Snapshot 22402
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content OneStream The only enterprise Finance platform that unifies your financial and operational data and extends to meet your changing needs. At OneStream, we believe the future of business (and the world) relies on freeing Finance to be strategic, innovate, and drive sustainable growth. That’s why we’ve built the operating system for Modern Finance. At OneStream, we believe the future of business (and the world) depends on freeing finance to think strategically, foster innovation, and drive sustainable growth. [email protected] Privacy PolicyOpens in new tab We invite you to subscribe for updates to stay informed about the latest advancements in our security and compliance initiatives. Compliance FedRAMP Rev. 5 GDPR ISO 27001:2022 SOC 1 TYPE II SOC 2 TYPE II TX-RAMP Resources View all Third-Party Assessments OneStream 2026 Commercial & Government SOC 1 Type II - 03/31/26 OneStream 2025 Commercial & Government SOC 2 Type II - 09/30/25 OneStream 2025 Commercial & Government SOC 1 Type II - 09/30/25 View 9 more Compliance BCP/DR/IR Summary Statement - 2025 DORA Compliance Statement Penetration Tests 2026 OneStream R1 VMSS Penetration Test Report 2025 Platform Next-Gen Penetration Test Report 2025 Platform Penetration Test Report - OneStream v9.1 Questionnaires OneStream Standard SIG 2026 Core 2025 OneStream CSA STAR Level 1 CAIQ v4.0.3Opens in new tab Policies Information Security Policy Code of Business Conduct and Ethics Opens in new tab Cloud Privacy Policy Data Subject Rights Procedure for Customers View 2 more Environmental, Social, and Governance (ESG) ESG at OneStream FAQ OneStream Software LLC SB261 Climate Risk Report -2025 Miscellaneous AI at OneStream_FAQ Privacy at OneStream_FAQ How to Obtain Microsoft Azure SOC Reports OneStream v9.1 VPAT View 1 more Controls View all Organizational & Operational Security GRC Program Management Vendor Risk Management Security Awareness Training View 12 more Organizational & Operational Security controls Infrastructure & Application Security Secure Secrets Storage Event Logging & Monitoring Network Segmentation View 12 more Infrastructure & Application Security controls AI Security & Compliance AI Efficient and Continuous Improvement AI Strategic Planning and Prioritization Controlled AI Deployment and Integration View 1 more AI Security & Compliance control Data & Privacy Backup & Recovery of Production Data Data Classification & Retention Data Deletion View 2 more Data & Privacy controls Data collected Customer-defined personal data Financial data Organization and account information (e.g., name, contact details, job title, company) Technical data (e.g., IP address, operating system, location) Cookie data Telemetry data Credit card information Personal health information Subprocessors View all Amazon Web Services, Inc. and its affiliates • Email services USA Transfer Mechanism Subject to EU Standard Contractual Clauses CONTACT: Amazon Web Services, Inc. ATTN: AWS Legal 410 Terry Avenue North Seattle, WA 98109-5210, USA Dynatrace, Inc • Application Performance Tool USA Transfer Mechanism Subject to EU Standard Contractual Clauses CONTACT: [email protected] Microsoft Corporation and its affiliates • See Description See Description Transfer Mechanism Subject to EU Standard Contractual Clauses Purpose/Description of Processing: Hosting services and related managed services For SensibleAI Solutions customers: Prompt processing via the AI models supported by Microsoft Foundry, as detailed in the Documentation at documentation.onestream.com For hosting services and related managed services (unless otherwise agreed in the Agreement): Americas: USA Europe: European Economic Area & United Kingdom APAC: Australia For SensibleAI Solutions customers: USA Canada European Economic Area United Kingdom Japan South Korea Australia South Africa United Arab Emirates Brazil India CONTACT: Microsoft Enterprise Service Privacy Microsoft Corporation One Microsoft Way Redmond, WA 98052, USA Okta Inc. and its affiliates • Access management services USA Transfer Mechanism Subject to EU Standard Contractual Clauses CONTACT: [email protected] Updates View all Compliance OneStream's 06/30 SOC Report Is Now Available Published August 11, 2026 We are excited to announce that OneStream has successfully completed another System and Organization Controls (SOC) 1 Type II audit for the period of