OneTrust

What OneTrust does

OneTrust is an Atlanta-based, privately held enterprise software company founded in 2016 by Kabir Barday that operates the "OneTrust AI-Ready Governance Platform" — a unified SaaS platform spanning Privacy & Data Governance, GRC & Security Assurance, Ethics & Compliance, ESG & Sustainability, and AI Governance. The platform is organized into six integrated solution modules (AI Governance, Consent & Preferences, Data Use Governance, Privacy Automation, Tech Risk & Compliance, and Third-Party Management) supported by featured products including the Consent Management Platform, DataGuidance regulatory intelligence, and the Privacy Breach Response Agent co-developed with Microsoft Security Copilot. OneTrust processes approximately two billion consent transactions daily and integrates natively with hyperscalers (AWS, Azure, Google Cloud), data platforms (Snowflake, Databricks), and martech ecosystems (Adobe, Salesforce, HubSpot, Marketo, Tealium).

The company serves 14,000 customers including 75 of the Fortune 100 and over half of the Fortune 500, with disclosed enterprise customers spanning airlines (Iberia), insurance (Aetna), software (Microsoft, Adobe, Blackbaud, Lumen), retail (Chewy, PUMA, Miller Knoll), consumer electronics (Samsung), pharmaceuticals (Pfizer), and hospitality (Minor Hotels). Revenue is generated primarily through enterprise SaaS subscriptions sold as multi-product bundles (Privacy, GRC, Ethics, ESG, AI Governance) on annual, quote-based contracts, supplemented by implementation and professional services delivered directly and through a global SI/consulting partner ecosystem (KPMG, Deloitte, PwC, Cognizant, PA Consulting) plus a Training & Certifications program. Reported ARR reached $500 million in 2024 against cumulative capital raised of over $1 billion, with the most recent disclosed funding round being a $150 million investment led by Generation Investment Management in July 2023 at a $4.5 billion post-money valuation and a $5.1 billion reported valuation in 2024.

In February 2026 founder Kabir Barday transitioned from CEO to a board advisory role and John Heyman was appointed CEO; Doug Owens was appointed CFO in April 2026. The company's near-term strategic posture emphasizes AI Governance as a new category, hyperscaler co-sell depth, and analyst-validated category leadership (Visionary in the inaugural 2026 Gartner Magic Quadrant for AI Governance Platforms; Leader in Forrester Wave Q4 2025 and IDC MarketScape 2025). The company has a global operating footprint with headquarters in Atlanta, a UK regional entity (OneTrust Technology Limited), and localized presence across EMEA, APAC, India, LATAM, and the Middle East.

Name

OneTrust

Legal name

OneTrust, LLC

Website

https://onetrust.com

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

OneTrust operates the AI-Ready Governance Platform — a unified enterprise SaaS suite spanning privacy, GRC, ethics, ESG, and AI governance — serving 14,000 customers including 75 of the Fortune 100 with $500M ARR, processing roughly two billion consent transactions daily and integrated across hyperscalers and major data platforms.

Ownership category

akta.pro rank

Product category

Privacy & Data Governance Software

NAICS

Software Publishers (5132), Software Publishers (51321), Software Publishers (513210)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370), Security Brokers, Dealers & Flotation Companies (6211)

akta.pro primary industry

Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)

akta.pro secondary industries

IP Management, Patents & Trademark Software (BPAEAPAN), Endpoint & Mobile Asset Management (UEM/MDM Asset Controls) (BPAEAOAI)

Keywords

• Privacy management software
• AI governance platform
• Consent management
• Third-party risk management
• GRC compliance software

Headquarters

HQ city

Atlanta

HQ country

United States

HQ region

North America

Offices4 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Software Subscription (ARR): Enterprise SaaS subscriptions sold as multi-product bundles across Privacy, GRC, Ethics, ESG, and AI Governance clouds. Achieved $500M in annual recurring revenue (ARR) in 2024 serving 14,000 customers with 75 of the Fortune 100 on the platform. Pricing scales by company size, modules selected, and integrations required; not publicly disclosed.
2. Implementation & Professional Services: Professional services delivered directly by OneTrust and through a global partner ecosystem (Deloitte, KPMG, PwC, Accenture ecosystem partners) to support enterprise deployments, regulatory readiness, and custom integrations.
3. Training & Certifications: Revenue from OneTrust Training & Certifications program for practitioners deploying the platform across privacy, GRC, and AI governance disciplines.

Pricing tiers

Go-to-market motion1 record

Distribution channels5 records

Marketing channels8 records

Core offering

OneTrust sells the AI-Ready Governance Platform, a unified enterprise software suite that operationalizes privacy, data governance, GRC, ethics, ESG, and AI governance workflows for large organizations. The platform is organized into six integrated solution modules (AI Governance, Consent & Preferences, Data Use Governance, Privacy Automation, Tech Risk & Compliance, and Third-Party Management) and is supported by featured products including the Consent Management Platform, DataGuidance regulatory intelligence, the Privacy Breach Response Agent, Data Discovery, and Trust Center. It is sold to Fortune 100/500 enterprises (75 of the Fortune 100) on multi-product, multi-year enterprise SaaS subscriptions.

