SailPoint Technologies
Compliance evidence
SailPoint is the leader in enterprise cloud identity
Compliance grid
SOC 2Vendor-statedVendor states SOC 2 Type 2 on its trust centre
as of 21 Sep 20262 sources
FedRAMPVerifiedFedRAMP Authorized
as of 2 Nov 202647 sources · Fortreum, LLC
ISO/IEC 27001Vendor-statedVendor states ISO/IEC 27001:2022 on its trust centre
as of 21 Sep 20262 sources
CSA STARVerifiedSTAR Level 2 certification
as of 26 Oct 20266 sources
ISO/IEC 27701Vendor-statedVendor states ISO/IEC 27701 on its trust centre
as of 21 Sep 20262 sources- SOC 1Vendor-stated
Vendor states SOC 1 Type 2 on its trust centre
as of 21 Sep 20262 sources - SOC 3Vendor-stated
Vendor states SOC 3 on its trust centre
as of 21 Sep 20262 sources 
ISO/IEC 27017Vendor-statedVendor states ISO/IEC 27017:2015 on its trust centre
as of 21 Sep 20262 sources
ISO/IEC 27018Vendor-statedVendor states ISO/IEC 27018:2019 on its trust centre
as of 21 Sep 20262 sources
EU-US Data Privacy FrameworkVerifiedActive: SW-US Certification, EU-US Certification, UK Extension Certification
as of 2 Nov 20261 source
GovRAMPVendor-statedVendor states GovRAMP on its trust centre
as of 21 Sep 20262 sources
BSI C5Vendor-statedVendor states C5 on its trust centre
as of 21 Sep 20262 sources
IRAPVendor-statedVendor states IRAP on its trust centre
as of 21 Sep 20262 sources
No public evidence yet for HIPAA, GDPR, PCI DSS, Cyber Essentials, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.
Official framework marks identify the scheme each row is about; the CertReports state chip beside each mark is our assessment of the public evidence. How states are decided.