Skip to main content
OneLogin by One Identity logo

OneLogin by One Identity

Security and trust center evidence

oneidentity.comLast verified 3 Nov 2026
Request the report Are you OneLogin by One Identity?

Summary

SOC 2 mark, CertReports state Verified as of 3 Nov 2026SOC 2VerifiedISO/IEC 27001 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27001Vendor-statedISO/IEC 27701 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27701Vendor-statedSOC 1 mark, CertReports state Vendor-stated as of 21 Sep 2026SOC 1Vendor-statedSOC 3 mark, CertReports state Verified as of 3 Nov 2026SOC 3VerifiedISO/IEC 27017 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27017Vendor-statedISO/IEC 27018 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27018Vendor-statedEU-US Data Privacy Framework mark, CertReports state Expired as of 2 Nov 2026DPFExpired

OneLogin by One Identity has 2 registry-verified rows and 5 vendor-stated rows, and 1 expired in the CertReports index, last verified 3 Nov 2026. The strongest row is SOC 2: Evidenced by the public SOC 3 report for the same examination period. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 3 Nov 2026, CertReports holds 2 registry-verified rows, 5 vendor-stated rows and 1 expired row for OneLogin by One Identity, drawn from soc3, its trust centre (Vanta) and the Data Privacy Framework list. OneLogin by One Identity publishes a SOC 3 report in which an independent service auditor found its controls effective against the trust services criteria for the period 1 Oct 2024 to 30 Sep 2025, the examination a SOC 2 Type II report covers. OneLogin by One Identity states on its trust centre that it holds an ISO/IEC 27001 certificate, an ISO/IEC 27701 certificate, a SOC 1 Type II report, an ISO/IEC 27017 certificate and an ISO/IEC 27018 certificate, captured 21 Sep 2026; these are vendor statements, not independent confirmations. OneLogin by One Identity previously appeared with EU-US Data Privacy Framework evidence, but the listing is no longer active and CertReports found no renewal as of 2 Nov 2026. No public evidence was found for HIPAA, GDPR, PCI DSS and FedRAMP as of 3 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.

  • SOC 2: Evidenced by the public SOC 3 report for the same examination period, verified as of 3 Nov 2026
  • SOC 3: Public SOC 3 report on the vendor's trust centre, verified as of 3 Nov 2026
  • ISO/IEC 27001: Vendor states ISO 27001:2022 on its trust centre, vendor-stated as of 21 Sep 2026

Facts only, each dated; nothing here is inferred, scored or advised.

Evidence count

2verified rows

Compliance grid

No public evidence yet for HIPAA, GDPR, FedRAMP, PCI DSS, CSA STAR, Cyber Essentials, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors (14)

  • AD
    Accolite DigitalContract Staff · India
  • AW
    Amazon Wed Services (AWS)Customer Support · US East
  • Cisco WebEx logo
    Cisco WebExCustomer Support · USA
  • DA
    DeltaGen.AIAI Support for Technical Questions · Worldwide
  • Genesys Cloud CX logo
    Genesys Cloud CXCustomer Support · US West
  • LI
    LiveHelpNowCustomer Support · USA
  • Microsoft Azure logo
    Microsoft AzureCustomer Support · Ireland, Netherlands, Hong Kong, Singapore, India, Australia, US East - Virginia, US West - Washington
  • Mindtickle logo
    MindtickleSales Enablement · US East
  • OpenAI logo
    OpenAIAI within our products · US and Europe
  • Postman logo
    PostmanCustomer Support · USA and EU
  • Salesforce logo
    SalesforceCustomer Support · USA
  • SendGrid logo
    SendGridCustomer Support · USA
  • Vanta logo
    VantaCompliance · San Francisco, California
  • VI
    VitallyCustomer Support · USA

Security profile

Pen test cadence
report available

Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.

Change history

  1. 25 Sep 2026SOC 2 state changedState moved from Vendor-stated to Verified.
  2. 25 Sep 2026SOC 3 state changedState moved from Vendor-stated to Verified.
  3. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  4. 18 Sep 2026ISO/IEC 27017 evidence addedA ISO/IEC 27017 row entered the index with state Vendor-stated.
  5. 18 Sep 2026ISO/IEC 27018 evidence addedA ISO/IEC 27018 row entered the index with state Vendor-stated.
  6. 18 Sep 2026ISO/IEC 27701 evidence addedA ISO/IEC 27701 row entered the index with state Vendor-stated.
  7. 18 Sep 2026SOC 1 evidence addedA SOC 1 row entered the index with state Vendor-stated.
  8. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  9. 18 Sep 2026SOC 3 evidence addedA SOC 3 row entered the index with state Vendor-stated.
  10. 18 Sep 2026Subprocessor added: Accolite DigitalAccolite Digital appeared on the subprocessor list.

Evidence against regulations

All regulations for OneLogin by One Identity

How much of each regulation’s vendor requirements OneLogin by One Identity’s public evidence reaches.

Reviewing a vendor on public evidence

All articles