eucsoft

Oracle Cloud

Cloud infrastructure · oracle.com · last read 2026-10-12

Identity

No identity observation recorded yet.

Data location

RegionEU data locationMinimum planSourceObserved
EUTerms not stated—oracle.com2026-10-08

EU: The document describes EU Sovereign Cloud regions in Madrid and Frankfurt, "located and operated within the EU by a separate EU legal entity," with "Access to the same services, value, and innovation as the public cloud for the same price." It names no plan as a requirement and does not say whether the Free Tier includes these regions.

Subprocessor chain

No subprocessor list transcribed. Either the vendor does not publish one where we could reach it, or it is gated — see the documents table below for which.

Processing terms

The vendor's data processing agreement could not be read: the site refused our crawler.

Assurance

SchemeStatusScopeSourceObserved
CSA AI STAR · CSAClaimed—oracle.com2026-10-08
CSA STAR · CSAClaimed—oracle.com2026-10-08
Cyber Essentials · CyberEssentialsClaimed—oracle.com2026-10-08
DoD DISA SRG · DoDILClaimed—oracle.com2026-10-08
ENSClaimed—oracle.com2026-10-08
EU Cloud CoC · EUCloudCoCClaimed—oracle.com2026-10-08
FedRAMPClaimed—oracle.com2026-10-08
HDSClaimed—oracle.com2026-10-08
HIPAAClaimed—oracle.com2026-10-08
HITRUST CSF · HITRUSTClaimed—oracle.com2026-10-08
IRAPClaimed—oracle.com2026-10-08
ISMAPClaimed—oracle.com2026-10-08
ISO 22301 · ISO22301Claimed—oracle.com2026-10-08
ISO/IEC 27001 · ISO27001Claimed—oracle.com2026-10-08
ISO/IEC 27017 · ISO27017Claimed—oracle.com2026-10-08
ISO/IEC 27018 · ISO27018Claimed—oracle.com2026-10-08
ISO/IEC 27701 · ISO27701Claimed—oracle.com2026-10-08
ISO/IEC 42001:2023 · ISO42001Claimed—oracle.com2026-10-08
ISO 9001 · ISO9001Claimed—oracle.com2026-10-08
ISMS (formerly K-ISMS) · KISMSClaimed—oracle.com2026-10-08
ACNClaimed—oracle.com2026-10-08
CST CCRFClaimed—oracle.com2026-10-08
DESC CSPSSClaimed—oracle.com2026-10-08
GSMA SAS-SMClaimedData Centre Operations and Managementoracle.com2026-10-08
Hosting Certification FrameworkClaimed—oracle.com2026-10-08
ISO/IEC 20000-1Claimed—oracle.com2026-10-08
MeitY IT Security GuidelinesClaimed—oracle.com2026-10-08
NHS DSPTClaimed—oracle.com2026-10-08
OSPARClaimed—oracle.com2026-10-08
TDAP - PASFClaimed—oracle.com2026-10-08
UAE IAR Information Security RequirementsClaimed—oracle.com2026-10-08
PCI DSS · PCIDSSClaimed—oracle.com2026-10-08
SOC 1 · SOC1Claimed—oracle.com2026-10-08
SOC 2 · SOC2Claimed—oracle.com2026-10-08
SOC 3 · SOC3Claimed—oracle.com2026-10-08
TISAXClaimed—oracle.com2026-10-08
State RAMP: TX-RAMP · TXRAMPClaimed—oracle.com2026-10-08
TX-RAMP · TXRAMPClaimed—oracle.com2026-10-08

Claimed means the vendor asserts the scheme on its own page and offers nothing further. Available on request means the report or certificate exists but sits behind a request, a login or an NDA. Neither is a certificate we have seen. That is a distinction an auditor makes, so we make it too.

Official registers

RegisterOffering, as the register names itStatusLevelValid untilObserved
DORA critical ICT third-party providers (ESAs)Critical ICT third-party service provider (DORA Art. 31) · Oracle Nederland B.V.designated——2026-10-09
EU Cloud Code of Conduct (GDPR Art. 40)Oracle Cloud Infrastructure (oracle.com) · Oracle Cloud InfrastructureadherentLevel 22027-08-022026-10-09

What the authority publishes, not what the vendor claims. An entry covers the offering it names and nothing else: a FedRAMP authorisation for a government edition says nothing about the commercial service. No entry is not a finding about security - most vendors never apply - and an entry filed under a name not listed above would not have been found.

Support window

ProductSupport periodStateSBOMSourceObserved
Oracle Applications60 monthsDeclaredunknownoracle.com2026-10-11
Oracle Database60 monthsDeclaredunknownoracle.com2026-10-11
Oracle Fusion Middleware60 monthsDeclaredunknownoracle.com2026-10-11

Vulnerability reporting: no security.txt at the well-known path (read 2026-10-11)

Documents

What we read, how it was disclosed, and when.
DocumentDisclosureTranscriptionHTTPObserved
certificationsPublicfull2002026-10-08
dpaRefusedpartial4032026-10-09
lifecyclePublicfull2002026-10-11
residencyPublicfull2002026-10-08

History

Nothing has moved since we started watching this vendor on 2026-10-08. Changes appear here only after a human has reviewed them.