OneTrust
OneTrust is a Enterprise GRC platform tool. It describes itself as "Privacy, consent, and AI governance automation platform".
Key facts
- Category
- Enterprise GRC platform
- Describes itself as
- Privacy, consent, and AI governance automation platform
- Headquarters
- Atlanta, Georgia, United States
- Founded
- 2016
- Pricing
- Contact sales
- Funding
- $1.13B raised over 7 rounds; $4.5B valuation (2023)
- Website
- onetrust.com
- Others in this category
- 25
Identity confirmed
On 2026-09-12 the address above was checked against a primary source and does belong to OneTrust. Evidence.
Frameworks OneTrust claims
Read from https://www.onetrust.com/solutions/ on 2026-09-12. This records what the vendor states, not a certification and not an assessment.
Claims coverage
SOC 2, GDPR, HIPAA, PCI DSS, CMMC, EU AI Act, DORA, NIS2
Does not claim
ISO 42001, NIST CSF / 800-53, FedRAMP. That means the page above does not claim these, not that the product cannot handle them. Ask.
Mentioned, but not as a claim
- ISO 27001: The Regulations and Frameworks list on this page includes an ISO 27701 solution but no ISO 27001 entry, so ISO 27001 product coverage is not claimed here.
Best fit for
Enterprise organizations needing privacy, consent, AI governance, and broader GRC automation in one platform
What stands out
The broadest platform in this directory, spanning privacy, consent, third-party risk, and AI governance under one vendor, which is why it appears as a comparison point across nearly every other category here
Worth knowing
Its breadth is also a common complaint: G2 reviewers frequently rate narrower point solutions, such as DataGrail, above it on specific workflows like sensitive-data discovery
About Enterprise GRC platform
Runs the whole governance, risk and compliance programme in one place: risk register, policies, controls, and audit workflow across many frameworks at once. See all 26 in this category.
Questions
- What does OneTrust do?
- OneTrust is a Enterprise GRC platform tool. It describes itself as "Privacy, consent, and AI governance automation platform". Runs the whole governance, risk and compliance programme in one place: risk register, policies, controls, and audit workflow across many frameworks at once.
- Who is OneTrust best suited for?
- Enterprise organizations needing privacy, consent, AI governance, and broader GRC automation in one platform
- What are the alternatives to OneTrust?
- This directory lists 25 other Enterprise GRC platform tools, including 6clicks, AccessOwl, Anecdotes.
Alternatives to OneTrust
Sources
Category is our editorial call; the vendor's own wording is above. This entry reflects public information and is not an assessment of the product. How this is built · Disclaimer