Product overview

OneTrust operates as a unified platform-plus-modules architecture centered on the "OneTrust AI-Ready Governance Platform™," which the company describes as built to prevent data misuse across enterprise tech stacks by enabling continuous monitoring, automated controls, and programmatic enforcement. The platform is organized into six integrated solutions: AI Governance, Consent & Preferences, Data Use Governance, Privacy Automation, Tech Risk & Compliance, and Third-Party Management — supported by featured products including the Consent Management Platform, DataGuidance (regulatory intelligence), and Third-Party Risk Management. Together these solutions span the AI and data lifecycle for privacy, risk, ethics, ESG, and GRC use cases, with 75 of the Fortune 100 reportedly using the platform.

Differentiator

Problem solved

Functional benefit

Brands

• OneTrust DataGuidance: Regulatory intelligence and research service providing global privacy, AI, and data protection law tracking, analysis, and compliance content.
• AI-Ready Governance Platform

Products and services

• OneTrust AI-Ready Governance Platform Overarching unified platform connecting privacy, risk, data, and compliance workflows on a single architecture; provides continuous monitoring, automated controls, and programmatic enforcement across the organization, spanning AI Governance, Consent & Preferences, Data Use Governance, Privacy Automation, Tech Risk & Compliance, and Third-Party Management.
• AI Governance
• Consent & Preferences
• Data Use Governance
• Privacy Automation
• Tech Risk & Compliance
• Third-Party Management
• Consent Management Platform (CMP)
• DataGuidance
• Privacy Breach Response Agent
• OneTrust Data Discovery
• OneTrust Trust Center
• OneTrust Training & Certifications
• OneTrust Implementation & Professional Services

Named customers12 records

Segments7 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration10 records

AI capability9 records

Feature6 records

Partnerships

19 partnerships are on record, tiered flagship, moderate and minor.

• SnowflakeflagshipTechnology or Integration · 28 April 2026Strategic collaboration embedding OneTrust consent signals into Snowflake Data Clean Rooms to operationalize consent within multi-party data collaboration workflows. OneTrust has been recognized by Snowflake as a Leader in the Privacy and Consent category of the Modern Marketing Data Stack report for four consecutive years. The integration enables consent-aware data sharing across brands, publishers, and partners.
• Minor HotelsflagshipStrategic or Co-development Partner · 13 April 2026Minor Hotels partnered with Google Cloud, Salesforce, OneTrust, and Deloitte to build a global AI-driven guest data platform across 640+ properties in 63+ countries. OneTrust embeds privacy governance directly into the platform architecture while Deloitte leads strategy and implementation. Deployment targeted for 2026.
• WebflowmoderateGTM or Marketing Partner · 10 March 2026Webflow announced an expanded partnership with OneTrust (alongside Adobe, Getty Images, and TransPerfect) to integrate privacy and consent management capabilities into its platform across personalization, localization, content creation, and consent workflows. Designed to help marketing teams streamline workflows without switching between platforms.
• DatabricksflagshipTechnology or Integration · 28 October 2025OneTrust achieved validated Databricks Technology Partner status, integrating its governance platform with the Databricks Data Intelligence Platform. The partnership enables organizations to manage AI risks, compliance, and responsible AI at scale through real-time integration and centralized governance. June 2025 OneTrust-Databricks partnership also enabled real-time policy enforcement and continuous compliance across operational data workflows.
• KPMG IndiaflagshipImplementation/ SI/ Consulting Partner · 28 October 2025KPMG in India and OneTrust formed an alliance to accelerate AI-ready governance for enterprises, combining KPMG advisory services with the OneTrust privacy and AI governance platform to help organizations operationalize governance.
• Deloitte IndiaflagshipImplementation/ SI/ Consulting Partner · 15 October 2025Strategic partnership to strengthen data privacy compliance frameworks in India amid complex global regulations and India's digital data protection law. Integrates Deloitte's advisory services with OneTrust's privacy platform to help organizations streamline workflows, automate compliance, and embed privacy into operations.
• Microsoft (Security Copilot)flagshipStrategic or Co-development Partner · 1 March 2025In March 2025, OneTrust launched its Privacy Breach Response Agent in partnership with Microsoft Security Copilot, featuring autonomous breach investigation and jurisdictional mapping capabilities. OneTrust Platform is also listed on Microsoft AppSource for privacy, consent, AI governance, and risk management solutions.
• PlanetlymoderateStrategic or Co-development Partner · 8 December 2021OneTrust acquired Berlin-based climate-tech startup Planetly in December 2021 to integrate carbon accounting and sustainability into its ESG and trust platform. The Planetly operation was subsequently shut down (reported November 2022).
• Shared AssessmentsmoderateStrategic or Co-development Partner · 4 May 2021OneTrust announced its plan to acquire Shared Assessments in May 2021 to meet increasing global demand for third-party risk standardization.
• EuroprivacymoderateStrategic or Co-development PartnerOneTrust was selected as an official technology partner of Europrivacy by the European Centre for Certification and Privacy (ECCP). The partnership enables organizations to achieve GDPR compliance certification alongside OneTrust platform deployment.
• PwCmoderateImplementation/ SI/ Consulting PartnerPwC x OneTrust joint webinars on youth privacy, safety, and consent experiences; PwC NFL fireside chat on consent and preference management; KPMG x OneTrust AI governance leadership webinars.
• AdobeflagshipTechnology or IntegrationOneTrust Consent and Preferences integrates with Adobe Experience Platform and Salesforce Marketing Cloud for permission-based personalization. Webflow partnership further extends Adobe-OneTrust co-presence.
• Salesforce (Marketing Cloud)flagshipTechnology or IntegrationIntegration between OneTrust Consent and Preferences and Salesforce Marketing Cloud to maximize consent orchestration across the martech stack; OneTrust also referenced as delivery partner alongside Salesforce in Minor Hotels partnership.
• TealiummoderateTechnology or IntegrationOneTrust and Tealium partnership helps deliver more personalized experiences while ensuring consent enforcement; closing the compliance gap across customer data pipelines.
• MarketomoderateTechnology or IntegrationOneTrust Consent & Preference integrates with Marketo to maximize consent-driven marketing efficiency and value.
• HubSpotmoderateTechnology or IntegrationOneTrust Consent & Preferences integrates with HubSpot to maximize consent-driven marketing efficiency.
• CognizantmoderateImplementation/ SI/ Consulting PartnerOneTrust + Cognizant joint webinars focused on unlocking marketing ROI and brand trust through consent management.
• PA ConsultingmoderateImplementation/ SI/ Consulting PartnerOneTrust and PA Consulting run joint webinars on PIA/DPIA automation, DSAR handling, data mapping, and ICO Data Protection Practitioner conference recaps.
• CapcominorImplementation/ SI/ Consulting PartnerCo-produced eBook on consent management for financial services firms, leveraging Capco's financial services expertise.

