OneTrust
by OneTrust, LLC · Data Privacy & GDPR
Privacy, data governance and compliance automation platform used by over half the Fortune 500.
Updated August 2026 · By the ERP Research Editorial Team · Independent and vendor-neutral.
- Works with
WorkdaySalesforceSnowflakeMicrosoftAdobe- Deployment
- Cloud
- Company size
- Mid-market, Enterprise
- Pricing
- Quote-based
- Founded
- 2016
- Headquarters
- Atlanta, United States
Overview
OneTrust is a privacy, security and data governance automation platform that helps organizations manage compliance obligations across global regulations such as GDPR and CCPA. The platform consolidates data mapping, data subject request (DSR) fulfillment, consent and preference management, privacy impact assessments, and regulatory intelligence into a single hub, and reports that over half of the Fortune 500 use it.
Core modules include Data and Activity Mapping (a continuously updated inventory of processing activities, systems and vendors that feeds downstream workflows), DSR Automation (identity verification, data discovery, deletion and secure response delivery for access and deletion requests), Consent and Preferences (cookie and universal consent capture across web, mobile and connected platforms), Privacy Notices, and AI-assisted risk assessments and incident management. A DataGuidance regulatory research layer tracks changes across 300+ jurisdictions and surfaces them through OneTrust Copilot.
OneTrust connects to identity and access management systems, cloud providers and CMDBs for automated data-asset discovery, and ships native integrations with business platforms including Workday (HR and finance data mapping and DSAR fulfillment), Salesforce (consent capture in the CRM), Snowflake (a native Consent Management app plus data-use governance and DSR automation inside the warehouse), Microsoft (Purview, Sentinel and AI Foundry for DSPM and AI governance) and Adobe (consent signals synced into Real-Time CDP for compliant personalization). The vendor lists 500+ pre-built integrations across its marketplace and offers a public developer portal with APIs and SDKs.
Features & capabilities
Data & Activity Mapping
Continuous inventory of personal data, systems, and processing activities.
- Automated data-asset discovery via IAM, cloud provider and CMDB connections
- Central record of processing activities (RoPA) generation, including GDPR Article 30 reports
- Data flow visualization across processing activities and vendors
- Cross-border data transfer identification
- Vendor and third-party risk inventory tied to the data map
Data Subject Request (DSR) Automation
End-to-end automation of access, deletion and correction requests.
- Consumer-facing intake portal with identity verification
- Automated data discovery, redaction and deletion across connected systems
- Regulatory-aware workflow automation for legal-hold checks
- Secure encrypted response delivery
- Reporting on DSR volume and fulfillment time
Consent & Preference Management
Cookie and universal consent capture and enforcement.
- Cookie consent banners with geo-targeted rule sets
- Universal Consent & Preference Management across channels
- Native Snowflake Consent Management Marketplace app
- Consent sync into Salesforce and Adobe Real-Time CDP
- Consent record audit trail
Privacy Risk & Impact Assessments
AI-assisted workflows for PIAs, DPIAs, and vendor risk.
- Automated initiation of Privacy/Data Protection Impact Assessments
- Vendor privacy assessments and DPA management
- AI-assisted risk identification and mitigation tracking
- Incident and breach management workflows
Regulatory Intelligence & Compliance Management
A shared compliance engine spanning multiple frameworks.
- DataGuidance regulatory research across 300+ jurisdictions
- OneTrust Copilot for tracking regulatory changes
- Evidence collection mapped across frameworks (GDPR, CCPA and others)
- Privacy notice creation, versioning and publication workflows
Common use cases
- Building and maintaining a single record of processing activities (RoPA) for GDPR Article 30 compliance
- Automating intake, verification and fulfillment of consumer data subject access and deletion requests
- Deploying geo-aware cookie consent banners across global web properties
- Syncing verified consent into Salesforce and Adobe Real-Time CDP for compliant marketing personalization
- Automating privacy and data protection impact assessments ahead of new processing activities
- Discovering and classifying personal data inside Snowflake and enforcing data-use policies
- Tracking regulatory change across 300+ jurisdictions from a single compliance intelligence engine
Strengths & considerations
Strengths
- Consolidates data mapping, DSR automation, consent management, assessments and regulatory intelligence in one platform rather than point tools
- DataGuidance regulatory research layer covering 300+ jurisdictions feeds directly into workflow automation via OneTrust Copilot
- Broad marketplace of 500+ pre-built integrations plus native apps such as the Snowflake Consent Management Marketplace listing
- Reports usage by over half of the Fortune 500, indicating deep enterprise-scale deployment experience
ERP integrations
Maps personal data across Workday HR, finance and planning to power DSAR fulfillment
Collects and stores consent and preference data inside the CRM for marketing and sales touchpoints
Native Consent Management app plus data-use governance and DSR automation inside the warehouse
Connects to Purview and Sentinel for DSPM and to Microsoft AI Foundry for AI governance
Syncs consent signals into Adobe Real-Time CDP for compliant personalization
Pricing
Usage-based meters that vary by solution, for example admin users and privacy-asset inventory for Privacy Automation, average daily visitors for the Consent Management Platform, and total data-subject profiles for Universal Consent & Preference Management. Customers request a personalized quote. Get an independent shortlist with pricing guidance below.
Technical & security
- Hosting
- SaaS
- Compliance
- ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27017, SOC 2 Type II, PCI DSS, HITRUST, TISAX, ISO 9001
About the vendor
- Founded
- 2016
- Headquarters
- Atlanta, United States
- Employees
- ~2,000
- Ownership
- Private (backed by Coatue and Insight Partners)
Alternatives to OneTrust in Data Privacy & GDPR
OneTrust — frequently asked questions
Does OneTrust integrate with Workday?
Yes. OneTrust connects to Workday's finance, HR and planning system to build an evergreen data map of personal data and automatically fulfil data subject access requests originating from HR and recruitment processes.
Can OneTrust manage consent inside Snowflake?
Yes. OneTrust offers a native Consent Management app in the Snowflake Marketplace, alongside data-use governance and automated data subject request handling for data stored in Snowflake.
How is OneTrust priced?
OneTrust does not publish price points. Pricing uses usage-based meters specific to each solution, such as admin users and privacy-asset inventory for Privacy Automation or average daily visitors for the Consent Management Platform, with a personalized quote from sales.
What compliance certifications does OneTrust hold?
OneTrust's Trust Center lists ISO/IEC 27001, 27701 and 27017, SOC 2 Type II, PCI DSS, HITRUST and TISAX, among others.
Evaluating Data Privacy & GDPR?
Tell us your ERP and requirements and we'll send an independent shortlist — including OneTrust and the best-fit alternatives — with honest pros and cons.