Okta
okta.com · identity
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | partial | 5 / 7 |
| Data processing addendum | 12 / 12 | |
| Trust center | not found | 0 / 8 |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | 5 / 5 | |
| Pages still reachable | 8 / 8 | |
| Total | 90 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Okta's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/okta"><img src="https://thirdpartyindex.com/badge/okta.svg" alt="Okta transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/okta)Documents
Subprocessors
26 third parties, 17 affiliates. CSV · Atom
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Aiven Ltd | Managed database services | The data center location corresponds to the region selected by Customer for hosting and cloud infrastructure (in AWS or Azure) | |
| Amazon Web Services, Inc. | Breached password comparison; Hosting and cloud infrastructure; Non-training generative artificial intelligence services | APAC Cell - Australia; Australia Cell – Australia; Canada Cell – Canada; EU Cell - Germany; EU Cell – Germany, Ireland; India Cell – India; Japan Cell – Japan; Private Cloud: USA, Canada, Brazil, Germany, Ireland, Italy, United Kingdom, France, Sweden, India, Japan, South Korea, Singapore, Australia; Public Cloud: USA, Canada, United Kingdom, European Union, Japan, Australia; Public Cloud: USA, European Union, Australia (with the witness region in New Zealand); Standard Service – USA; USA | |
| Auth0, LLC (Delaware) | United Kingdom | ||
| Auth0 Argentina S.A. | Argentina | ||
| Auth0 International LLC (Delaware) | |||
| Auth0 Uruguay S.A. | Uruguay | ||
| Axiom Security Ltd. | Israel | ||
| Cloudflare, Inc. | Content delivery network and distributed-denial-of-service attack prevention services | Global | |
| DataDog, Inc. | Business analytics | Australia Cell – USA; Canada Cell – USA; EU Cell - Germany; EU Cell – Germany; India Cell – USA; Japan Cell – USA; Standard Service - USA; Standard Service – USA; USA | |
| Google, Inc. | Cyber Defense - detect, investigate and respond to cyberthreats; Hosting and cloud infrastructure; Non-training generative artificial intelligence services | Australia Cell – Australia; Australia Cell – USA; Canada Cell – Canada; Canada Cell – USA; EU Cell – EMEA; EU Cell – Germany, Belgium; India Cell – India; India Cell – USA; Japan Cell – Japan; Japan Cell – USA; Standard Service - USA; Standard Service – USA; USA | |
| Microsoft, Inc. | Hosting and cloud infrastructure | Public Cloud: For Customers deployed in Canada, Japan and Australia on AWS, a regional failover component is hosted on Microsoft Azure | |
| MongoDB, Inc. | Data warehouse services; Hosting and cloud infrastructure; Managed database services | APAC Cell - Australia; Australia Cell – Australia; Canada Cell – Canada; EU Cell - Germany; EU Cell – Germany, Belgium,; EU Cell – Germany, Belgium, Netherlands; India Cell – India; Japan Cell – Japan; Netherlands; Standard Service – USA; The data center location corresponds to the region selected by Customer for hosting and cloud infrastructure (in AWS or Microsoft Azure); USA | |
| SaaSure Mexico, S. de R.L. de C.V. | Mexico | ||
| SaaSure Sweden AB | Sweden | ||
| Salesforce, Inc. | Support and maintenance ticketing process | USA | |
| Salesforce.com, Inc. | Support and maintenance ticketing process | USA | |
| S.C. Computer Generated Solutions Romania S.R.L., a subsidiary of Computer Generated Solutions, Inc. | 24x7 customer support team; Customer support (Note that CGS does not provide support for the Government Moderate services, but may have access to the data entered into support tickets located in salesforce.com) | No data centers. Support team is located in the USA.; No data centers; CGS may access the data center(s) Okta utilizes for Amazon Web Services, Azure, and salesforce.com while providing support.; Support team is located in Romania.; USA | |
| SendGrid, Inc. | Email notifications; Email notifications and email access request inbox | USA | |
