OneTrust has 9 plans: custom pricing for larger teams. We have not recorded a price change.
OneTrust plans and prices
AI Governance
Custom
Manage enterprise-wide AI initiatives, models, agents, datasets, and vendors in a single system of record.
Align AI risk assessments and tiering to global frameworks like the EU AI Act, NIST, and ISO 42001.
Configure approvals, attestations, and evaluation gates before AI systems move to production.
Automate model documentation, audit-ready evidence, and regulatory reporting outputs.
Continuously monitor performance, drift, safety, and quality signals across models and agents.
Correlate runtime behavior with usage purpose, data sensitivity, and regulatory obligations.
Detect sensitive data and surface policy violations across AI systems.
Apply runtime controls across prompts, outputs, data access, and allowed AI actions.
Show all 9 featuresShow fewer
Govern agents with purpose-based permissions, contracts, and tool access across MCP environments.
Consent Management Platform Base
Custom
Capture consent needs, create consent banners, and optimize experiences across websites, mobile apps, and CTV devices.
Identify and maintain an evergreen inventory of categorized technologies like SDKs and trackers.
Use the world’s largest database of over 45 million categorized cookies to group trackers by purpose.
Customize and brand your consent experiences across digital properties while maximizing consent rates.
Use one platform to deploy consent experiences to web, mobile, and CTV properties.
Seamless scaling with APIs to collect and enforce consent across emerging and non-traditional digital experiences.
Privacy Automation
Custom
DSR request automation
Privacy notice management
Data mapping and inventory
Global privacy regulation compliance
Identity verification
Consent Management Platform Suite
Custom
Meet global privacy regulations through customizable consent experiences, centralized privacy notices, and DSR automation.
Create branded, user-friendly interactions that reinforce trust.
Manage and update privacy notices efficiently across websites, applications, and languages.
Automate DSR request intake, identity verification, discovery, and redaction.
Capture and activate consent across web, mobile, and CTV from one platform.
Scale confidently to support growing volumes of requests, notices, and consent interactions.
Universal Consent & Preference Management
Custom
Collect and manage consent and preferences across the customer journey to drive personalized marketing programs at scale.
Build customized, dynamic interfaces to collect consent throughout the customer journey.
Create and maintain rich user profiles while complying with regulations and enhancing marketing programs.
Configure branded preference centers to give customers greater control and visibility of their data.
Centralize and synchronize customer consent and preference data across key marketing systems.
Leverage real-time dashboards and analytics to maximize the value of your consent program.
Privacy Automation Suite
Custom
Automate all internal privacy operations and data subject requests (DSRs) to support compliance and build trust.
Maintain an automated, evergreen data and activity map.
Operationalize privacy impact assessments and mitigation workflows.
Assess vendor privacy risk, manage DPAs and data transfers.
Understand the operational impact of regulatory changes with DataGuidance intelligence.
Automate data subject request (DSR) fulfillment including intake, ID verification, data retrieval and deletion, and secure communication.
Manage privacy incidents and notification requirements.
Tech Risk & Compliance
Custom
Adopt a comprehensive solution to scale governance, risk, and compliance (GRC), simplify business collaboration, and mature your risk program.
Break down compliance requirements into actionable tasks with access to in-depth templates and guidance across 50+ standards, regulations, and frameworks.
Identify risks across complex IT ecosystems by consolidating assets, data, and processes into a single platform to monitor changes over time.
Standardize and quantify risk with context to inform risk mitigation prioritization.
Automate key risk management activities such as assessments and control management to effectively engage the business.
Develop, store, and maintain GRC policies with workflows to manage the lifecycle with reviews, approvals, and attestations in collaboration with the right stakeholders.
Third-Party Risk Management Base
Custom
Automate the entire third-party lifecycle covering onboarding, assessment, risk mitigation, reporting, monitoring, and offboarding.
Build a customized third-party inventory, gain visibility, and prioritize critical relationships.
Automate vendor assessments and risk mitigation with customized workflows and ecosystem integrations.
Access risk intelligence data on millions of third parties to inform evaluations and continuous monitoring.
Third-Party Management Suite
Custom
Fully manage your third-party lifecycle with additional capabilities for integrated ethics and compliance evaluation.
Build a customized third-party inventory, gain visibility, and prioritize critical relationships.
Automate vendor assessments and risk mitigation with customized workflows and ecosystem integrations.
Access risk intelligence data on millions of third parties to inform evaluations and continuous monitoring.
Access ethics and compliance databases from Dow Jones including PEP, sanctions, and watchlists.
Evaluate third parties for critical ethics and compliance risks.
Screen and monitor for adverse media and reputational risk.