Summary
OC Tanner has , and 1 expired in the CertReports index, last verified 26 Oct 2026. The strongest row is EU-US Data Privacy Framework: Inactive. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
OC Tanner is listed in the Data Privacy Framework registry, with certification issued on 19 Jan 2017, as of 12 Oct 2026. The registry marks this EU-US Data Privacy Framework listing as inactive, as of 12 Oct 2026. No public evidence was found for SOC 2 as of 12 Oct 2026. No public evidence was found for ISO 27001 as of 12 Oct 2026. No public evidence was found for HIPAA, so no BAA offering is confirmed, as of 12 Oct 2026.
- EU-US Data Privacy Framework: listed in the registry, expired (issued 19 Jan 2017), as of 12 Oct 2026
- SOC 2: no public evidence found, as of 12 Oct 2026
- ISO 27001: no public evidence found, as of 12 Oct 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 18 Oct 2026; it is regenerated whenever a row changes.
Among developer tools vendors
0verified rows
Category median 0, across 220 indexed developer tools vendors. OC Tanner has no registry-verified row yet, like 65 percent of them; its evidence is vendor-stated or reported.
employee recognitionengagementperformance managementrewards programs
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Evidence against regulations
All regulations for OC TannerHow much of each regulation’s vendor requirements OC Tanner’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read