Onspring Technologies
Security and trust center evidence
Onspring makes reporting, analysis, process management and coordination refreshingly
Summary
Onspring Technologies has 2 registry-verified rows in the CertReports index, last verified 2 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2 Nov 2026, CertReports holds 2 registry-verified rows for Onspring Technologies, drawn from FedRAMP Marketplace and the CSA STAR registry. Onspring Technologies is listed in the FedRAMP Marketplace for FedRAMP (FedRAMP Authorized), dated 27 Mar 2024, assessed by Emagine IT. No public evidence was found for SOC 2, ISO/IEC 27001, HIPAA and GDPR as of 2 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- FedRAMP: FedRAMP Authorized, verified as of 2 Nov 2026
- CSA STAR: STAR Level 1 self-assessment (CAIQ), verified as of 26 Oct 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among compliance and grc vendors
2verified rows
Category median 1, across 179 indexed compliance and grc vendors. Onspring Technologies has more verified rows than 89 percent of them.
grcprocess managementreportingrisk management
Compliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports2 evidence rows across 2 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Compliance and GRC category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
LogicGate
Compliance and GRC
The LogicGate Risk Cloud™ is an agile GRC cloud solution that combines powerful functionality with intuitive design to enhance enterprise
Paramify
Compliance and GRC
The Paramify Cloud (Paramify) is a software platform that automates risk management processes—including compliance planning, solution
Metricstream
Compliance and GRC
MetricStream offers Governance, Risk Management and Compliance (GRC) software solutions that allow companies across industries to
Assurance Software
Compliance and GRC
Riskonnect and Castellan have joined forces to bring innovative, configurable risk management technology to a global
Evidence against regulations
All regulations for Onspring TechnologiesHow much of each regulation’s vendor requirements Onspring Technologies’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read