Skip to main content
Okta logo

Okta

GDPR evidence

Okta is an Identity-as-a-Service (IDaaS) platform that provides a comprehensive suite of services focused on managing and securing user

okta.comIdentity and accessLast verified 2 Nov 2026
Request the report Are you Okta?
GDPR mark, CertReports state Vendor-stated as of 2 Nov 2026Vendor-stated

Okta and GDPR

Okta states it holds a data processing agreement. CertReports captured this on 2 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states GDPR on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026GDPR
Live page Snapshotsha256 80abe8b3d8
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026GDPR
Live page Snapshotsha256 43757e1c4e
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026GDPR
Live page Snapshotsha256 a3953f3a1a
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026GDPR
Live page Snapshotsha256 5769f96adb
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026GDPR
Live page Snapshotsha256 823ed15ef4
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026GDPR
Live page Snapshotsha256 af3187720f
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026GDPR
Live page Snapshotsha256 fa2265f333
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026GDPR
Live page Snapshotsha256 464d32844e
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026GDPR
Live page Snapshotsha256 f807f59c16
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026GDPR
Live page Snapshotsha256 25c2376a31
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026GDPR
Live page Snapshotsha256 b5c03060a8
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026GDPR
Live page Snapshotsha256 d7b07c67c3
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026GDPR
Live page Snapshotsha256 0a52a4c8a3
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026GDPR
Live page Snapshotsha256 c51f647ab3
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026GDPR
Live page Snapshotsha256 fe9944f89c
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026GDPR
Live page Snapshotsha256 3cd2e0e7fc
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026GDPR
Live page Snapshotsha256 601b42f4e9
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026GDPR
Live page Snapshotsha256 9e254108a8
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026GDPR
Live page Snapshotsha256 d17dd2b6dc
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026GDPR
Live page Snapshotsha256 b63a176303
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026GDPR
Live page Snapshotsha256 8981020655
Okta trust centre (Drata)
Vendor trust centre · HTTP 200
17 Sep 2026GDPR
Live page Snapshotsha256 9fa130beaf
This is wrong
VerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Issued or listed
23 Sep 2025
Expires or valid through
31 Aug 2027
Scope
Okta is a comprehensive, cloud-based Identity and Access Management (IAM) platform that provides a suite of products focusing on Workforce Identity and Customer Identity and Access Management (CIAM). Okta's products enable its customers to manage and secure access for employees, partners, and customers across applications and resources while protecting against cybersecurity threats. In support of providing its services and based on its customers’ instructions, Okta processes personal data that customers have submitted to the Okta services. Okta customers decide which personal data to submit to the services, which typically includes name, email address, address, phone number, password, as well as other information the Okta customer chooses to configure as part of their users’ profiles. Okta uses a number of third-party service providers to assist it in providing the services to customers, such as for customer support, database monitoring, data storage, data transmission, and other technical operations. These third parties may access, process, or store personal data as part of provision of their services and Okta maintains contracts with these third parties to limit the access, use, and disclosure of personal data in compliance with Okta’s obligations under the Data Privacy Framework. Okta also may disclose personal data to its other corporate entities, to government entities, and subject to its agreements with customers.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026Okta: Active: EU-US Certification, SW-US Certification, UK Extension Certification
Live pagesha256 09da09d0bc
Data Privacy Framework list
Official registry · HTTP 200
17 Sep 2026Okta: Inactive
Live pagesha256 cadc5d2459
This is wrong
ExpiredInactive
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Scope
Auth0 is a universal identity platform. Auth0 provides online services for its customers to manage the identity of their users and to help prevent cybersecurity threats. In support of providing its services and based on its customers’ instructions, Auth0 processes personal data that customers have submitted to the Auth0 services. Auth0 customers decide which personal data to submit to the services, which typically includes name, email address, address, phone number, password, as well as other information the Auth0 customer chooses to configure as part of their users’ profiles. Auth0 uses a number of third-party service providers to assist it in providing the services to customers, such as for customer support, database monitoring, data storage, data transmission, and other technical operations. These third parties may access, process, or store personal data as part of provision of their services and Auth0 maintains contracts with these third parties to limit the access, use, and disclosure of personal data in compliance with Auth0’s obligations under the Data Privacy Framework. Auth0 also may disclose personal data to its other corporate entities, to government entities, and subject to its agreements with customers.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026Auth0, Inc.: Inactive
Live pagesha256 1e35f0b0ec
This is wrong
ExpiredInactive
as of 2 Nov 2026 · confidence 100%
Kind
Listing
Scope
Auth0 is a universal identity platform. Auth0 provides online services for its customers to manage the identity of their users and to help prevent cybersecurity threats. In support of providing its services and based on its customers’ instructions, Auth0 processes personal data that customers have submitted to the Auth0 services. Auth0 customers decide which personal data to submit to the services, which typically includes name, email address, address, phone number, password, as well as other information the Auth0 customer chooses to configure as part of their users’ profiles. Auth0 uses a number of third-party service providers to assist it in providing the services to customers, such as for customer support, database monitoring, data storage, data transmission, and other technical operations. These third parties may access, process, or store personal data as part of provision of their services and Auth0 maintains contracts with these third parties to limit the access, use, and disclosure of personal data in compliance with Auth0’s obligations under the Data Privacy Framework. Auth0 also may disclose personal data to its other corporate entities, to government entities, and subject to its agreements with customers.
SourceCapturedQuoteLinks
Data Privacy Framework list
Official registry · HTTP 200
2 Nov 2026Auth0, LLC: Inactive
Live pagesha256 4850fb6c85
This is wrong
What GDPR means, and what it does not

"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.

Read the GDPR guide and browse all vendors with evidence

Questions buyers ask

Is Okta GDPR compliant?

There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 22 Sep 2026DPA changedThe data processing agreement URL changed.
  2. 17 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.

Alternatives with GDPR evidence

Similar vendors (shared product tags or the Identity and access category) whose GDPR row is verified or vendor-stated, ranked by similarity.

Auth0 logo

Auth0

Identity and access

Secure users, AI agents, and more with Auth0, an easy-to-implement, scalable, and adaptable authentication and authorization

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-stated
16 stated21 Sep 2026
Daon logo

Daon

Identity and access

Daon, The Digital Identity Trust company, empowers organizations worldwide to establish customer trust through intelligent identity

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedCyber Essentials mark, CertReports state Vendor-stated
1 verified · 10 stated2 Nov 2026
Palo Alto Networks logo

Palo Alto Networks

Identity and access

Protect your organization with

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state VerifiedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-stated
1 verified · 15 stated2 Nov 2026
CyberFOX logo

CyberFOX

Identity and access

CyberFOX provides MSPs and IT Pros with identity access management (IAM) solutions in password management and privileged access

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedISO 42001 mark, CertReports state Vendor-stated
1 verified · 8 stated2 Nov 2026
Delinea logo

Delinea

Identity and access

Try Delinea's AI-driven identity security, authorization and PAM solutions to secure privileged access across your organization in real

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedSOC 1 mark, CertReports state Vendor-statedDPF mark, CertReports state Expired
6 stated2 Nov 2026

Understand GDPR evidence

All articles