Skip to main content
OneLogin by One Identity logo

OneLogin by One Identity

Security and trust center evidence

oneidentity.comLast verified 18 Sep 2026
Request the report Are you OneLogin by One Identity?

Summary

SOC 2 mark, CertReports state Vendor-stated as of 18 Sep 2026SOC 2Vendor-statedISO/IEC 27001 mark, CertReports state Vendor-stated as of 18 Sep 2026ISO 27001Vendor-statedISO/IEC 27701 mark, CertReports state Vendor-stated as of 18 Sep 2026ISO 27701Vendor-statedSOC 1 mark, CertReports state Vendor-stated as of 18 Sep 2026SOC 1Vendor-statedSOC 3 mark, CertReports state Vendor-stated as of 18 Sep 2026SOC 3Vendor-statedISO/IEC 27017 mark, CertReports state Vendor-stated as of 18 Sep 2026ISO 27017Vendor-statedISO/IEC 27018 mark, CertReports state Vendor-stated as of 18 Sep 2026ISO 27018Vendor-statedEU-US Data Privacy Framework mark, CertReports state Expired as of 17 Sep 2026DPFExpired

OneLogin by One Identity has 7 vendor-stated rows, and 1 expired in the CertReports index, last verified 18 Sep 2026. The strongest row is SOC 2: Vendor states SOC 2 Type 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 18 Sep 2026, CertReports holds 7 vendor-stated rows and 1 expired row for OneLogin by One Identity, drawn from its trust centre (Vanta) and the Data Privacy Framework list. OneLogin by One Identity states on its trust centre that it holds a SOC 2 Type II report, an ISO/IEC 27001 certificate, an ISO/IEC 27701 certificate, a SOC 1 Type II report, a public SOC 3 report, an ISO/IEC 27017 certificate and an ISO/IEC 27018 certificate, captured 18 Sep 2026; these are vendor statements, not independent confirmations. OneLogin by One Identity previously appeared with EU-US Data Privacy Framework evidence, but the listing is no longer active and CertReports found no renewal as of 17 Sep 2026. No public evidence was found for HIPAA, GDPR, PCI DSS and FedRAMP as of 18 Sep 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.

  • SOC 2: Vendor states SOC 2 Type 2 on its trust centre, vendor-stated as of 18 Sep 2026
  • ISO/IEC 27001: Vendor states ISO 27001:2022 on its trust centre, vendor-stated as of 18 Sep 2026
  • EU-US Data Privacy Framework: Inactive, expired as of 17 Sep 2026

Facts only, each dated; nothing here is inferred, scored or advised.

Evidence count

0verified rows

Compliance grid

No public evidence yet for HIPAA, GDPR, FedRAMP, PCI DSS, CSA STAR, Cyber Essentials, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors (14)

  • AD
    Accolite DigitalContract Staff · India
  • AW
    Amazon Wed Services (AWS)Customer Support · US East
  • Cisco WebEx logo
    Cisco WebExCustomer Support · USA
  • DA
    DeltaGen.AIAI Support for Technical Questions · Worldwide
  • Genesys Cloud CX logo
    Genesys Cloud CXCustomer Support · US West
  • LI
    LiveHelpNowCustomer Support · USA
  • Microsoft Azure logo
    Microsoft AzureCustomer Support · Ireland, Netherlands, Hong Kong, Singapore, India, Australia, US East - Virginia, US West - Washington
  • Mindtickle logo
    MindtickleSales Enablement · US East
  • OpenAI logo
    OpenAIAI within our products · US and Europe
  • Postman logo
    PostmanCustomer Support · USA and EU
  • SA
    SalesforceCustomer Support · USA
  • SendGrid logo
    SendGridCustomer Support · USA
  • Vanta logo
    VantaCompliance · San Francisco, California
  • VI
    VitallyCustomer Support · USA

Change history

  1. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  2. 18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
  3. 18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
  4. 18 Sep 2026ISO/IEC 27701 evidence addedA ISO/IEC 27701 row entered the index with state Vendor-stated.
  5. 18 Sep 2026SOC 1 evidence addedA SOC 1 row entered the index with state Vendor-stated.
  6. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  7. 18 Sep 2026SOC 3 evidence addedA SOC 3 row entered the index with state Vendor-stated.
  8. 18 Sep 2026Subprocessor added: Accolite DigitalAccolite Digital appeared on the subprocessor list.
  9. 18 Sep 2026Subprocessor added: Amazon Wed Services (AWS)Amazon Wed Services (AWS) appeared on the subprocessor list.
  10. 18 Sep 2026Subprocessor added: Cisco WebExCisco WebEx appeared on the subprocessor list.