Black Snow IntelligenceBlack Snow Intelligence
Black Snow Report

Oracle

Method v1.6As At 2026-08-1111 Surfaces Read3 Offerings Assessed

Your own published record, as at 2026-08-11.

Your Details

The Macro Picture51

Red · Adverse
19
of 51 banded observations across 3 offerings band Adverse. 6 were never measured.

What Is Published8

Your Own Words3

In particular, for Services Personal Information transferred from the European Economic Area (EEA) or Switzerland, such transfers are subject to Oracle's Binding Corporate Rules for Processors (BCR-P) or the terms of the EU Standard Contractual Clauses. For Services Personal Information transferred from the United Kingdom (UK), such transfers are subject to the UK Addendum or other appropriate transfer mechanism.
Services Privacy Policy s7, Cross-border data transfers · Source
10.1 Oracle may be required by law to provide access to Personal Information, such as to comply with a subpoena or other legal process, or to respond to government requests, including public and government authorities for national security and/or law enforcement purposes. 10.2 Oracle will promptly inform You of requests to provide access to Personal Information, unless otherwise required by law.
DPA s10, quoted in full. Oracle's 'How Oracle Handles Legal Access Requests' (v1.2) attributes five safeguards to DPA s10 and Processor Code Art 3.4; all five are in Art 3.4, none in s10. · Source
The most current version of the Oracle Processor Code is available on https://www.oracle.com/a/ocom/docs/corporate/bcr-privacy-code-051719.pdf, and is incorporated by reference into the Services Agreement and this European DPA Addendum. Oracle has obtained EEA authorization for its Processor Code and will maintain such authorization for the duration of the Services Agreement.
European DPA Addendum, Exhibit 1, s1.2. Both the DPA and the Processor Code retrieve without login, request or NDA. · Source

Parties You Name0

`recipient_disclosure`: Categories · Neither. The individual names are not yet carried as a field on this record, so none are listed here. An empty list is not a finding that no party is named.

See which of these are assessed in this register

Register Check3

AI Role By Offering3

Assessment Basis

Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.

Read from 11 first-party surface(s) across 3 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.

Fact Record
Version 1.0, dated 2026-08-11
Standards Commit
66058de9d9a2
Register Control Quality
Both Views

Verification And Challenge

Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-11. Correspondence route as recorded on this card input: ror@blacksnowintel.com.

What A Machine Could Not Establish6

6 questions are open and 2 are established, read as at 2026-08-11 under method v1.6.

The One Thing To Publish First

Publish it: publish a sub-processor list.

Red · AdverseSub-Processor List Published

oracle-cloud-services Gated; oracle-agent-surface Gated; oracle-corporate-web Absent; Subprocessor List Completeness: Not Assessable; Subprocessor Locations: No List To Assess · None Named

Where To Put It

No page on your own surfaces was carrying an answer to this question when you were read, so there is no address to correct — this one needs a home before it needs wording.

Where Others Stand

83 organisations in the register publish a sub-processor list. On one of your three assessed offerings you do not, which is what this row is banded on.

What A Published Answer Looks Like

We use a few different third-party subprocessors to help us provide our services to you. These subprocessors process data that you input into the services, which may include personal data.

A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published sub-processor page. Claim tier Quoted. The organisation that published it is not named. A name in the original is replaced; nothing else in the sentence is changed.

One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.

Still Open

Deep Dive

The full assessment, plus consulting on what to fix.

Reviewing your record is free.