as of 19 Sep 2026. No public evidence was found for ISO/IEC 27001 certification as of 19 Sep 2026.
- FedRAMP: listed in the FedRAMP registry, FedRAMP Authorized, issued 15 Mar 2016, auditor MindPoint Group, A Tyto Athene Company, as of 19 Sep 2026
- CSA STAR: listed in the CSA STAR registry, Level 1 self-assessment (CAIQ), dated 10 Apr 2025, as of 17 Sep 2026
- EU-US Data Privacy Framework: listed in the DPF registry, Active (SW-US, EU-US, UK Extension), issued 21 Nov 2016, expires 30 Oct 2026, as of 17 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among business services vendors
3verified rows
Category median 0, across 146 indexed business services vendors. Deloitte has more verified rows than 97 percent of them.
consultinginnovation servicesprofessional servicestechnology consulting
Compare with similar vendors
Pick your own comparisonCompliance grid
FedRAMPVerifiedFedRAMP Authorized
as of 1 Nov 202646 sources · MindPoint Group, A Tyto Athene Company
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: SW-US Certification, EU-US Certification, UK Extension Certification
as of 26 Oct 20262 sources
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports4 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Business services category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
PwC
Business services
PricewaterhouseCoopers, also known as PwC, is a multinational professional services network based in London, England
Pariveda Solutions
Business services
Pariveda is a strategy and technology professional services firm that helps companies make potential
Xigo
Business services
NTT drives innovation globally with human-centered technology, creating a connected future for people and
Accenture
Business services
Accenture is a Global professional services company providing a range of Strategy & Consulting, Song, Technology and Operations services
Evidence against regulations
All regulations for DeloitteHow much of each regulation’s vendor requirements Deloitte’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read