CISO Tribune

Company record · security vendor

OneTrust

CISO Tribune company record: OneTrust, security vendor (Privacy management)

Where OneTrust appears on the record (76)

Every page on CISO Tribune and its network that carries this company, 76 in all.

Compared with (73)

vs Adaptive Security, vs AIShield, vs Anecdotes, vs Apptega, vs Archer, vs Asymptote Labs, vs Attaxion, vs BigID, vs Bitsight, vs Black Kite, vs Copla, vs Cranium, vs Credo AI, vs CyberSaint, vs Cygrid, vs Cynomi, vs Drata, vs Enkrypt AI, vs Fiddler AI, vs Fortified Health Security, vs Harmonic Security, vs Hilt, vs Holistic AI, vs Hyperproof, vs IBM, vs iCOUNTER, vs Immersive, vs Immuta, vs Ketch, vs Knostic, vs Kovrr, vs LogicGate, vs MetricStream, vs Neo, vs NGC Risk, vs Noma Security, vs Onspring, vs Onyx Security, vs Optro, vs Osano, vs Panorays, vs Pillar Security, vs Prevalent, vs Protegrity, vs Reco, vs Recorded Future, vs RegScale, vs RiskRecon, vs Safe Security, vs Scrut Automation, vs Scytale, vs Secureframe, vs Securiti, vs SecurityScorecard, vs Singulr, vs Skyflow, vs SOCRadar, vs SplxAI, vs Sprinto, vs Straiker, vs Symmetry Systems, vs Teramind, vs Third Wave Innovations, vs Thoropass, vs Token Security, vs Transcend, vs TrustArc, vs UpGuard, vs Vanta, vs Vodafone, vs Whistic, vs WitnessAI, vs Zenity

In the vendor directory (3)

What the company sells

OneTrust sells software that connects privacy, data, AI, and technology risk in one continuous system. OneTrust says the software lets teams define purpose, automate assessments, enforce controls, and continuously monitor new risks across domains. OneTrust says it enables organizations to collect, secure, and manage data with full visibility and control across their infrastructure. More than half of the Fortune 500 choose OneTrust to protect data, reduce risk, and move faster with confidence. 14,000+ customers, large and small, rely on OneTrust. OneTrust integrates directly with the platforms where personal data flows, from applications and data platforms to AI systems and vendor ecosystems. OneTrust connects privacy, legal, data, AI, security, and business teams through a shared governance system.

OneTrust Consent & Preferences helps marketing, data, and privacy teams collect permissioned first-party data and honor every yes, no, and preference wherever data flows. Universal Consent & Preference Management (UCPM) brings consent and granular preferences into one real-time profile that persists across channels, devices, and touchpoints. OneTrust software detects cookies, tags, trackers, pixels, and beacons across a website. OneTrust offers no-code cookie blocking, tag manager integrations, or script re-writing to block trackers until explicit consent is gained. OneTrust extends cookie consent to Mobile App Consent and OTT & CTV Consent, managing all user consent and preferences through the OneTrust platform. OneTrust offers 200+ pre-built integrations, including Salesforce, Adobe Real-Time CDP, Snowflake, Databricks, Google, Meta, and LiveRamp. OneTrust Consent Receipt records each consent choice with version history, change tracking, and a timestamp. OneTrust offers pre-built templates for GDPR, CCPA/CPRA, LGPD, and US state privacy laws.

OneTrust says it enables responsible use throughout the data lifecycle by operationalizing a privacy program. OneTrust gives a central view into personal data processing across data assets, processing activities, and vendors to auto-generate record of processing activities (RoPA), identify data transfers, and manage privacy posture. OneTrust connects to Identity and Access Management (IAM) services, cloud providers, and Configuration Management Databases (CMDBs) to continuously detect data assets and trigger downstream privacy management workflows. OneTrust automates privacy impact, vendor, and AI risk assessments and manages risk mitigation workflows. OneTrust manages incident response workflows and gives automated notification guidance per jurisdiction.

OneTrust says its AI governance offering embeds compliance and control across the AI lifecycle. OneTrust says it turns AI policy into controls that work across homegrown and third-party AI, detects shadow AI, prevents sensitive data leaks, and gives security and governance teams proof that controls are working in production. OneTrust continuously discovers AI across changing environments so teams know what is running, who owns it, and whether it was ever formally reviewed. OneTrust applies EU AI Act, NIST AI Risk Management Framework, and ISO 42001 templates. OneTrust says teams use AI Policy Manager to define policy intent, scope, applicability, and required controls, then use Guardrail Enforcement to execute technical actions where AI runs. The OneTrust AI Guard SDK is a Python SDK that identifies sensitive data in prompts and responses in real time, before the model sees it. OneTrust analyzes AI interaction logs from Amazon Bedrock and Microsoft Foundry to detect and report PII in prompts and responses. OneTrust governs agents with defined purpose, permissions, and allowed actions to extend auditable controls across agentic and MCP-enabled environments.

