Does your organization use Okta? One sensor, and Openwake watches it on its own: the documents re-read daily, every moved clause told.Start free
Trains on customer data
Training posture: unknown · the documents do not say
silence is not a no
“We use Personal Data to analyze and predict results (such as those arising from our sales and marketing efforts and product usage and consumption), improve the performance of our websites, products and services and customer support, identify potential customers, opportunities, and potential new product areas, ascertain trends, improve our websites' functionality, improve our security, and provide us with general business intelligence, including through the use of automated means such as machine learning technology.”
Opt-out mechanism
Below, we describe how you may unsubscribe, opt out, or otherwise modify settings related to our processing of your Personal Data.
“Below, we describe how you may unsubscribe, opt out, or otherwise modify settings related to our processing of your Personal Data.”
AI features
present
“We use Personal Data to analyze and predict results (such as those arising from our sales and marketing efforts and product usage and consumption), improve the performance of our websites, products and services and customer support, identify potential customers, opportunities, and potential new product areas, ascertain trends, improve our websites' functionality, improve our security, and provide us with general business intelligence, including through the use of automated means such as machine learning technology.”
Model providers named
none named
Not stated in the documents we could read. An absence here is an unknown, not a no.
Retention
720 days
“We securely retain records of data requests for at least 24 months as required under the CCPA.”
Hosting regions
United States
“Your Personal Data may be collected, transferred to, processed, and stored by us in the United States, and by our affiliates, service providers, and third parties that are based in other countries.”
Subprocessor notice
not stated
Not stated in the documents we could read. An absence here is an unknown, not a no.
Downstream
Who's behind Okta, as listed in its own subprocessor documents. No subprocessors identified · coverage incomplete: no subprocessor document is on file; the names below come from other documents, if any.
Model providers
- none listed
Hyperscalers
- none listed
Other subprocessors
- none listed
Reviewer notes
Extracted by deterministic rules (rules/v1), no language model. Coverage is limited to recognisable clauses and a gazetteer of common subprocessors; absent values mean 'not matched', not 'not present'. training-adjacent sentence found but not classifiable by rules
Documents read
- privacy policy https://www.okta.com/privacy-policy/HTTP 200 · 2026-10-22
Document changes
- low 2026-10-22 · privacy policy +1 / −1 lines
show diff
+ Nov 5 | Stop fragmented identity tools from leaving you exposed Register now →− October 20 | Beyond Oktane: Unify identity governance & privileged access Register now → - medium 2026-10-13 · privacy policy +1 / −2 lines
show diff
+ October 20 | Beyond Oktane: Unify identity governance & privileged access Register now →− Beyond Oktane: "Breach in a Box" — Preventing AI incidents Register now →− Call United States (EN) - low 2026-10-02 · privacy policy +16 / −16 lines
show diff
+ Information you provide to us+ Personal Data We Collect From Other Sources+ Device Data, Usage Data, Ancillary Data, Diagnostic Data, and Metadata We Collect+ Explanation of Device Data, Usage Data, Ancillary Data, Diagnostic Data, and Other Metadata and Technology Used+ Legal Bases for Processing Personal Data (for United Kingdom and European Economic Area and other relevant jurisdictions)+ Okta Social Media Outlets+ Products and Services Available Through Other Channels+ Okta’s Adherence to the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework+ Your Privacy Rights+ Categories of Personal Data Collected+ Business and Commercial Purposes for Collection; Disclosures for a Business Purpose+ Categories of Personal Data Sold or Shared for Cross-Context Behavioral Advertising+ Categories of Personal Data Sold or Shared for Job Applicants+ Sensitive Personal Data+ Categories of Sensitive Personal Data Disclosed+ Business Purposes For Which Sensitive Personal Data will be Used or Disclosed We may collect the categories of Sensitive Personal Data listed for processing job applications and the purposes as further described in Section IV above, and to further our legitimate business purposes as outlined under the CCPA:− INFORMATION YOU PROVIDE TO US− PERSONAL DATA WE COLLECT FROM OTHER SOURCES− DEVICE DATA, USAGE DATA, ANCILLARY DATA, DIAGNOSTIC DATA, AND METADATA WE COLLECT− EXPLANATION OF DEVICE DATA, USAGE DATA, ANCILLARY DATA, DIAGNOSTIC DATA, AND OTHER METADATA AND TECHNOLOGY USED− LEGAL BASES FOR PROCESSING PERSONAL DATA (FOR UNITED KINGDOM AND EUROPEAN ECONOMIC AREA AND OTHER RELEVANT JURISDICTIONS)− OKTA SOCIAL MEDIA OUTLETS− PRODUCTS AND SERVICES AVAILABLE THROUGH OTHER CHANNELS− OKTA'S ADHERENCE TO THE EU-U.S. DATA PRIVACY FRAMEWORK, THE UK EXTENSION TO THE EU-U.S. DATA PRIVACY FRAMEWORK, AND THE SWISS-U.S. DATA PRIVACY FRAMEWORK− YOUR PRIVACY RIGHTS− CATEGORIES OF PERSONAL DATA COLLECTED− BUSINESS AND COMMERCIAL PURPOSES FOR COLLECTION; DISCLOSURES FOR A BUSINESS PURPOSE− CATEGORIES OF PERSONAL DATA SOLD OR SHARED FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING− CATEGORIES OF PERSONAL DATA SOLD OR SHARED FOR JOB APPLICANTS− SENSITIVE PERSONAL DATA− CATEGORIES OF SENSITIVE PERSONAL DATA DISCLOSED - high 2026-09-30 · privacy policy +1 / −1 lines
