Skip to main content
OneStream Software logo

OneStream Software

Security and trust center evidence

OneStream Software provides a revolutionary corporate performance management (CPM) solution that unifies and simplifies financial

onestream.comFinance and accountingLast verified 1 Nov 2026
Request the report Are you OneStream Software?

Summary

SOC 2 mark, CertReports state Vendor-stated as of 21 Sep 2026SOC 2Vendor-statedGDPR mark, CertReports state Vendor-stated as of 21 Sep 2026GDPRVendor-statedFedRAMP mark, CertReports state Verified as of 1 Nov 2026FedRAMPVerifiedISO/IEC 27001 mark, CertReports state Vendor-stated as of 21 Sep 2026ISO 27001Vendor-statedCSA STAR mark, CertReports state Verified as of 26 Oct 2026CSA STARVerifiedSOC 1 mark, CertReports state Vendor-stated as of 21 Sep 2026SOC 1Vendor-statedEU-US Data Privacy Framework mark, CertReports state Verified as of 26 Oct 2026DPFVerifiedTX-RAMP mark, CertReports state Vendor-stated as of 21 Sep 2026TX-RAMPVendor-stated

OneStream Software has 3 registry-verified rows and 5 vendor-stated rows in the CertReports index, last verified 1 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 TYPE II on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 21 Sep 2026, OneStream Software states on its trust centre that it holds a SOC 2 Type II report and a SOC 1 Type II report. As of 21 Sep 2026, OneStream Software also states it meets GDPR requirements, holds ISO/IEC 27001:2022 certification, and maintains TX-RAMP status. As of 09 Oct 2026, OneStream Software is listed in the FedRAMP registry as Authorized, with authorization dated 24 Jan 2025 and assessment performed by First Information Technology Services, Inc. As of 05 Oct 2026, OneStream Software is listed in the CSA STAR registry (Level 1, issued 23 Feb 2022) and the EU-US Data Privacy Framework registry as active through 20 Feb 2027. Overall, the rows combine a FedRAMP Authorized listing, CSA STAR and Data Privacy Framework registry entries, and vendor-stated SOC, GDPR, and ISO/IEC 27001 claims across Sep and Oct 2026.

  • FedRAMP: listed as Authorized in FedRAMP registry as of 09 Oct 2026 (authorized 24 Jan 2025)
  • CSA STAR and EU-US Data Privacy Framework: verified registry listings as of 05 Oct 2026 (CSA STAR issued 23 Feb 2022; DPF valid through 20 Feb 2027)
  • SOC 1, SOC 2, GDPR, ISO/IEC 27001, TX-RAMP: vendor-stated on trust centre as of 21 Sep 2026

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 10 Oct 2026; it is regenerated whenever a row changes.

Among finance and accounting vendors

3verified rows

Category median 1, across 176 indexed finance and accounting vendors. OneStream Software has more verified rows than 98 percent of them.

budgetingcorporate performance managementfinancial consolidationfinancial planningreporting

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, PCI DSS, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Subprocessors (7)

Security profile

Pen test cadence
annual
Trains on customer data
no

Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.

Change history

  1. 22 Sep 2026AI training policy changedTraining on customer data moved from unknown to no.
  2. 18 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.
  3. 18 Sep 2026SOC 1 evidence addedA SOC 1 row entered the index with state Vendor-stated.
  4. 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
  5. 18 Sep 2026TX-RAMP evidence addedA TX-RAMP row entered the index with state Vendor-stated.
  6. 18 Sep 2026Subprocessor added: Amazon Web Services, Inc. and its affiliatesAmazon Web Services, Inc. and its affiliates appeared on the subprocessor list.
  7. 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
  8. 18 Sep 2026Subprocessor added: Microsoft Corporation and its affiliatesMicrosoft Corporation and its affiliates appeared on the subprocessor list.
  9. 18 Sep 2026Subprocessor added: Okta Inc. and its affiliatesOkta Inc. and its affiliates appeared on the subprocessor list.
  10. 18 Sep 2026Subprocessor added: OneStream’s Affiliates, including OneStream Software LLC, OneStream Software Ltd, OneStream Software Pty Ltd, and OneStream Software BVOneStream’s Affiliates, including OneStream Software LLC, OneStream Software Ltd, OneStream Software Pty Ltd, and OneStream Software BV appeared on the subprocessor list.

Similar vendors with evidence

Related by product tags and the Finance and accounting category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.

Abacum logo

Abacum

Finance and accounting

The AI-native FP&A platform that helps Finance teams drive business…

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-stated
3 stated30 Sep 2026
Solver logo

Solver

Analytics

Solver provides AI-accelerated financial planning and analysis (FP&A) software that unifies planning, reporting, consolidation, and

DPF mark, CertReports state Expired
26 Oct 2026
Cipher Business Solutions logo

Cipher Business Solutions

Business services

EPM consulting and software across SAP and Infor: budgeting, forecasting, financial consolidation, planning, and strategy

DPF mark, CertReports state Verified
1 verified26 Oct 2026
Planful logo

Planful

Research and data providers

Achieve peak financial performance with

DPF mark, CertReports state Expired
26 Oct 2026

Evidence against regulations

All regulations for OneStream Software

How much of each regulation’s vendor requirements OneStream Software’s public evidence reaches.

Reviewing a vendor on public evidence

All articles