Oracle

Cloud & Infrastructure United States Website Reviewed Sept. 2, 2026

Oracle Cloud Infrastructure, Oracle Database and Fusion Cloud applications for ERP, HCM and CX.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body Oracle Cloud Infrastructure and in-scope Oracle Cloud services Current
ISO/IEC 27017:2015 and ISO/IEC 27018:2019 Accredited third-party certification body Cloud security controls and protection of PII in public cloud for Oracle Cloud Current
SOC 1, SOC 2 and SOC 3 Type II Independent third-party auditor In-scope Oracle Cloud services; SOC 1 and SOC 2 available to customers under NDA Current
PCI DSS Qualified Security Assessor In-scope Oracle Cloud Infrastructure services Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
Confirm which Oracle Cloud services are named on the certificate
SOC 2 Type 2
Full
GDPR 2016/679
Full
Oracle acts as processor under its Data Processing Agreement; SCCs and UK IDTA available
PCI DSS v4.0
Partial
Applies to in-scope OCI services only
HIPAA Security
Partial
HIPAA BAA available for eligible Oracle Cloud services

Assess Oracle in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.