OneTrust AI Governance

Active, privately held.

Sources 1, 2 · checked 2026-11-08

• AI inventory that discovers and catalogs AI systems, models, agents, datasets, vendors, and projects, with owners, lifecycle status, and dependencies
• Risk assessment templates for EU AI Act, NIST AI RMF, and ISO 42001; automatic risk tiering by use case, system, or data sensitivity; revalidation on material change
• Risk evaluation for homegrown and third-party AI; separate Third-Party Management solution
• AI Policy Manager, runtime guardrails that block, redact, or route actions, and production monitoring of models and agents
• Integrations named for Amazon Bedrock, Microsoft Foundry, Google Vertex, Databricks Unity Catalog, Jira, and Palo Alto Networks

Sources 1, 2 · checked 2026-11-08

• Organizations already using OneTrust for privacy, consent, or third-party risk
• Privacy and compliance teams that lead AI governance

Sources 1, 2 · checked 2026-11-08

Contact vendor (pricing page describes packages without prices)

Sources 1, 2 · checked 2026-11-08

• SOC 2 Type II
• ISO/IEC 27001
• ISO/IEC 27701
• ISO/IEC 27017
• ISO 9001
• HITRUST
• PCI DSS
• TISAX

Trust Center does not list ISO 42001 or FedRAMP.

Listed as stated by the vendor. Scope can differ by product or subsidiary; request current reports.

Sources 1, 2 · checked 2026-11-08

• No public pricing
• Integration coverage differs by platform (for example Bedrock vs Foundry); confirm the signals you need
• Third-party AI risk may require the separate Third-Party Management product; confirm licensing

Sources 1, 2 · checked 2026-11-08