OneTrust AI Governance

OneTrust is a privately held software company founded in 2016 and headquartered in Atlanta, Georgia. It built its business on privacy management, consent, and cookie compliance, and has expanded into a broader trust platform spanning data use governance, third-party management, tech risk and compliance, and AI governance. The company appointed John Heyman as Chief Executive Officer to drive its AI-ready governance platform strategy.

OneTrust AI Governance sits within this platform and reflects the company push into AI-specific oversight. OneTrust was named a Visionary in the inaugural 2026 Gartner Magic Quadrant for AI Governance Platforms, and it markets a shared operating model connecting governance teams and AI owners across models, datasets, agents, vendors, and platforms.

The product organizes work into managing AI risk, observing AI at runtime, controlling AI actions and use, and proving governance in production. Teams discover and centralize AI systems, agents, models, datasets, and vendors in an AI Program Center, assign ownership, and apply consistent risk evaluation using EU AI Act, NIST AI RMF, and ISO 42001 templates. Automated workflows route intake, approval, attestation, and signoff while tracking lifecycle status, exceptions, and required controls.

Runtime capabilities monitor model and agent behavior across supported platforms such as Amazon Bedrock and Microsoft Azure AI Foundry, surfacing evaluation, usage, and PII signals. AI Policy Manager defines policy intent while Guardrail Enforcement executes technical actions to filter prompts and outputs, and block, redact, route, or escalate activity. The AI Guard SDK, a Python library, detects sensitive data in prompts and responses before a model sees it, and Guardian Agents plus MCP governance controls extend auditable oversight into agentic environments.

OneTrust AI Governance targets large enterprises and regulated organizations that have significant AI adoption and face obligations under the EU AI Act, NIST AI RMF, ISO 42001, and other emerging regulations. Its primary audiences are privacy, compliance, legal, security, and risk teams, as well as data and AI governance councils that need centralized visibility and enforceable controls. It is less suited to small businesses, startups, or individual developers given its enterprise focus and custom pricing.

OneTrust is a private company that, according to third-party trackers, has raised roughly 1.13 billion dollars across multiple rounds from investors including TCV, Insight Partners, Coatue, and Generation Investment Management. Its largest round was a 300 million dollar Series C in December 2020, and a later 150 million dollar round in July 2023 was led by Generation Investment Management at a reported valuation of about 4.5 billion dollars, a decrease from an earlier peak valuation. These figures come from external sources and are not confirmed by OneTrust in official product materials.