# Oracle

[117 tracked vendors](https://thirdpartyindex.com/vendors/oracle#used-by) name Oracle as a subprocessor, including [OpenAI](https://thirdpartyindex.com/vendors/openai), [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare) and [Salesforce](https://thirdpartyindex.com/vendors/salesforce). We have not found a subprocessor list published by Oracle. We monitor 4 of its documents, which we last checked on 2026-11-11.

Oracle (oracle.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/oracle
- Documents last verified: 2026-11-11
- Category: cloud-infrastructure
- Transparency rating: 27/100 (how much it publishes, not how secure it is): Subprocessor list 0/30 (not found); Processing locations 0/8 (no list); Purposes 0/7 (no list); Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Companies part of it: [NetSuite](https://thirdpartyindex.com/vendors/netsuite)
- Supply chain: relies on 0 tracked vendors directly, 0 within two hops, 0 within three; 117 tracked vendors rely on it directly, 2166 within two hops, 2821 within three
- Cite as: Oracle, Third Party Index, https://thirdpartyindex.com/vendors/oracle (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://www.oracle.com/trust/ | 2026-11-11 | 2026-10-02 |
| Privacy policy | https://www.oracle.com/legal/privacy/privacy-policy/?rl=1788382446 | 2026-11-11 | 2026-10-30 |
| Terms | https://www.oracle.com/legal/terms/ | 2026-11-11 | 2026-09-22 |
| Security page | https://www.oracle.com/security/ | 2026-11-11 | 2026-09-22 |

## Subprocessors (0)

No subprocessor list has been found or read for this vendor.

## Compliance

As its trust center lists them.

- FedRAMP Marketplace: Moderate · 2 agency authorizations · since Oct 30, 2020
- FedRAMP Marketplace: Moderate · 9 agency authorizations · since Feb 26, 2014
- FedRAMP Marketplace: Moderate · 9 agency authorizations · since Jan 13, 2020
- FedRAMP Marketplace: High · 16 agency authorizations · since Oct 1, 2020
- FedRAMP Marketplace: Moderate · 12 agency authorizations · since Feb 28, 2025
- FedRAMP Marketplace: Moderate · 4 agency authorizations · since Dec 5, 2014
- FedRAMP Marketplace: Moderate

## Security program

What ORACLE CORP's Form 10-K for fiscal 2026, filed Jun 22, 2026 (Item 1C) says, in its words (https://www.sec.gov/Archives/edgar/data/1341439/000119312526277521/0001193125-26-277521-index.htm).

- Board oversight: Finance and Audit Committee
- Frameworks named: SOC 2, PCI DSS
- Practices named: Tabletop exercises, Penetration testing
- Engages outside assessors or consultants
- Reviews its suppliers' security

## Subprocessor of (117)

Tracked vendors whose own subprocessor lists name it, and what they say they use it for.