October 1, 2025 to June 30, 2026. This report can be viewed or downloaded in the Resources area of OneStream’s Trust Center. As a reminder, we have previously announced changes to our compliance reporting schedule in 2026 which has adjusted our SOC reporting cadence. As a result, reports for this year and their issuance dates are: 3/31 SOC 1 Type II Report: April 1, 2025 – March 31, 2026 (published 5/29) 6/30 SOC 1 Type II Report: October 1, 2025 – June 30, 2026 (published 8/7) 9/30 SOC 1 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) 9/30 SOC 2 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) This adjustment ensures continued coverage of our control environment ensuring that there is no interruption in independent assurance coverage, and our commitment to maintaining a strong control framework remains unchanged. Bridge Letters will continue to be provided to ensure appropriate coverage. If you have any further questions or concerns, please reach out to [email protected]. Compliance OneStream's 03/31 SOC Report Is Now Available Published June 1, 2026 We are excited to announce that OneStream has successfully completed another System and Organization Controls (SOC) 1 Type II audit for the period of April 1, 2025 to March 31, 2026. This report can be viewed or downloaded in the Resources area of OneStream’s Trust Center. As part of an update to our compliance reporting schedule in 2026, our SOC reporting cadence will be adjusted slightly. As a result, the following reports will be issued this year: 3/31 SOC 1 Type II Report: April 1, 2025 – March 31, 2026 (published 5/29) 6/30 SOC 1 Type II Report: October 1, 2025 – June 30, 2026 (report to be issued August 2026) 9/30 SOC 1 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) 9/30 SOC 2 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) This adjustment ensures continued coverage of our control environment ensuring that there is no interruption in independent assurance coverage, and our commitment to maintaining a strong control framework remains unchanged. Bridge Letters will continue to be provided to ensure appropriate coverage. If you have any further questions or concerns, please reach out to [email protected]. Privacy Updates to OneStream's Personal Data Sub-processors – May 2026 Published June 1, 2026 OneStream has published updates to the information within its Personal Data Sub-processors ListOpens in new tab. OneStream's Personal Data Sub-processor list is viewable on our Trust Center or downloadable from OneStream's SaaS Terms and Conditions PageOpens in new tab. Privacy Updates to OneStream's Personal Data Sub-processors – February 2026 Published June 1, 2026 OneStream has published updates to the information within its Personal Data Sub-processors ListOpens in new tab. OneStream's Personal Data Sub-processor list is viewable on our Trust Center or downloadable from OneStream's SaaS Terms and Conditions PageOpens in new tab. Read more about Updates to OneStream's Personal Data Sub-processors – May 2026 OneStream The only enterprise Finance platform that unifies your financial and operational data and extends to meet your changing needs. At OneStream, we believe the future of business (and the world) relies on freeing Finance to be strategic, innovate, and drive sustainable growth. That’s why we’ve built the operating system for Modern Finance. At OneStream, we believe the future of business (and the world) depends on freeing finance to think strategically, foster innovation, and drive sustainable growth. [email protected] Privacy PolicyOpens in new tab We invite you to subscribe for updates to stay informed about the latest advancements in our security and compliance initiatives. Compliance FedRAMP Rev. 5 GDPR ISO 27001:2022 SOC 1 TYPE II SOC 2 TYPE II TX-RAMP Resources View all Third-Party Assessments OneStream 2026 Commercial & Government SOC 1 Type II - 03/31/26 OneStream 2025 Commercial & Government SOC 2 Type II - 09/30/25 OneStream 2025 Commercial & Government SOC 1 Type II - 09/30/25 View 9 more Compliance BCP/DR/IR Summary Statement - 2025 DORA Compliance Statement Penetration Tests 2026 OneStream R1 VMSS Penetration Test Report 2025 Platform Next-Gen Penetration Test Report 2025 Platform Penetration Test Report - OneStream v9.1 Questionnaires OneStream Standard SIG 2026 Core 2025 OneStream CSA STAR Level 1 CAIQ v4.0.3Opens in new tab Policies Information Security Policy Code of Business