OneTrust
by OneTrust, LLC · Data Privacy & GDPR
Privacy, data governance and compliance automation platform used by over half the Fortune 500.
Updated August 2026 · By the ERP Research Editorial Team · Independent and vendor-neutral.
- Works with
WorkdaySalesforceSnowflakeMicrosoftAdobe- Deployment
- Cloud
- Company size
- Mid-market, Enterprise
- Pricing
- Modular annual subscription, quote-based
- Founded
- 2016
- Headquarters
- Atlanta, United States
Overview
OneTrust is a privacy, security and data governance automation platform that helps organizations manage compliance obligations across global regulations such as GDPR and CCPA. The platform consolidates data mapping, data subject request (DSR) fulfillment, consent and preference management, privacy impact assessments, and regulatory intelligence into a single hub, and reports that over half of the Fortune 500 use it.
Core modules include Data and Activity Mapping (a continuously updated inventory of processing activities, systems and vendors that feeds downstream workflows), DSR Automation (identity verification, data discovery, deletion and secure response delivery for access and deletion requests), Consent and Preferences (cookie and universal consent capture across web, mobile and connected platforms), Privacy Notices, and AI-assisted risk assessments and incident management. A DataGuidance regulatory research layer tracks changes across 300+ jurisdictions and surfaces them through OneTrust Copilot.
OneTrust connects to identity and access management systems, cloud providers and CMDBs for automated data-asset discovery, and ships native integrations with business platforms including Workday (HR and finance data mapping and DSAR fulfillment), Salesforce (consent capture in the CRM), Snowflake (a native Consent Management app plus data-use governance and DSR automation inside the warehouse), Microsoft (Purview, Sentinel and AI Foundry for DSPM and AI governance) and Adobe (consent signals synced into Real-Time CDP for compliant personalization). The vendor lists 500+ pre-built integrations across its marketplace and offers a public developer portal with APIs and SDKs.
Modules & capabilities
OneTrust covers 25 of 48 capabilities we track in this category (+2 partial)
52%- Sensitive & regulated data discoveryAutomated data-asset discovery via IAM, cloud provider and CMDB connectionsCore strength
- Unstructured data scanningNot evidenced
- ML-based automated classificationNot evidenced
- Continuous / differential scanningNot evidenced
- Data asset inventory & catalogingSupported
- Broad data-source connector librarySupported
“Not evidenced” means our research found no public documentation of this capability — the vendor may still offer it. Confirm on a demo.
Common use cases
- Building and maintaining a single record of processing activities (RoPA) for GDPR Article 30 compliance
- Automating intake, verification and fulfillment of consumer data subject access and deletion requests
- Deploying geo-aware cookie consent banners across global web properties
- Syncing verified consent into Salesforce and Adobe Real-Time CDP for compliant marketing personalization
- Automating privacy and data protection impact assessments ahead of new processing activities
- Discovering and classifying personal data inside Snowflake and enforcing data-use policies
- Tracking regulatory change across 300+ jurisdictions from a single compliance intelligence engine
Strengths & considerations
Strengths
- Consolidates data mapping, DSR automation, consent management, assessments and regulatory intelligence in one platform rather than point tools
- DataGuidance regulatory research layer covering 300+ jurisdictions feeds directly into workflow automation via OneTrust Copilot
- Broad marketplace of 500+ pre-built integrations plus native apps such as the Snowflake Consent Management Marketplace listing
- Reports usage by over half of the Fortune 500, indicating deep enterprise-scale deployment experience
Used OneTrust with your ERP? Rate it in 30 seconds — it helps every buyer after you.
Rate itERP integrations
Developed by OneTrust; maps personal data across Workday HR, finance and planning to power evergreen data mapping and automated DSAR fulfillment. Page states it was developed by OneTrust, not listed on marketplace.workday.com.
Connector details independently verified against vendor marketplaces and documentation; last checked 2026-08-20.
Pricing
Full OneTrust pricing breakdown — cost at 25/100/500 seats, competitor rates & FAQs
OneTrust starts around $10,000 a year and rises steeply with module scope. It is a privacy and data-governance suite rather than a security-certification tool, spanning consent management, data mapping, DSAR automation, third-party risk and increasingly AI governance — so a like-for-like comparison against Vanta or Drata is misleading, because they solve a different problem. Pricing is driven by which modules you activate and by data-subject volume, not by seats. Get an independent shortlist with pricing guidance below.
What does OneTrust cost?
OneTrust prices by quote, like most of this category. Here is what actually drives your number — and what to ask before you get one.
6 of the 12 vendors we track in this category publish no list price at all.
Technical & security
- Hosting
- SaaS
- Compliance
- ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27017, SOC 2 Type II, PCI DSS, HITRUST, TISAX, ISO 9001
About the vendor
- Founded
- 2016
- Headquarters
- Atlanta, United States
- Employees
- ~2,000
- Ownership
- Private (backed by Coatue and Insight Partners)
Alternatives to OneTrust in Data Privacy & GDPR
OneTrust — frequently asked questions
Does OneTrust integrate with Workday?
Yes. OneTrust connects to Workday's finance, HR and planning system to build an evergreen data map of personal data and automatically fulfil data subject access requests originating from HR and recruitment processes.
Can OneTrust manage consent inside Snowflake?
Yes. OneTrust offers a native Consent Management app in the Snowflake Marketplace, alongside data-use governance and automated data subject request handling for data stored in Snowflake.
How is OneTrust priced?
OneTrust does not publish price points. Pricing uses usage-based meters specific to each solution, such as admin users and privacy-asset inventory for Privacy Automation or average daily visitors for the Consent Management Platform, with a personalized quote from sales.
What compliance certifications does OneTrust hold?
OneTrust's Trust Center lists ISO/IEC 27001, 27701 and 27017, SOC 2 Type II, PCI DSS, HITRUST and TISAX, among others.
Compare OneTrust head-to-head
The Data Privacy & GDPR Buyer's Guide
Before you commit to OneTrust, see how it sits against the 12 data privacy & GDPR systems we track — on capability, ERP integration depth and what each one actually charges for.
Data Privacy & GDPR Buyer's Guide
12 systems compared · 2026
ERP Research
- OneTrust compared side-by-side with 11 alternatives
- ERP integration checklist — what to verify before you shortlist
- The pricing questions that change the quote
- A OneTrust evaluation brief, included with the guide
Data Privacy & GDPR Buyer's Guide
Get a quote for OneTrust
OneTrust publishes a list price, but the number you pay depends on volume, modules and integration scope. Tell us your setup and we'll come back with a realistic figure and the alternatives worth quoting against it.