Agent Index by Heritage Services
Submit / Claim
Home / Agents / OneTrust

OneTrust

Vendor: OneTrust · HQ: United States · Category: Risk · Compliance · Privacy

Last verified · 4 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

OneTrust offers modules spanning privacy management, GRC, ethics and responsible AI. Useful for organizations mapping privacy programs; India DPDP-specific product claims should be verified per module with the vendor. On 15 Oct 2026 OneTrust announced a planned integration with Workday Agent Passport to map governance controls, collect evidence and keep audit-ready records for AI agents (not yet available). TX-RAMP Level 1 certified (TX1126478, expires 2027-05-23) on the Texas DIR list updated 13 Oct 2026. At TrustWeek (30 Sep 2026) OneTrust introduced CORIE (Contextual Orchestration for Reasoning, Intelligence and Evidence), described as the shared intelligence layer that powers OneTrust's native agents as well as customer-built and third-party agents. It has three parts: a Trust Graph, a Reasoning Engine that automates risk decisions with business-team oversight, and an Evidence Ledger. OneTrust also introduced an AI Control Plane that evaluates agent actions at runtime and decides whether each one proceeds, is blocked or needs human approval, plus a Governance Command Center. A headless MCP Gateway for ChatGPT, Claude, Copilot and Glean is in private preview (fall 2026). General availability dates for CORIE and the AI Control Plane are not stated.

Frameworks (vendor-stated)

DPDPISO 27001SOC 2TX-RAMP

Vendor-claimed GDPR, ISO 27001, SOC 2

Government authorizations

Registry records checked 2026-10-18. Scope “listing” means the certified product is this listing or the government boundary it already documents; “platform-only” means another product line is certified and the vendor does not state this agent is inside that boundary.

Program Product Status Scope Source
TX-RAMP Onetrust · Level 1 · TX1126478 · expires 2027-05-23 Level 1 listing Registry

Pricing (as published)

Not published

India relevance

Privacy platforms are commonly evaluated for DPDP Act readiness (notice, consent, security). Confirm DPDP-specific templates/modules directly with OneTrust before relying on them.

Tasks

privacy managementconsentvendor riskai governance

Sources

  1. onetrust.com/ (primary)
  2. onetrust.com/news/onetrust-plans-to-extend-ai-ready-governance-to-workday-agent-passport-through-integration/
  3. dir.texas.gov/resource-library-item/tx-ramp-certified-cloud-products
  4. onetrust.com/news/onetrust-unveils-platform-and-product-innovations-to-govern-ai-at-enterprise-scale/

Last verified 20 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Next step: find an auditor

After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.

Auditors by framework

Existing directory filters for frameworks this listing tags, shown only where at least three Verified firms are listed. A tag is vendor-stated relevance, not a certification.

Narrow by region

This listing’s HQ country is United States. That is a starting point only — choose any published country page.

United States (suggested) · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates

Audit firms in the United States (195)

Send a request Get matched with verified auditors All verified audit firms

Send my request to up to 3 matches

Choose up to 3 listed tools and/or audit firms, or tick Match me and we will pick from the directory. We store the request for review. Nothing is sent to any firm from this form. Not a ranking.

Listings (up to 3)

0 of 3 selected

Framework(s) (select all that apply)

Next steps

Working aids from official sources and this directory. This is not a ranking.

Guides

Request a demo

We'll pass your request to the vendor later; no automatic emails. Nothing is sent to the vendor now.

Use-case comparisons

Compare OneTrust with

Alternatives

  • BigID (incl. AgentIQ agents) — Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests. (shared tags: DPDP, ISO 27001, TX-RAMP)
  • UpGuard — Cyber risk and third-party risk management platform with published CRPM pricing page. (shared tags: ISO 27001, SOC 2, TX-RAMP)
  • Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized. (shared tags: ISO 27001, SOC 2, TX-RAMP)
  • Optro (formerly AuditBoard) — AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance. (shared tags: ISO 27001, SOC 2, TX-RAMP)
  • Secureframe — Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. (shared tags: ISO 27001, SOC 2, TX-RAMP)
  • VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) — Singapore-headquartered agentic compliance platform whose named agents review uploaded evidence against framework controls and flag gaps, score vendors from 12+ external sources without questionnaires, scan cloud posture and auto-escalate critical findings to the risk register, draft answers to customer security questionnaires (SIG, CAIQ, custom) from live policies, draft policies, and generate fixes for failed controls and mark them ready for re-audit. (shared tags: DPDP, ISO 27001, SOC 2)

See all OneTrust alternatives →

FAQ (from this dataset)

What does OneTrust do?

Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.

How much does OneTrust cost?

Not published

Where is OneTrust headquartered?

United States

Which frameworks does OneTrust support?

Frameworks (vendor-stated): DPDP, ISO 27001, SOC 2, TX-RAMP. Framework tags indicate relevance, not certification.

What are alternatives to OneTrust?

See the OneTrust alternatives page for category-sharing listings in relevance order, not a ranking. OneTrust alternatives.

Stay updated

We use your email only to send the newsletter. See our privacy policy.