show diff
+ Beyond Oktane: "Breach in a Box" — Preventing AI incidents Register now →− Okta and industry leaders launch the Blueprint Alliance to secure agentic AI. Read the news → - high 2026-09-23 · privacy policy +3 / −2 lines
show diff
+ Okta and industry leaders launch the Blueprint Alliance to secure agentic AI. Read the news →+ * AI Identity for B2B ↗ New+ * AI Identity for Commerce ↗ New− Streamcast | Hear how Anthropic & Asana secure AI agents at scale. Watch the episode →− * Auth0 for AI Agents ↗ New - high 2026-09-22 · privacy policy +1 / −1 lines
show diff
+ Streamcast | Hear how Anthropic & Asana secure AI agents at scale. Watch the episode →− Oktane | Sept 23 | Secure your agentic future. Catch the livestream → - high 2026-09-16 · privacy policy +4 / −3 lines
show diff
+ Your Personal Data may be collected, transferred to, processed, and stored by us in the United States, and by our affiliates, service providers, and third parties that are based in other countries. The addresses of our offices where Okta, Inc. and its affiliates are located can be found online at https://www.okta.com/contact.+ Some of the countries where your Personal Data may be processed, including the United States, are not subject to an adequacy decision by the European Commission or your local legislature and/or regulator, and may lack data protection laws as comprehensive as or may not provide the same level of data protection as your jurisdiction, such as the European Economic Area, the United Kingdom, or Japan. For example, as of the effective date of this policy, the United States does not have a federal privacy law that covers all types of data; however, privacy is regulated by federal and state agencies and by various state laws. In light of regional differences, Okta has put in place various safeguards and the security measures described above. For example, when we share Personal Data, we take reasonable steps so that the recipient of your Personal Data offers an adequate level of data protection, for example, by entering into the appropriate agreements containing relevant data protection provisions or we will ask you for your prior consent to such international data transfers.+ * You may also adjust your web browser settings to opt-out of non-essential cookies. Please understand that blocking or deleting non-essential cookies may affect our websites' functionality.+ For the September 2025 archived Privacy Policy, please visit https://www.okta./.− Your Personal Data may be collected, transferred to, processed, and stored by us in the United States, and by our affiliates, service providers, and third parties that are based in other countries. The addresses of our offices where Okta, Inc. and its affiliates are located can be found online at https://www.okta.com/contact. Some of the countries where your Personal Data may be processed, including the United States, are not subject to an adequacy decision by the European Commission or your local legislature and/or regulator, and may lack data protection laws as comprehensive as or may not provide the same level of data protection as your jurisdiction, such as the European Economic Area, the United Kingdom, or Japan. For example, as of the effective date of this policy, the United States does not have a federal privacy law that covers all types of data; however, privacy is regulated by federal and state agencies and by various state laws. In light of regional differences, Okta has put in place various safeguards and the security measures described above. For example, when we share Personal Data, we take reasonable steps so that the recipient of your Personal Data offers an adequate level of data protection, for example, by entering into the appropriate agreements containing relevant data protection provisions or we will ask you for your prior consent to such international data transfers.− * You may also adjust your web browser settings to opt-out of non-essential cookies. Please understand that blocking or deleting non-essential cookies may affect our websites' functioƒnality.− For the January 01, 2024 archived Privacy Policy, please visit https://www.okta.com/privacy-policy/2024-01-archived/.
Fact changes
No changes recorded yet. Changes appear here when a later reading differs from an earlier one.
Corrections
No correction requests. Anyone may dispute a fact with a source; requests and resolutions are public and ledger-entered.
Facts are as stated in Okta's public documents on the date read. This is a record, not legal advice. Work for Okta? Claim this profile · Something wrong? Request a correction.