- [8x8](https://thirdpartyindex.com/vendors/8x8.md): Cloud Service Provider; Full stack deployments in various regions, including data processor storage in the same region as the customer is deployed.
- [Accruent](https://thirdpartyindex.com/vendors/accruent.md): Hosting Provider
- [Adyen](https://thirdpartyindex.com/vendors/adyen.md)
- [Airwallex US](https://thirdpartyindex.com/vendors/airwallex-us.md): ERP / Finance; ERP / procurement / EPM stack
- [Aiven](https://thirdpartyindex.com/vendors/aiven.md)
- [Antavo](https://thirdpartyindex.com/vendors/antavo.md): Responsys - Marketing Automation Platform
- [Apica](https://thirdpartyindex.com/vendors/apica.md): Cloud infrastructure services
- [Apolicy](https://thirdpartyindex.com/vendors/apolicy.md): Data Storage
- [Ardoq](https://thirdpartyindex.com/vendors/ardoq.md): Hosting and back-up of the Ardoq Services
- [Assent](https://thirdpartyindex.com/vendors/assent.md): Cloud hosting, database infrastructure, and data storage for iPoint Solutions.
- [Auditoria.AI](https://thirdpartyindex.com/vendors/auditoria-ai.md): Cloud Infrastructure
- [AvaSure](https://thirdpartyindex.com/vendors/avasure.md)
- [Axcient](https://thirdpartyindex.com/vendors/axcient.md): Cloud Service Provider
- [Baseten](https://thirdpartyindex.com/vendors/baseten.md): Cloud Compute
- [Bigmind](https://thirdpartyindex.com/vendors/bigmind.md)
- [BigPanda](https://thirdpartyindex.com/vendors/bigpanda.md): Cloud Service Provider: Used to support AI-driven capabilities such as language understanding, generative responses, and machine learning analytics, enabling Bi…
- [Brightcove](https://thirdpartyindex.com/vendors/brightcove.md): Analytics, Communications
- [Businesswire](https://thirdpartyindex.com/vendors/businesswire.md): Invoicing, payment, and user information
- [Celonis](https://thirdpartyindex.com/vendors/celonis.md): ● Option for hosting of the Celonis Platform Cloud Service
- [Center for Internet Security](https://thirdpartyindex.com/vendors/center-for-internet-security.md): Cloud Service Provider and associated products; Oracle offers a wide range of products, including cloud service products.; Your general personal information wil…
- [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md): Cloudflare Developer Platform and Cache Reserve
- [Clumio by Commvault](https://thirdpartyindex.com/vendors/clumio-by-commvault.md): Applicable for SaaS workloads only; Cloud storage provider In case of cloud storage relevant Oracle entity will be determined depending on the configuration cho…
- [Commvault Systems](https://thirdpartyindex.com/vendors/commvault-systems.md): Applicable for SaaS workloads only; Cloud storage provider In case of cloud storage relevant Oracle entity will be determined depending on the configuration cho…
- [ConnectWise](https://thirdpartyindex.com/vendors/connectwise.md): Cloud Service Provider; Cloud Service Provider (x360Cloud)
- [Daily](https://thirdpartyindex.com/vendors/daily.md): Cloud hosting provider
- [Databricks](https://thirdpartyindex.com/vendors/databricks.md): Cloud Service Provider
- [DataCore Software](https://thirdpartyindex.com/vendors/datacore-software.md): Cloud Providers
- [Daytona](https://thirdpartyindex.com/vendors/daytona.md): Cloud Infrastructure
- [Deepgram](https://thirdpartyindex.com/vendors/deepgram.md): A cloud computing platform offering a variety of services such as hosting, storage, computing, and databases, widely used by businesses and individuals for scal…
- [Deltek](https://thirdpartyindex.com/vendors/deltek.md)
- [Digicert](https://thirdpartyindex.com/vendors/digicert.md): Manage enterprise resource planning, marketing automation, payment processing, and customer communications
- [Digital Realty](https://thirdpartyindex.com/vendors/digital-realty.md): Enterprise Resource Planning (ERP) and Human Resource Information System (HRIS)
- [DigitalOcean](https://thirdpartyindex.com/vendors/digitalocean.md): Storage services
- [DigiUsher](https://thirdpartyindex.com/vendors/digiusher.md): Cloud Providers
