Oracle America Inc. CrowdTwist
Security and trust center evidence
Whistic enables organizations to assess, publish and share security
Summary
Oracle America Inc. CrowdTwist has 1 registry-verified row and 2 third-party reported rows, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: CSA STAR Level 2 attestation on the registry, which is built on a SOC 2 examination. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2 Nov 2026, CertReports holds 1 registry-verified row and 1 expired row for Oracle America Inc. CrowdTwist, drawn from the CSA STAR registry and the Data Privacy Framework list. Oracle America Inc. Oracle America Inc. No public evidence was found for HIPAA, GDPR, PCI DSS and FedRAMP as of 2 Nov 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- CSA STAR: STAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider, verified as of 26 Oct 2026
- EU-US Data Privacy Framework: Inactive, expired as of 2 Nov 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among compliance and grc vendors
1verified rows
Category median 1, across 179 indexed compliance and grc vendors. Oracle America Inc. CrowdTwist has more verified rows than 47 percent of them.
security questionnairestrust centervendor risk managementvendor security assessments
Compliance grid
SOC 2ReportedCSA STAR Level 2 attestation on the registry, which is built on a SOC 2 examination
as of 26 Oct 20266 sources
ISO/IEC 27001ReportedCSA STAR Level 2 certification on the registry, which is built on an ISO/IEC 27001 certification
as of 26 Oct 20265 sources
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkExpiredInactive
as of 2 Nov 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 29 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Reported.
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Compliance and GRC category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
ProcessBolt
Compliance and GRC
Straightforward vendor risk management for healthcare, financial, and legal
VendorVigilance
Compliance and GRC
VendorVigilance enables companies to automate and streamline oversight of vendor relationships, managing third-party risk throughout the
OneTrust
Compliance and GRC
OneTrust’s mission is to enable organizations to use data and AI
Black Kite
Compliance and GRC
At Black Kite, we’re redefining vendor risk management with the world’s first global third-party cyber risk monitoring platform, built from
Evidence against regulations
All regulations for Oracle America Inc. CrowdTwistHow much of each regulation’s vendor requirements Oracle America Inc. CrowdTwist’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read