Okta has obtained EU Cloud Code of Conduct (EU Cloud CoC) Level 2 Adherence. As the only pan-European code of conduct for cloud providers, the EU Cloud CoC received positive opinion from the European Data Protection Board (EDPB) and was subsequently approved by the Belgian Data Protection Authority in 2021. Designed specifically for B2B cloud service providers in their role as a processor, the EU Cloud CoC was established to harmonise compliance with the EU’s General Data Protection Regulation (GDPR) across the entire cloud industry and bring trust and transparency to organisations sourcing cloud services in Europe. The adherence demonstrates Okta’s commitment to maintaining rigorous data protection safeguards in line with its processor obligations pursuant to the GDPR. Our cloud services have achieved the second level of adherence. This designation has been supported through a rigorous review of Okta’s data protection and privacy measures, and Okta’s independent third-party certifications.