| Sentry | Security event analysis and incident response | APAC Cell - USA; EU Cell - Germany; Standard Service – USA | |
| Slack Technologies, LLC M | Messaging and collaboration | USA | |
| Snowflake Computing, Inc. | Data warehouse services | Australia Cell – Australia; Canada Cell – Canada; EU Cell – Germany; Germany; India Cell – India; Japan Cell – Japan; Standard Service – USA; USA; USA, Germany, Australia | |
| Snowflake Computing Netherlands B.V | Data warehouse services | APAC Cell - Australia; EU Cell - Germany; Standard Service – USA | |
| Spera Cybersecurity, Inc. (Delaware) | Israel | ||
| Splunk, Inc. | Business analytics | APAC Cell – USA; Australia Cell – USA; Canada Cell – USA; EU Cell - Germany, Ireland, United; EU Cell – Germany, Ireland, United Kingdom; India Cell – EMEA; Japan Cell – USA; Kingdom; Standard Service – USA; USA | |
| TeleSign Corporation | SMS authenticator | USA; USA, Netherlands | |
| Twilio, Inc. | SMS authenticator | USA |
Okta affiliates (17)
Listed as a subprocessor by (104)
Purposes as each company states them.
AVEVA aveva.com
Acquia acquia.com Provides Software-as-a-Service (SaaS) inclusive of tooling and services to manage and secure user authentication into applications and platforms
Adobe adobe.com Adobe uses Okta to authenticate secure access to Adobe Cloud Services. It is integrated with Adobe’s cloud functions and provides provisioning, single sign-on, active directory and lightweight directory access protocol integration, centralized deprovisioning of users, multifactor authentication, and mobile identity management. Okta may process contact information (such as name, email address, and phone number), additional multi-factor authentication factor setup details, content a customer upload (such as identification or other documentation), and information regarding the websites and applications that a specific user visits when using the Okta authentication service. Okta may also receive ancillary data such as device data, usage data, and metadata. Okta’s endpoint threat detection occurs on the Adobe solution stack (meaning their access to raw customer personal data is prevented).
Aerospike aerospike.com Access & authentication; Provides user authentication and access control for Aerospike services
Airship airship.com Login; Authentication; Multi-Factor Authentication (if utilized by Customer)
Akuity akuity.io
Alcide alcide.io
Apiiro apiiro.com Identity service
Atlassian atlassian.com
Auvik auvik.com Identity and access management tool
Barracuda Networks barracuda.com
Basis Theory basistheory.com Authentication services
BioRender biorender.com
Branch branch.io SAML Single Sign On
Brightcove brightcove.com Authentication
CITCON citcon.com Identity Management with SSO, MFA, and Lifecycle management
Cerbos cerbos.dev
Chainguard chainguard.dev Identity management services; https://auth0.com/
Chainloop chainloop.dev auth0.com
Clarity clarity.com
Climatiq climatiq.io Cloud service that provides user management and secure authentication; Identity provider
CloudPilot AI cloudpilot.ai Identity management platform with authentication and authorization services.; Identity provider
CoLab colabsoftware.com Customer identity provider for user management and SSO in the CoLab application.; Identity Management Platform
Common Room commonroom.io Authentication and SSO
Conviva conviva.com Identity management and authentication services
Datadome datadome.co Customer Authentication; Identity provider
DoiT doit.com Identity and access management platform
Dovetail dovetail.com Auth0 serves as an identity provider that is used to authenticate users of Dovetail services. To perform this authentication, Auth0 will have access to the email and names of users.; Identity provider
Drata drata.com [Drata and SafeBase] Auth0 (by Okta) provides identity and access management services used to authenticate users and manage secure access to our applications. It enables features such as secure login, multi-factor authentication, user role management, and single sign-on (SSO), helping ensure secure and compliant user access.