Conduct and Ethics Opens in new tab Cloud Privacy Policy Data Subject Rights Procedure for Customers View 2 more Environmental, Social, and Governance (ESG) ESG at OneStream FAQ OneStream Software LLC SB261 Climate Risk Report -2025 Miscellaneous AI at OneStream_FAQ Privacy at OneStream_FAQ How to Obtain Microsoft Azure SOC Reports OneStream v9.1 VPAT View 1 more Controls View all Organizational & Operational Security GRC Program Management Vendor Risk Management Security Awareness Training View 12 more Organizational & Operational Security controls Infrastructure & Application Security Secure Secrets Storage Event Logging & Monitoring Network Segmentation View 12 more Infrastructure & Application Security controls AI Security & Compliance AI Efficient and Continuous Improvement AI Strategic Planning and Prioritization Controlled AI Deployment and Integration View 1 more AI Security & Compliance control Data & Privacy Backup & Recovery of Production Data Data Classification & Retention Data Deletion View 2 more Data & Privacy controls Data collected Customer-defined personal data Financial data Organization and account information (e.g., name, contact details, job title, company) Technical data (e.g., IP address, operating system, location) Cookie data Telemetry data Credit card information Personal health information Subprocessors View all Amazon Web Services, Inc. and its affiliates • Email services USA Transfer Mechanism Subject to EU Standard Contractual Clauses CONTACT: Amazon Web Services, Inc. ATTN: AWS Legal 410 Terry Avenue North Seattle, WA 98109-5210, USA Dynatrace, Inc • Application Performance Tool USA Transfer Mechanism Subject to EU Standard Contractual Clauses CONTACT: [email protected] Microsoft Corporation and its affiliates • See Description See Description Transfer Mechanism Subject to EU Standard Contractual Clauses Purpose/Description of Processing: Hosting services and related managed services For SensibleAI Solutions customers: Prompt processing via the AI models supported by Microsoft Foundry, as detailed in the Documentation at documentation.onestream.com For hosting services and related managed services (unless otherwise agreed in the Agreement): Americas: USA Europe: European Economic Area & United Kingdom APAC: Australia For SensibleAI Solutions customers: USA Canada European Economic Area United Kingdom Japan South Korea Australia South Africa United Arab Emirates Brazil India CONTACT: Microsoft Enterprise Service Privacy Microsoft Corporation One Microsoft Way Redmond, WA 98052, USA Okta Inc. and its affiliates • Access management services USA Transfer Mechanism Subject to EU Standard Contractual Clauses CONTACT: [email protected] Updates View all Compliance OneStream's 06/30 SOC Report Is Now Available Published August 11, 2026 We are excited to announce that OneStream has successfully completed another System and Organization Controls (SOC) 1 Type II audit for the period of October 1, 2025 to June 30, 2026. This report can be viewed or downloaded in the Resources area of OneStream’s Trust Center. As a reminder, we have previously announced changes to our compliance reporting schedule in 2026 which has adjusted our SOC reporting cadence. As a result, reports for this year and their issuance dates are: 3/31 SOC 1 Type II Report: April 1, 2025 – March 31, 2026 (published 5/29) 6/30 SOC 1 Type II Report: October 1, 2025 – June 30, 2026 (published 8/7) 9/30 SOC 1 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) 9/30 SOC 2 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) This adjustment ensures continued coverage of our control environment ensuring that there is no interruption in independent assurance coverage, and our commitment to maintaining a strong control framework remains unchanged. Bridge Letters will continue to be provided to ensure appropriate coverage. If you have any further questions or concerns, please reach out to [email protected]. Compliance OneStream's 03/31 SOC Report Is Now Available Published June 1, 2026 We are excited to announce that OneStream has successfully completed another System and Organization Controls (SOC) 1 Type II audit for the period of April 1, 2025 to March 31, 2026. This report can be viewed or downloaded in the Resources area of OneStream’s Trust Center. As part of an update to our compliance reporting schedule in 2026, our SOC reporting cadence will be adjusted slightly. As a result, the following