OneTrust Third-Party Risk

A platform for assessing, monitoring, and remediating vendor and third-party risk across the supplier lifecycle.

Open source: No

Editorial review

OneTrust Third-Party Risk has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Tags(open-source;cloud-native): third-party risk, vendor risk management, TPRM, compliance, AIVerification pending

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Automated third-party risk assessment and lifecycle management, AI-powered data collection and questionnaire response generation, Intake screening against risk rating and compliance databases, Contextual third-party scoring, tiering, and triage, Critical event triggered automation and real-time visibility into third-party issuesVerification pending

Security · Privacy · Compliance

Regulatory compliance(HIPAA;PCI DSS;FedRAMP;GDPR support): GDPR, US privacy laws, EU AI ActVerification pending

Audience · Use · Case

Best for(Neutral editorial summary): Security, privacy, and procurement teams automating third-party risk assessments and lifecycle managementVerification pending
Primary use cases(build;monitor;automate): Third-party onboarding and assessment automation, Third-party risk screening and monitoring, Risk-informed business decisions across the extended enterpriseVerification pending

Lifecycle · Versioning

Maintenance status(active;maintenance;deprecated;EOL;archived): activeVerified

Vendor · Maintainer

Founded year(2012): 2016Verified
Headquarters country(US): United StatesVerified
Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

User reviews

Review policy

No published reviews yet.