Elasticsearch elastic.co Access authentication
Fivetran fivetran.com Authentication and authorization for Fivetran employees
Fountain fountain.com Identity and access management
Gainsight Software gainsight.com Authentication Platform
GitGuardian gitguardian.com Authentication service for Public Monitoring customers
Guesty guesty.com
H2O.ai h2o.ai User authentication services
Harness.io harness.io --- Platform Services and Enablement --- Identity Management
Helios gethelios.dev Auth0 serves as an identity provider which is used to authenticate users of Snyk’s services. To perform this authentication, Auth0 will have access to personal data of the users.; IT
Help Scout helpscout.com SAML SSO
Impartner impartner.com Identity Provider services
InfluxData influxdata.com Service authentication platform
Infoblox infoblox.com Okta is the identity; Security / Single-sign on; provider for SSO / SAML; supporting customer login; to Infoblox cloud products
Instruqt instruqt.com Essential; Single Sign-On provider
Jamf jamf.com Authentication broker
- Kalshi kalshi.com
Level Access levelaccess.com SSO provider; Secure access for customers
Mason bymason.com
Maxio maxio.com
Meltwater meltwater.com Login authentication for passwordless login; Login to the platform
MinIO min.io Identity and access management for SUBNET; processes customer names, email addresses, and authentication tokens (JWTs); does not store passwords
Moesif moesif.com
MongoDB mongodb.com Authentication Services
NanoNets nanonets.com Authentication
Nscale nscale.com Customer authentication, identity federation and account management
Oneleet oneleet.com User Metadata
OpenAI openai.com User authentication services (via Auth0)
OpenSesame opensesame.com Identity Verification
Orderful orderful.com Authentication
OverOps overops.com --- Platform Services and Enablement --- Identity Management
PagerDuty pagerduty.com Authentication Services
PlanetScale planetscale.com Centralized identity provider
Pluralsight pluralsight.com Identity Tool
Posit posit.co
Prefect prefect.io User Authentication
Pylon usepylon.com Authentication
Quartzy quartzy.com
Qumulo qumulo.com Auth0 and Okta Identity Management; Identity provider
Quo quo.com Authentication and SSO; Identity Management
Rapid7 rapid7.com
ReadMe readme.com Identity and access management
Reality Defender realitydefender.com
Redis redis.io Authentication services provider
Retell AI retellai.com
Roadie roadie.io Access and identity management provider
Salesloft salesloft.com SSO/identity management; Service provider
Second Front Systems secondfront.com Identity and access management to secure employee access to our corporate systems
Sitecore sitecore.net Authentication Tool
Snyk snyk.io Auth0 serves as an identity provider which is used to authenticate users of Snyk’s services. To perform this authentication, Auth0 will have access to personal data of the users.; IT
SpaceXAI x.ai Services and support
StarTree startree.ai Authentication
Statuspage statuspage.io
SurrealDB surrealdb.com Authentication (for SurrealDB Studio)
Svix svix.com Svix uses Auth0 to manage authentication and user management.
Tackle.io tackle.io Cloud Service Provider
Tavily tavily.com Identity and access management provider; Identity provider
TiDB tidb.io Authentication Provider (SAML SSO)
Together AI together.ai User authentication services
Totango totango.com Authorization and authentication
Typeform typeform.com Customer Data; Identity Provider
UiPath uipath.com Identity management services
Vendr vendr.com User Authentication
Vespa.ai vespa.ai
Vimeo vimeo.com Single-sign-on
Voltage Park voltagepark.com
- WalkMe walkme.com User authentication to WalkMe Editor
Workato workato.com Provision of Agent X Support.
Yugabyte yugabyte.com Customer identity management
Zesty zesty.co Authentication & authorization solution
Ziflow ziflow.com Authentication - https://cdn.auth0.com/website/legal/files/dpa/data-processing-addendum-8-20.pdf; Identity provider
Zilliz zilliz.com Authentication when logging in
ZoomInfo zoominfo.com Authentication and access management
Zuplo zuplo.com Auth0 provides authentication and authorization for Zuplo products.
deepset deepset.ai
insightsoftware insightsoftware.com Identity and access management for users
Changes
None since tracking began.