Companies / Oleria / Subprocessors
Oleria provides an identity security platform that unifies identity and access data across human, non-human, and AI identities and supports access governance and remediation. It serves security leaders and security teams at organizations.
Summarized from its homepage on 4 Nov 2026.
Subprocessors of Oleria
Oleria declares 3 subprocessors.
| Subprocessor | Purpose |
|---|---|
| Cloud provider | |
| Cloud monitoring | |
| Customer support |
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| HIPAACompany's statement | “Oleria meets rigorous standards including SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS 4.0, and NIST/FICAM.”The company's own statement of compliance. There is no official HIPAA certification or registry. | 11 Nov 2026Source |
| ISO 27001Company's statement | “Oleria meets rigorous standards including SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS 4.0, and NIST/FICAM.”The company's own statement. We have not checked an accreditation registry. | 11 Nov 2026Source |
| PCI DSSCompany's statement | “Oleria meets rigorous standards including SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS 4.0, and NIST/FICAM.”The company's own statement. We have not checked a card network registry. | 11 Nov 2026Source |
| SOC 2Company's statement | “Oleria meets rigorous standards including SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS 4.0, and NIST/FICAM.”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Oleria lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Oleria's full stack
Every vendor with its source and date, and an alert when Oleria adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call