- [Docusign](https://thirdpartyindex.com/vendors/docusign.md): Oracle Integration Cloud platform services, payment services with third-party payment processors
- [DoubleVerify](https://thirdpartyindex.com/vendors/doubleverify.md)
- [Dropbox](https://thirdpartyindex.com/vendors/dropbox.md): Billing and Customer Support
- [Dropbox Sign](https://thirdpartyindex.com/vendors/dropbox-sign.md): Billing and Customer Support
- [Egnyte](https://thirdpartyindex.com/vendors/egnyte.md)
- [Envestnet](https://thirdpartyindex.com/vendors/envestnet.md): Oracle Cloud manages procurement workflows, purchase requisitions, and financial transactions across departments. It enables automation of requisition approvals…
- [Epicor](https://thirdpartyindex.com/vendors/epicor.md): Cloud Hosting Services
- [eSpatial](https://thirdpartyindex.com/vendors/espatial.md): https://www.oracle.com/cloud/
- [Exclusive Networks](https://thirdpartyindex.com/vendors/exclusive-networks.md): ERP
- [Eyeota](https://thirdpartyindex.com/vendors/eyeota.md): Data management services
- [FE fundinfo](https://thirdpartyindex.com/vendors/fe-fundinfo.md)
- [Fireworks](https://thirdpartyindex.com/vendors/fireworks.md): Cloud infrastructure and service provider; \[Oracle Cloud Compliance\](
- [GitHub](https://thirdpartyindex.com/vendors/github.md): Cloud Hosted Infrastructure
- [GiveCampus](https://thirdpartyindex.com/vendors/givecampus.md): ERP tool (NetSuite)
- [Hasura](https://thirdpartyindex.com/vendors/hasura.md)
- [Infios](https://thirdpartyindex.com/vendors/infios.md): Cloud Infrastructure and Services
- [Infobip](https://thirdpartyindex.com/vendors/infobip.md): Provisioning of large language model (LLM) capabilities within Infobip AgentOS platform, enabling autonomous multimodal AI-driven task execution, information re…
- [insightsoftware](https://thirdpartyindex.com/vendors/insightsoftware.md): Cloud computing platform
- [Integrate](https://thirdpartyindex.com/vendors/integrate.md): Billing
- [Intempt](https://thirdpartyindex.com/vendors/intempt.md): Cloud hosting and infrastructure
- [Intralinks](https://thirdpartyindex.com/vendors/intralinks.md)
- [Ipregistry](https://thirdpartyindex.com/vendors/ipregistry.md): Cloud Service Provider
- [Kentik](https://thirdpartyindex.com/vendors/kentik.md): - Data ingestion from customer OCI accounts; Data center services
- [Kinsta®](https://thirdpartyindex.com/vendors/kinsta.md): Hosting and security
- [Knorex](https://thirdpartyindex.com/vendors/knorex.md): Accounting platform
- [Kudosity](https://thirdpartyindex.com/vendors/kudosity.md): Cloud and enterprise software services
- [LinkedIn](https://thirdpartyindex.com/vendors/linkedin.md): Cloud-based marketing solutions; DNS
- [LiveKit](https://thirdpartyindex.com/vendors/livekit.md): Data center provider
- [Lusha](https://thirdpartyindex.com/vendors/lusha.md): Database Management; Enterprise Software
- [Mailgun](https://thirdpartyindex.com/vendors/mailgun.md): Database, Infrastructure, Support
- [Medallia](https://thirdpartyindex.com/vendors/medallia.md): Hosting of platform data.; Regional hosting in certain locations.
- [Meltwater](https://thirdpartyindex.com/vendors/meltwater.md): Netsuite- Billing software
- [MinIO](https://thirdpartyindex.com/vendors/minio.md): Cloud ERP and accounting platform; processes customer and partner names, email addresses, billing addresses, phone numbers, financial transaction data, and invo…
- [Modal](https://thirdpartyindex.com/vendors/modal.md): Cloud hosting provider
- [Model N](https://thirdpartyindex.com/vendors/model-n.md): Cloud hosting provider
- [Moogsoft](https://thirdpartyindex.com/vendors/moogsoft.md)
- [Neon](https://thirdpartyindex.com/vendors/neon.md): Cloud Service Provider
- [Nextiva](https://thirdpartyindex.com/vendors/nextiva.md): Accounting and Billing
- [OpenAI](https://thirdpartyindex.com/vendors/openai.md): Cloud infrastructure
- [Operative](https://thirdpartyindex.com/vendors/operative.md): Corporate billing system, hosting; revenue recognition and billing
- [OptiSigns](https://thirdpartyindex.com/vendors/optisigns.md): Cloud Hosting
- [PandaDoc](https://thirdpartyindex.com/vendors/pandadoc.md): Billing and Accounting