Scale indicators8 records

Recent moves7 records

Expansion highlights5 records

Direct peers

• Securiti: Securiti is the closest direct competitor to OneTrust, offering a unified Data Command Center for privacy, consent, data governance, and AI governance. Its Gencore AI and Data Controls Cloud overlap heavily with OneTrust's AI Governance, Consent & Preferences, and Data Use Governance modules, and it competes head-to-head for Fortune 500 compliance and AI risk buyers.
• TrustArc: TrustArc is a longstanding privacy management software peer offering privacy program automation, consent management, and regulatory intelligence (its own Privacy Central and Nymity research assets). It competes directly with OneTrust's Privacy Automation and Consent & Preferences modules across Fortune 1000 enterprise buyers.
• BigID: BigID is a data intelligence platform providing data discovery, classification, privacy, and AI governance. It overlaps with OneTrust's Data Discovery, Privacy Automation, and emerging AI Governance capabilities, particularly for enterprises prioritizing data-centric governance architectures.
• Collibra: Collibra is a data intelligence and governance platform covering data catalog, data quality, data lineage, and increasingly AI governance. It competes with OneTrust's Data Use Governance module for enterprise CDO/CIO buyers and is frequently evaluated alongside OneTrust in governance platform selections.
• Didomi: Didomi is a consent and preference management platform serving European and global enterprises, with strong CMP capabilities for IAB TCF compliance. It competes with OneTrust's Consent & Preferences module, particularly for European digital media and publisher customers.
• Cookiebot (Cybot): Cookiebot is a leading consent management platform focused on web-based cookie compliance and CMP certification. It competes with OneTrust's Consent Management Platform offering, particularly for mid-market and European customers seeking lighter-weight, regulation-focused CMPs.

Emerging players

• Privado: Privado is an emerging privacy and data governance platform offering code-scanning, data mapping, and consent orchestration. It overlaps with OneTrust's Privacy Automation and Data Discovery modules, particularly for engineering-led and developer-centric privacy programs.
• Vanta: Vanta is a fast-growing compliance and trust management platform automating SOC 2, ISO 27001, HIPAA, and adjacent frameworks for mid-market and growth-stage companies. It competes with OneTrust's Tech Risk & Compliance module from the bottom-up, capturing the mid-market segment OneTrust's enterprise GTM underserves.
• Drata: Drata is an emerging compliance automation platform for SOC 2, ISO 27001, HIPAA, and other frameworks, with continuous control monitoring and audit workflows. It competes with OneTrust's Tech Risk & Compliance offering primarily in the mid-market and SaaS segments, applying PLG-style pricing pressure.

Broad incumbents

• Microsoft Purview: Microsoft Purview is Microsoft's broad data governance and compliance suite, embedded across Microsoft 365, Azure, Fabric, and the Security Copilot ecosystem. It is a frequent competitor and partner context for OneTrust, with bundled capabilities that pressure OneTrust's standalone platform economics in Microsoft-centric enterprises.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/OneTrust
• Facebookfacebook.com/officialonetrust
• LinkedInlinkedin.com/company/onetrust

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles19 records

Subsidiaries4 records

Funding overview

Funding rounds7 records

Investors11 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A10 records

Investments4 records

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about OneTrust