Is Oracle’s FDI certified under SOC 1 and SOC 2, and can it be used for financial reporting?
Here is the Oracle documentation showing that in general OIC and Oracle Applications are SOC1 and SOC2 compliant, but you should verify with your Oracle contract and access the specific SOC report for FDI to confirm its scope, which attestations cover it, and for what period.
Cloud Compliance | Oracle
Hope it helps!
