Okta
Your own published record, as at 2026-08-14.
Your Details
The Macro Picture34
1 conditional row (Hosting Locality = European Cell -- Germany and Ireland for hosting and the data warehouse, Belgium and the Netherlands additionally for Identity Governance and Privileged Access. A configuration a customer can select today, taken without the Customer Identity Cloud and without the Service Log Investigator or any other generative-AI feature enabled.) sit outside these counts. A Variant is a stated deployment mode, not a published offering, and the Grid Standard holds it to its own band.
What Is Published8
Your Own Words3
During deployment, Customer may select from the following regions: Public Cloud: USA, Canada, United Kingdom, European Union, Japan, Australia. Private Cloud: USA, Canada, Brazil, Germany, Hong Kong, Indonesia, Ireland, Italy, United Arab Emirates, United Kingdom, France, Sweden, South Africa, Bahrain, India, Japan, South Korea, Singapore, Australia, Mexico
CDNs are commonly-used systems of distributed services that expedite the transmission of content. Due to the nature of CDNs, CDNs may process data in any country, regardless of the Customer's location, to better support Users of the Auth0 Platform.
Okta conducts reasonable due diligence and security assessments of Sub-processors, and enters into agreements with Sub-processors that contain provisions similar to or more stringent than those provided for in the Trust & Compliance Documentation.
Parties You Name17
Register Check3
AI Role By Offering2
Assessment Basis
Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.
Read from 42 first-party surface(s) across 2 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.
- Fact Record
- Version 1.0, dated 2026-08-14
- Standards Commit
- 3487bce7d591
- Register Control Quality
- Both Views
Verification And Challenge
Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-14. Correspondence route as recorded on this card input: ror@blacksnowintel.com.
What A Machine Could Not Establish4
4 questions are open and 4 are established, read as at 2026-08-14 under method v1.6.
Publish it: say how long what is sent to an AI provider is kept.
AI Input Retention Value was not measured under method v1.6. The band on this row is the reading of AI Input Retention, not of that value.
Where To Put It
This was read on your own page at https://www.okta.com/trustandcompliance/. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.
Where Others Stand
26 organisations in the register say how long what is sent to an AI provider is kept. You do not.
What A Published Answer Looks Like
By default, all media associated with a recording is retained indefinitely. You can configure your workspace to support zero-data retention, or any other data retention configuration through our API.
A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published privacy notice. Claim tier Quoted. The organisation that published it is not named.
One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.
Still Open
Deep Dive
The full assessment, plus consulting on what to fix.