OpenText

Security and trust center evidence

OpenText™ Core Legal Hold is a simple, powerful cloud-based litigation hold notification software that helps law departments automate

opentext.com Legal techLast verified 1 Nov 2026

Vendor website Are you OpenText?

FedRAMPVerified

CSA STARVerified

DPFExpired

OpenText has 2 registry-verified rows, and 1 expired in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

OpenText is listed in the FedRAMP registry as FedRAMP Authorized, assessed by Schellman Compliance, LLC and issued 21 Aug 2024 (FedRAMP, as of 28 Sep 2026). OpenText is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ), submitted 17 Dec 2024 (CSA STAR, as of 17 Sep 2026). OpenText's EU-US Data Privacy Framework listing is inactive; the certification was originally issued 30 May 2018 and is no longer active (EU-US Data Privacy Framework, as of 17 Sep 2026). No public evidence was found for SOC 2, ISO/IEC 27001, HIPAA or GDPR. The FedRAMP and CSA STAR listings are the only currently active registry entries; the Data Privacy Framework listing is inactive (FedRAMP, as of 28 Sep 2026; CSA STAR, as of 17 Sep 2026; EU-US Data Privacy Framework, as of 17 Sep 2026).

FedRAMP Authorized, assessed by Schellman Compliance, LLC, issued 21 Aug 2024 (FedRAMP, as of 28 Sep 2026).
CSA STAR Level 1 self-assessment (CAIQ), submitted 17 Dec 2024 (CSA STAR, as of 17 Sep 2026).
EU-US Data Privacy Framework listing inactive; originally issued 30 May 2018 (as of 17 Sep 2026).

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 29 Sep 2026; it is regenerated whenever a row changes.

Among legal tech vendors

2verified rows

Category median 1, across 44 indexed legal tech vendors. OpenText has more verified rows than 89 percent of them.

ediscoverylaw department softwarelegal holdlitigation hold

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for HIPAA, SOC 2, GDPR, PCI DSS, ISO 27001, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.

Subprocessors

No subprocessor list captured yet.

Change history

28 Sep 2026FedRAMP auditor changedAuditor changed from Lunarline, Inc. to Schellman Compliance, LLC.
19 Sep 2026FedRAMP auditor changedAuditor changed from Schellman Compliance, LLC to Lunarline, Inc..