- [ParentSquare](https://thirdpartyindex.com/vendors/parentsquare.md): District staff contact information.
- [Parsec](https://thirdpartyindex.com/vendors/parsec.md): Marketing emails and automation, email and landing page activity tracking, Hosting of gated content
- [Pipefy](https://thirdpartyindex.com/vendors/pipefy.md): Pipefy Cloud Solution
- [PowerSchool](https://thirdpartyindex.com/vendors/powerschool.md): Database; Transfer gateway
- [Precisely Software](https://thirdpartyindex.com/vendors/precisely-software.md): Finance, Marketing
- [Pricefx](https://thirdpartyindex.com/vendors/pricefx.md): ERP/financial tool for invoicing and billing
- [Propelus](https://thirdpartyindex.com/vendors/propelus.md): Cloud Provider
- [Red Box](https://thirdpartyindex.com/vendors/red-box.md): Cloud hosting, data storage and infrastructure support services
- [Red5](https://thirdpartyindex.com/vendors/red5.md): Data hosting and processing
- [Redis](https://thirdpartyindex.com/vendors/redis.md): ERP and financial planning service provider
- [Riverbed](https://thirdpartyindex.com/vendors/riverbed.md): Cloud hosting and infrastructure provider
- [Rocket.Chat](https://thirdpartyindex.com/vendors/rocket-chat.md): Financial transactions, procurement, supply chain operations
- [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md)
- [Seekr](https://thirdpartyindex.com/vendors/seekr.md): Cloud Service Provider
- [Seqera](https://thirdpartyindex.com/vendors/seqera.md): Applies to: All customers (business operations) ERP used by finance and accounting; Finance
- [Sinch](https://thirdpartyindex.com/vendors/sinch.md): Database, Infrastructure, Support
- [Sirion](https://thirdpartyindex.com/vendors/sirion.md): Sirion platform, where all customer data is stored and processed, is; hosted on OCI.
- [Skyhigh Security](https://thirdpartyindex.com/vendors/skyhigh-security.md)
- [Skyhigh Security](https://thirdpartyindex.com/vendors/skyhighsecurity-com.md)
- [Slido](https://thirdpartyindex.com/vendors/slido.md): Accounting
- [Splashtop](https://thirdpartyindex.com/vendors/splashtop.md)
- [Stellar Cyber](https://thirdpartyindex.com/vendors/stellar-cyber.md)
- [Stream.io](https://thirdpartyindex.com/vendors/stream-io.md): Server Provider - applicable to Video API
- [SymphonyAI](https://thirdpartyindex.com/vendors/symphonyai.md): Summit Platform
- [Sysdig](https://thirdpartyindex.com/vendors/sysdig.md): Data Storage
- [Tableau](https://thirdpartyindex.com/vendors/tableau.md)
- [Tanium](https://thirdpartyindex.com/vendors/tanium.md): Hosting and storage services
- [Tigris Data](https://thirdpartyindex.com/vendors/tigris-data.md): Hosting Provider
- [TikTok](https://thirdpartyindex.com/vendors/tiktok.md): Cloud storage
- [Together AI](https://thirdpartyindex.com/vendors/together-ai.md): Cloud hosting provider
- [Tractian](https://thirdpartyindex.com/vendors/tractian.md): Cloud infrastructure; Cloud provider
- [Trellix](https://thirdpartyindex.com/vendors/trellix.md)
- [Twinit](https://thirdpartyindex.com/vendors/twinit.md): Infrastructure hosting, managed databases, key management, and transactional email delivery for regional platform deployments.
- [UltraDNS](https://thirdpartyindex.com/vendors/ultradns.md): Manage enterprise resource planning, marketing automation, payment processing, and customer communications
- [Uniphore](https://thirdpartyindex.com/vendors/uniphore.md): Cloud hosting, data storage and infrastructure support services
- [Velocity T.K.](https://thirdpartyindex.com/vendors/velocity-t-k.md): Cloud Service Provider: Used to support AI-driven capabilities such as language understanding, generative responses, and machine learning analytics, enabling Bi…
- [wiz.io](https://thirdpartyindex.com/vendors/wiz-io.md)
- [Workspot](https://thirdpartyindex.com/vendors/workspot.md): Customer contact information
- [xAI](https://thirdpartyindex.com/vendors/spacexai.md): Cloud infrastructure, services, and support
- [Yubico](https://thirdpartyindex.com/vendors/yubico.md): NetSuite ERP
- [Zoom](https://thirdpartyindex.com/vendors/zoom.md): Cloud Service Provider

