Ory
Security and trust center evidence
Ory delivers identity and access management (IAM) for applications, enterprises, and AI
Summary
Ory has 1 registry-verified row in the CertReports index, last verified 2 Nov 2026. The strongest row is EU-US Data Privacy Framework: Active: EU-US Certification, SW-US Certification, UK Extension Certification. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 17 Sep 2026, Ory is listed as active in the EU-US Data Privacy Framework registry under the EU-US Certification, SW-US Certification, and UK Extension Certification. As of 17 Sep 2026, the EU-US Data Privacy Framework listing for Ory shows an original certification date of 30 May 2024. As of 17 Sep 2026, the EU-US Data Privacy Framework listing for Ory carries a current expiry date of 4 May 2027. As of 17 Sep 2026, no public evidence found for SOC 2, ISO/IEC 27001, or GDPR for Ory. As of 17 Sep 2026, no public evidence found for HIPAA for Ory, so no BAA is confirmed.
- Listed active in EU-US Data Privacy Framework registry - EU-US Certification, SW-US Certification, UK Extension Certification (as of 17 Sep 2026)
- Original certification 30 May 2024, current expiry 4 May 2027 (as of 17 Sep 2026)
- No public evidence found for SOC 2, ISO/IEC 27001, GDPR, or HIPAA (as of 17 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 27 Sep 2026; it is regenerated whenever a row changes.
Among identity and access vendors
1verified rows
Category median 1, across 78 indexed identity and access vendors. Ory has more verified rows than 42 percent of them.
access managementauthenticationidentity managementsso
Compliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Similar vendors with evidence
Related by product tags and the Identity and access category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
ClassLink
Identity and access
ClassLink is a provider of identity and access management products offering instant access to apps and files with SSO, class rostering
Okta
Identity and access
Okta is an Identity-as-a-Service (IDaaS) platform that provides a comprehensive suite of services focused on managing and securing user
HID Global
Identity and access
HID Global is the trusted leader in products, services, and solutions related to the creation, management, and use of trusted identities
LoginRadius
Identity and access
LoginRadius is a leading provider of cloud-based Customer Identity and Access Management solutions for mid-to-large sized
Evidence against regulations
All regulations for OryHow much of each regulation’s vendor requirements Ory’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read