Summary
Ooma has 1 registry-verified row in the CertReports index, last verified 26 Oct 2026. The strongest row is EU-US Data Privacy Framework: Active: UK Extension Certification, EU-US Certification, SW-US Certification. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 17 Sep 2026, Ooma is listed in the EU-US Data Privacy Framework registry as active across the EU-US Certification, the UK Extension Certification and the SW-US Certification, with the certification originally issued on 20 Nov 2019 and set to run through 24 Nov 2026. No public evidence found for SOC 2 as of 17 Sep 2026. No public evidence found for ISO/IEC 27001 as of 17 Sep 2026. No public evidence found for PCI DSS as of 17 Sep 2026. No public evidence found for FedRAMP as of 17 Sep 2026.
- EU-US Data Privacy Framework - listed in the DPF registry as active (EU-US, SW-US, UK Extension), issued 20 Nov 2019, through 24 Nov 2026 (as of 17 Sep 2026)
- SOC 2 - no public evidence found as of 17 Sep 2026
- ISO/IEC 27001, PCI DSS, FedRAMP - no public evidence found as of 17 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Evidence count
1verified rows
callingphone-systemunified-communicationsvoip
Compliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Evidence against regulations
All regulations for OomaHow much of each regulation’s vendor requirements Ooma’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read