OneTrust AI Governance

OneTrust AI Governance extends the company's well-established privacy, data governance and GRC platform to the oversight of AI systems, models, agents, datasets and vendors within a single system of record. Building on OneTrust's large installed base in privacy management, it lets organizations inventory their AI estate, run risk and impact assessments, and configure approvals, attestations and evaluation gates that AI systems must clear before reaching production. Assessment templates align to global frameworks including the EU AI Act, NIST AI RMF and ISO/IEC 42001, and the platform automates model documentation, audit-ready evidence and regulatory reporting. More recent capabilities add continuous monitoring of performance, drift, safety and quality signals, correlating runtime behavior with data sensitivity and regulatory obligations, plus sensitive-data detection and policy-violation surfacing across prompts, outputs and data access. It is aimed primarily at privacy, legal, compliance and GRC teams that already rely on OneTrust and want AI governance to sit alongside their consent, data mapping and third-party risk workflows rather than in a separate tool. Its main tradeoffs are enterprise-level pricing and a workflow-heavy approach oriented to governance professionals rather than data scientists.