reports will be issued this year: 3/31 SOC 1 Type II Report: April 1, 2025 – March 31, 2026 (published 5/29) 6/30 SOC 1 Type II Report: October 1, 2025 – June 30, 2026 (report to be issued August 2026) 9/30 SOC 1 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) 9/30 SOC 2 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) This adjustment ensures continued coverage of our control environment ensuring that there is no interruption in independent assurance coverage, and our commitment to maintaining a strong control framework remains unchanged. Bridge Letters will continue to be provided to ensure appropriate coverage. If you have any further questions or concerns, please reach out to [email protected]. Privacy Updates to OneStream's Personal Data Sub-processors – May 2026 Published June 1, 2026 OneStream has published updates to the information within its Personal Data Sub-processors ListOpens in new tab. OneStream's Personal Data Sub-processor list is viewable on our Trust Center or downloadable from OneStream's SaaS Terms and Conditions PageOpens in new tab. Privacy Updates to OneStream's Personal Data Sub-processors – February 2026 Published June 1, 2026 OneStream has published updates to the information within its Personal Data Sub-processors ListOpens in new tab. OneStream's Personal Data Sub-processor list is viewable on our Trust Center or downloadable from OneStream's SaaS Terms and Conditions PageOpens in new tab. Read more about Updates to OneStream's Personal Data Sub-processors – February 2026 OneStream The only enterprise Finance platform that unifies your financial and operational data and extends to meet your changing needs. At OneStream, we believe the future of business (and the world) relies on freeing Finance to be strategic, innovate, and drive sustainable growth. That’s why we’ve built the operating system for Modern Finance. At OneStream, we believe the future of business (and the world) depends on freeing finance to think strategically, foster innovation, and drive sustainable growth. [email protected] Privacy PolicyOpens in new tab We invite you to subscribe for updates to stay informed about the latest advancements in our security and compliance initiatives. Compliance FedRAMP Rev. 5 GDPR ISO 27001:2022 SOC 1 TYPE II SOC 2 TYPE II TX-RAMP Resources View all Third-Party Assessments OneStream 2026 Commercial & Government SOC 1 Type II - 03/31/26 OneStream 2025 Commercial & Government SOC 2 Type II - 09/30/25 OneStream 2025 Commercial & Government SOC 1 Type II - 09/30/25 View 9 more Compliance BCP/DR/IR Summary Statement - 2025 DORA Compliance Statement Penetration Tests 2026 OneStream R1 VMSS Penetration Test Report 2025 Platform Next-Gen Penetration Test Report 2025 Platform Penetration Test Report - OneStream v9.1 Questionnaires OneStream Standard SIG 2026 Core 2025 OneStream CSA STAR Level 1 CAIQ v4.0.3Opens in new tab Policies Information Security Policy Code of Business Conduct and Ethics Opens in new tab Cloud Privacy Policy Data Subject Rights Procedure for Customers View 2 more Environmental, Social, and Governance (ESG) ESG at OneStream FAQ OneStream Software LLC SB261 Climate Risk Report -2025 Miscellaneous AI at OneStream_FAQ Privacy at OneStream_FAQ How to Obtain Microsoft Azure SOC Reports OneStream v9.1 VPAT View 1 more Controls View all Organizational & Operational Security GRC Program Management Vendor Risk Management Security Awareness Training View 12 more Organizational & Operational Security controls Infrastructure & Application Security Secure Secrets Storage Event Logging & Monitoring Network Segmentation View 12 more Infrastructure & Application Security controls AI Security & Compliance AI Efficient and Continuous Improvement AI Strategic Planning and Prioritization Controlled AI Deployment and Integration View 1 more AI Security & Compliance control Data & Privacy Backup & Recovery of Production Data Data Classification & Retention Data Deletion View 2 more Data & Privacy controls Data collected Customer-defined personal data Financial data Organization and account information (e.g., name, contact details, job title, company) Technical data (e.g., IP address, operating system, location) Cookie data Telemetry data Credit card information Personal health information Subprocessors View all Amazon Web Services, Inc. and its affiliates • Email services USA Transfer Mechanism Subject to EU Standard Contractual Clauses