OneTrust Governance, Risk and Compliance is a paid platform for organizing technology risk, compliance activities, and governance workflows. Its Tech Risk & Compliance plan provides templates and guidance covering more than 50 standards, regulations, and frameworks. Supported frameworks listed include SOC 2, ISO 27001, GDPR, HIPAA, NIS2, DORA, and NIST AI RMF. Teams can identify and monitor technology risks, perform risk assessments, manage controls, and run policy lifecycle workflows. Control mapping connects requirements with controls, while evidence collection gathers supporting material. Remediation workflows support follow-up work after risks or control issues are identified. Vendor risk management addresses risks involving suppliers and other vendors. The service is headquartered in Atlanta, Georgia, United States. OneTrust lists no free plan, and pricing for the paid service and its Tech Risk & Compliance plan is available on request.
Who it is for
It suits organizations coordinating technology risk and compliance across multiple listed frameworks. It is also relevant to teams managing controls, evidence, remediation, policies, and vendor risks.
What is good
- Guidance spans more than 50 standards and frameworks
- Supports SOC 2, ISO 27001, GDPR, and HIPAA
- Includes control mapping and evidence collection
- Provides remediation workflows and vendor risk management
What to know first
- No free plan
- Pricing is available only on request
Verdict
OneTrust brings risk assessments, controls, evidence, policies, remediation, and vendor risks into one listed platform. Its paid, quote-based model is a consideration for organizations evaluating the service.
OneTrust Governance, Risk and Compliance plans and pricing
All plansCompared on compliance management software
- Free plan
- No
- Frameworks supported
- SOC 2, ISO 27001, GDPR, HIPAA, NIS2, DORA, NIST AI RMF
- Control mapping
- Yes
- Evidence collection
- Yes
- Risk assessments
- Yes
- Remediation workflows
- Yes
- Vendor risk management
- Yes
