← Trust Directory

UiPath

uipath.com · 1 assessment

UiPath - organisation
Approve with conditions
3 items to confirm in writing
Assessed Aug 28, 2026 · public evidence coverage 63% · evidence confidence medium high · methodology 0.6.0

Certifications

What the vendor claims, and how far each claim has been independently corroborated. A claim is only ever as strong as the rung it reaches.

ISO/IEC 42001
Claimed & corroborated

Claimed as independent certification of the AI governance system; issuer, certificate and scope not stated in fetched pages.

  • Vendor claimed
  • Evidence cited
  • Registry corroborated
  • Scope verified
  • Current

Verified on the registry · Schellman Certificate Directory · checked Aug 28, 2026

Valid until Sep 9, 2028

AIUC-1
Claimed, scope unclear

Claimed for agent behaviour under adversarial testing; issuer and scope not stated in fetched pages.

  • Vendor claimed
  • Evidence cited
  • Registry corroborated
  • Scope verified
  • Current
EU-U.S. Data Privacy Framework
Claimed & corroborated
  • Vendor claimed
  • Evidence cited
  • Registry corroborated
  • Scope verified
  • Current

Verified on the registry · Data Privacy Framework (dataprivacyframework.gov) · checked Aug 28, 2026

CSA STAR Level 2
Claimed & corroborated
  • Vendor claimed
  • Evidence cited
  • Registry corroborated
  • Scope verified
  • Current

Verified on the registry · CSA STAR Registry · checked Aug 28, 2026

FedRAMP Authorization
Claimed & corroborated
  • Vendor claimed
  • Evidence cited
  • Registry corroborated
  • Scope verified
  • Current

Verified on the registry · FedRAMP Marketplace (fedramp.gov) · checked Aug 28, 2026

Supply chain

Third parties this vendor’s AI depends on, as disclosed in its own public material. Responsibility transfers; accountability doesn’t.

AI providers: OpenAI, Google (Gemini), Microsoft (Azure OpenAI / Cognitive Services), AWS Bedrock (Claude)
Infrastructure: Amazon Web Services, Microsoft Ireland Operations

How to read this

This assessment is automated and point-in-time, built only from evidence the vendor publishes publicly plus checks against official certification registries. It is not an audit, not a certification, and not an endorsement. A low score means public evidence was thin or uncorroborated - which is a finding about disclosure, not proof of a weak control environment. This record reflects the evidence available on Aug 28, 2026.