CONTACT: Amazon Web Services, Inc. ATTN: AWS Legal 410 Terry Avenue North Seattle, WA 98109-5210, USA Dynatrace, Inc • Application Performance Tool USA Transfer Mechanism Subject to EU Standard Contractual Clauses CONTACT: [email protected] Microsoft Corporation and its affiliates • See Description See Description Transfer Mechanism Subject to EU Standard Contractual Clauses Purpose/Description of Processing: Hosting services and related managed services For SensibleAI Solutions customers: Prompt processing via the AI models supported by Microsoft Foundry, as detailed in the Documentation at documentation.onestream.com For hosting services and related managed services (unless otherwise agreed in the Agreement): Americas: USA Europe: European Economic Area & United Kingdom APAC: Australia For SensibleAI Solutions customers: USA Canada European Economic Area United Kingdom Japan South Korea Australia South Africa United Arab Emirates Brazil India CONTACT: Microsoft Enterprise Service Privacy Microsoft Corporation One Microsoft Way Redmond, WA 98052, USA Okta Inc. and its affiliates • Access management services USA Transfer Mechanism Subject to EU Standard Contractual Clauses CONTACT: [email protected] Updates View all Compliance OneStream's 06/30 SOC Report Is Now Available Published August 11, 2026 We are excited to announce that OneStream has successfully completed another System and Organization Controls (SOC) 1 Type II audit for the period of October 1, 2025 to June 30, 2026. This report can be viewed or downloaded in the Resources area of OneStream’s Trust Center. As a reminder, we have previously announced changes to our compliance reporting schedule in 2026 which has adjusted our SOC reporting cadence. As a result, reports for this year and their issuance dates are: 3/31 SOC 1 Type II Report: April 1, 2025 – March 31, 2026 (published 5/29) 6/30 SOC 1 Type II Report: October 1, 2025 – June 30, 2026 (published 8/7) 9/30 SOC 1 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) 9/30 SOC 2 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) This adjustment ensures continued coverage of our control environment ensuring that there is no interruption in independent assurance coverage, and our commitment to maintaining a strong control framework remains unchanged. Bridge Letters will continue to be provided to ensure appropriate coverage. If you have any further questions or concerns, please reach out to [email protected]. Compliance OneStream's 03/31 SOC Report Is Now Available Published June 1, 2026 We are excited to announce that OneStream has successfully completed another System and Organization Controls (SOC) 1 Type II audit for the period of April 1, 2025 to March 31, 2026. This report can be viewed or downloaded in the Resources area of OneStream’s Trust Center. As part of an update to our compliance reporting schedule in 2026, our SOC reporting cadence will be adjusted slightly. As a result, the following reports will be issued this year: 3/31 SOC 1 Type II Report: April 1, 2025 – March 31, 2026 (published 5/29) 6/30 SOC 1 Type II Report: October 1, 2025 – June 30, 2026 (report to be issued August 2026) 9/30 SOC 1 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) 9/30 SOC 2 Type II Report: October 1, 2025 – September 30, 2026 (report to be issued November 2026) This adjustment ensures continued coverage of our control environment ensuring that there is no interruption in independent assurance coverage, and our commitment to maintaining a strong control framework remains unchanged. Bridge Letters will continue to be provided to ensure appropriate coverage. If you have any further questions or concerns, please reach out to [email protected]. Privacy Updates to OneStream's Personal Data Sub-processors – May 2026 Published June 1, 2026 OneStream has published updates to the information within its Personal Data Sub-processors ListOpens in new tab. OneStream's Personal Data Sub-processor list is viewable on our Trust Center or downloadable from OneStream's SaaS Terms and Conditions PageOpens in new tab. Privacy Updates to OneStream's Personal Data Sub-processors – February 2026 Published June 1, 2026 OneStream has published updates to the information within its Personal Data Sub-processors ListOpens in new tab. OneStream's Personal Data Sub-processor list is viewable on our Trust Center or downloadable from OneStream's SaaS Terms and Conditions PageOpens in new tab.