The EU-US Data Privacy Framework, explained for vendor reviews
Solomon Amos · 7 Sep 2026 · 10 min read
Regulatory evidence
OneStream Software provides a revolutionary corporate performance management (CPM) solution that unifies and simplifies financial
For each regulation, how many of the requirements it places on your vendors OneStream Software’s public evidence reaches. Open one for every item with its date and source.
What the vendor lists, typed; public items can be read now, the rest are available on request.
18 documents listed on OneStream Software’s trust centre
trust.onestream.comAnswers the vendor publishes to questions buyers ask, quoted with the link to where it says so.
Where data is hosted or processed
Where can I find OneStream's Data Processing Terms?
“OneStream's Data Processing Terms can be found on OneStream's Commercial Terms and Conditions site here.”
as of 21 Sep 2026Source
Where data is hosted or processed
Where are OneStream services geographically hosted?
“Data center locations for OneStream can be found here.”
as of 21 Sep 2026Source
Where data is hosted or processed
Where are OneStream AI Services hosted?
“AI services made available to each customer are hosted in the data center agreed by the parties in their signed agreement.”
as of 21 Sep 2026Source
Encryption
Does OneStream encrypt data at rest?
“Yes, all data within OneStream is encrypted using Advanced Encryption Standard 256-bit key encryption (AES-256).”
as of 21 Sep 2026Source
Encryption
Does OneStream encrypt data in transit?
“Yes, all data in transit is sent using TLS 1.2+ everywhere data is transmitted.”
as of 21 Sep 2026Source
Use of customer data to train models
Does OneStream use customer data to train its models?
“No, OneStream does not use customer data to train its models. OneStream maintains clear boundaries around data usage: - All customer data is stored within a dedicated customer instance that is logically separated. - For non-generative AI solutions, OneStream trains specialized models specifically for customer implementation using only customer data. - For generative AI offerings, OneStream leverages pre-trained mo...”
as of 21 Sep 2026Source
Penetration testing
Does OneStream conduct penetration tests?
“OneStream engages an independent 3rd party to perform regular penetration testing against a "like customer" environment. An executive summary of Penetration Test results is made available to customers via OneStream's Solution Exchange.”
as of 21 Sep 2026Source
Solomon Amos · 7 Sep 2026 · 10 min read
CertReports Research · 18 Sep 2026 · 12 min read
This maps third-party obligations to the vendor evidence that may support them. It is not legal advice and never a statement that a vendor or its customers comply; confirm scope and sufficiency with your counsel or auditor. “No public evidence” means nothing public was found at the last check. Citations link to the official text.