## Security record

CISA's Known Exploited Vulnerabilities catalog lists 46 vulnerabilities in its software:

- CVE-2026-21962 (HTTP Server and Oracle Weblogic Server Proxy Plug-in), listed 2026-08-24: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
- CVE-2026-46817 (E-Business Suite), listed 2026-07-15: Oracle E-Business Suite Improper Privilege Management Vulnerability
- CVE-2026-35273 (PeopleSoft Enterprise PeopleTools), listed 2026-06-12: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability (known ransomware use)
- CVE-2024-21182 (WebLogic Server), listed 2026-06-01: Oracle WebLogic Server Unspecified Vulnerability
- CVE-2025-61757 (Fusion Middleware), listed 2025-11-21: Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
- CVE-2025-61884 (E-Business Suite), listed 2025-10-20: Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability (known ransomware use)
- CVE-2025-61882 (E-Business Suite), listed 2025-10-06: Oracle E-Business Suite Unspecified Vulnerability (known ransomware use)
- CVE-2024-20953 (Agile Product Lifecycle Management (PLM)), listed 2025-02-24: Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
- CVE-2020-2883 (WebLogic Server), listed 2025-01-07: Oracle WebLogic Server Unspecified Vulnerability
- CVE-2024-21287 (Agile Product Lifecycle Management (PLM)), listed 2024-11-21: Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
- CVE-2020-14644 (WebLogic Server), listed 2024-09-18: Oracle WebLogic Server Remote Code Execution Vulnerability
- CVE-2022-21445 (ADF Faces), listed 2024-09-18: Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
- CVE-2017-3506 (WebLogic Server), listed 2024-06-03: Oracle WebLogic Server OS Command Injection Vulnerability
- CVE-2020-2551 (Fusion Middleware), listed 2023-11-16: Oracle Fusion Middleware Unspecified Vulnerability
- CVE-2016-3427 (Java SE and JRockit), listed 2023-05-12: Oracle Java SE and JRockit Unspecified Vulnerability
- CVE-2023-21839 (WebLogic Server), listed 2023-05-01: Oracle WebLogic Server Unspecified Vulnerability
- CVE-2022-21587 (E-Business Suite), listed 2023-02-02: Oracle E-Business Suite Unspecified Vulnerability (known ransomware use)
- CVE-2021-35587 (Fusion Middleware), listed 2022-11-28: Oracle Fusion Middleware Unspecified Vulnerability
- CVE-2018-2628 (WebLogic Server), listed 2022-09-08: Oracle WebLogic Server Unspecified Vulnerability
- CVE-2010-0840 (Java Runtime Environment (JRE)), listed 2022-05-25: Oracle JRE Unspecified Vulnerability
- CVE-2012-1710 (Fusion Middleware), listed 2022-05-25: Oracle Fusion Middleware Unspecified Vulnerability (known ransomware use)
- CVE-2013-0422 (Java Runtime Environment (JRE)), listed 2022-05-25: Oracle JRE Remote Code Execution Vulnerability (known ransomware use)
- CVE-2013-0431 (Java Runtime Environment (JRE)), listed 2022-05-25: Oracle JRE Sandbox Bypass Vulnerability (known ransomware use)
- CVE-2013-2423 (Java Runtime Environment (JRE)), listed 2022-05-25: Oracle JRE Unspecified Vulnerability
- CVE-2019-3010 (Solaris), listed 2022-05-25: Oracle Solaris Privilege Escalation Vulnerability
- CVE-2012-0518 (Fusion Middleware), listed 2022-03-28: Oracle Fusion Middleware Unspecified Vulnerability
- CVE-2012-5076 (Java SE), listed 2022-03-28: Oracle Java SE Sandbox Bypass Vulnerability
- CVE-2013-2465 (Java SE), listed 2022-03-28: Oracle Java SE Unspecified Vulnerability (known ransomware use)
- CVE-2019-2616 (BI Publisher (Formerly XML Publisher)), listed 2022-03-25: Oracle BI Publisher Unauthorized Access Vulnerability
- CVE-2008-3431 (VirtualBox), listed 2022-03-03: Oracle VirtualBox Insufficient Input Validation Vulnerability
- CVE-2011-3544 (Java SE JDK and JRE), listed 2022-03-03: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
- CVE-2012-0507 (Java SE), listed 2022-03-03: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability (known ransomware use)
- CVE-2012-1723 (Java SE), listed 2022-03-03: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability (known ransomware use)
- CVE-2012-4681 (Java SE), listed 2022-03-03: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability (known ransomware use)
- CVE-2015-2590 (Java SE), listed 2022-03-03: Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
- CVE-2015-4902 (Java SE), listed 2022-03-03: Oracle Java SE Integrity Check Vulnerability
- CVE-2017-10271 (WebLogic Server), listed 2022-02-10: Oracle Corporation WebLogic Server Remote Code Execution Vulnerability (known ransomware use)
- CVE-2020-14864 (Intelligence Enterprise Edition), listed 2022-01-18: Oracle Business Intelligence Enterprise Edition Path Transversal
- CVE-2019-2725 (WebLogic Server), listed 2022-01-10: Oracle WebLogic Server, Injection (known ransomware use)
- CVE-2012-3152 (Fusion Middleware), listed 2021-11-03: Oracle Fusion Middleware Unspecified Vulnerability
- CVE-2015-4852 (WebLogic Server), listed 2021-11-03: Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
- CVE-2020-14750 (WebLogic Server), listed 2021-11-03: Oracle WebLogic Server Remote Code Execution Vulnerability
- CVE-2020-14871 (Solaris and Zettabyte File System (ZFS)), listed 2021-11-03: Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
- CVE-2020-14882 (WebLogic Server), listed 2021-11-03: Oracle WebLogic Server Remote Code Execution Vulnerability
- CVE-2020-14883 (WebLogic Server), listed 2021-11-03: Oracle WebLogic Server Unspecified Vulnerability
- CVE-2020-2555 (Multiple Products), listed 2021-11-03: Oracle Multiple Products Remote Code Execution Vulnerability