OneTrust says its Tech Risk & Compliance service partners and technology partner integrations make it even easier to scale resources and automate compliance. OneTrust offers out-of-the-box support for 55+ frameworks, with guidance toward IT security certifications and compliance standards like CMMC 2.0, SOC 2, NIST, GDPR, and more. OneTrust says it empowers InfoSec and IT teams to automate evidence collection, simplify collaboration, and stay audit-ready with 50+ ready-to-use frameworks. OneTrust connects to external systems to capture real-time evidence for control requirements, using pre-architected end-to-end collectors. OneTrust has a proprietary evidence framework that maps evidence of operations to unique control requirements. OneTrust maps systems, data, and risks in one view and prioritizes action with dynamic scoring and strategic impact insights. OneTrust connects teams with 200+ pre-built integrations, a user-friendly portal, and automated workflows designed to expedite remediation. OneTrust says teams can map, measure, and action IT risk in real-time to scale risk management programs.

OneTrust says it automates third-party management from intake to risk assessment, mitigation, ongoing monitoring, and reporting. OneTrust says its Third-Party Management solution streamlines every stage of the vendor lifecycle by automating workflows, like onboarding and ongoing vulnerability assessments. OneTrust runs compliance checks against adverse media, sanction lists, PEP lists, anti-slavery, bribery and corruption, and more. OneTrust populates inventory records on all third parties with up-to-date risk intelligence between assessments. OneTrust lets customers link Exchange data with SecurityScorecard, RiskRecon, SupplyWisdom, ISS Corporate Solutions, and other providers for ongoing monitoring.

OneTrust enables data use with real-time policy enforcement for AI-ready data. OneTrust says it enforces data policies with programmatic controls for effective data governance.[1][2][4][5][7][8][9][10][11][12][13][14][15][16][17]

Categories
Headquarters
Atlanta, United States[3]
Founded
Not established from our sources
Ownership
Not established from our sources
CISO on record
Not yet on our record. Send a verified source
Website
onetrust.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

  • Consent & Preferences[2][5][9]

    Streamlines consent and preference management for consumer transparency.

    OneTrust Consent & Preferences helps marketing, data, and privacy teams collect permissioned first-party data and honor every yes, no, and preference wherever data flows. Universal Consent & Preference Management (UCPM) brings consent and granular preferences into one real-time profile that persists across channels, devices, and touchpoints. OneTrust offers 200+ pre-built integrations, including Salesforce, Adobe Real-Time CDP, Snowflake, Databricks, Google, Meta, and LiveRamp.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of OneTrust's categories, then alphabetical. A list from the record, never a ranking.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

  • G2 · 4.5 out of 5[6]seen November 4, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

  1. [1]onetrust.comOneTrust · onetrust.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
  2. [2]SolutionsOneTrust · onetrust.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
  3. [3]Onetrust accelerates momentum and drives leadership in ai ready governance 302569606OneTrust via PR Newswire · prnewswire.com · published September 29, 2025 · Tier A: the company, a regulator or a filing
  4. [4]Platform Overview | OneTrustOneTrust · undated page, accessed October 27, 2026 · Tier A: the company, a regulator or a filing
  5. [5]Responsible AI Governance & Compliance Solutions | OneTrustOneTrust · undated page, accessed October 27, 2026 · Tier A: the company, a regulator or a filing
  6. [6]OneTrust Privacy Automation Reviews & Product Details - G2G2 · undated page, accessed October 27, 2026 · Tier C
  7. [7]Products | OneTrustOneTrust · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  8. [8]Privacy Management Software for Privacy Teams | Solutions | OneTrustOneTrust · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  9. [9]Consent & Preferences | Solutions | OneTrustOneTrust · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  10. [10]Cookie Consent | Products | OneTrustOneTrust · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  11. [11]Privacy Operations | Products | OneTrustOneTrust · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  12. [12]AI Governance Software | Solutions | OneTrustOneTrust · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  13. [13]Tech Risk and Compliance | Solutions | OneTrustOneTrust · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  14. [14]Compliance Automation | Products | OneTrustOneTrust · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  15. [15]Third-Party Due Diligence | Products | OneTrustOneTrust · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  16. [16]Third-Party Risk Exchange | Products | OneTrustOneTrust · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
  17. [17]Solutions | OneTrustOneTrust · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 4, 2026 from the references above.

Work for OneTrust? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at OneTrust. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about OneTrust

What does OneTrust sell?
OneTrust sells Consent & Preferences. Consent & Preferences: Streamlines consent and preference management for consumer transparency.
Who does OneTrust fit?
From its own pages, OneTrust sells mainly to marketing, data, and privacy teams for consent and preference work. OneTrust says it empowers InfoSec and IT teams to automate evidence collection and stay audit-ready. OneTrust says it gives security and governance teams proof that AI controls are working in production. OneTrust says customers large and small rely on it. OneTrust says it enforces privacy decisions directly where data is processed, shared, and activated across systems, vendors, and AI.
How does CISO Tribune file OneTrust?
CISO Tribune files OneTrust under Privacy management, with Third-party risk and security ratings and AI governance as secondary categories.
Where is OneTrust headquartered?
OneTrust is headquartered in Atlanta, United States.

Related guides