Oracle NetSuite

Finance & Payments United States Website Reviewed Sept. 2, 2026

Cloud ERP for mid-market businesses: financials, order management, inventory, projects and reporting.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001 Accredited third-party certification body NetSuite production service and supporting ISMS — — Current
SOC 1 Type II and SOC 2 Type II Independent third-party auditor NetSuite service; reports available to customers under NDA — — Current
PCI DSS Qualified Security Assessor NetSuite payment handling components — — Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
PCI DSS v4.0
Partial
Applies to NetSuite payment handling components
GDPR 2016/679
Full
Processor under the Oracle DPA; EU data centre options available
Sarbanes-Oxley (SOX)
Partial
NetSuite SOC 1 supports customer SOX controls over financial reporting

Assess Oracle NetSuite in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register