## Federal contracts

U.S. government prime awards and reported subawards to its UEI (FKUCYGRK1EQ3, HE98WLUBNW88), from USAspending, by funding agency. Records show funding, not use.

| Agency | Department | Prime awards | Obligated | Subawards | Subaward total | First | Last |
|---|---|---|---|---|---|---|---|
| Department of the Navy | Department of Defense | 240 | $599.5M | 168 | $19.5M | 2006-11-30 | 2026-06-24 |
| Defense Information Systems Agency | Department of Defense | 43 | $434.6M | 15 | $13.8M | 2006-11-22 | 2026-07-01 |
| Office of the Chief Financial Officer | Department of Agriculture | 20 | $4.6M | 15 | $223.7M | 2007-10-24 | 2023-11-22 |
| Department of the Air Force | Department of Defense | 84 | $119.8M | 69 | $9.3M | 2006-09-26 | 2026-07-08 |
| National Institutes of Health | Department of Health and Human Services | 56 | $14.5M | 12 | $100.4M | 2008-06-11 | 2025-05-30 |
| Department of the Army | Department of Defense | 139 | $80.6M | 43 | $7.0M | 2006-11-17 | 2026-07-17 |
| Social Security Administration | Social Security Administration | 36 | $25.0M | 11 | $39.1M | 2009-02-27 | 2021-10-08 |
| Defense Logistics Agency | Department of Defense | 13 | $43.0M | 12 | $3.4M | 2007-10-25 | 2026-06-17 |
| Offices, Boards and Divisions | Department of Justice | 19 | $32.3M | 11 | $9.1M | 2010-03-31 | 2026-03-26 |
| Centers for Medicare and Medicaid Services | Department of Health and Human Services | 1 | $177.0K | 99 | $37.2M | 2009-02-25 | 2026-06-26 |
| Office of the Chief Information Officer | Department of Agriculture | 17 | $31.3M | 2 | $378.4K | 2006-10-01 | 2026-08-04 |
| U.S. Census Bureau | Department of Commerce | 12 | $27.1M | — | — | 2007-07-06 | 2021-09-08 |
| Defense Human Resources Activity | Department of Defense | 4 | $23.7M | 1 | $73.0K | 2007-02-18 | 2026-05-21 |
| Defense Finance and Accounting Service | Department of Defense | 14 | $14.5M | 3 | $592.1K | 2006-11-30 | 2025-11-20 |
| Office of the Chief Information Officer | Department of Homeland Security | 1 | $12.3M | 5 | $297.7K | 2011-11-15 | 2026-09-16 |

And 139 more agencies.
2299 records ([evidence](https://thirdpartyindex.com/evidence/243811)). Details: https://thirdpartyindex.com/vendors/oracle/federal

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api