AI risk & compliance management
AI-specific module of OneTrust's privacy and governance suite: central inventory of AI systems, models, datasets, agents and vendors with use-case intake and approval workflows, risk tiering, impact assessments and policy-driven controls intended to produce audit-ready records for security and governance teams.
commercial · generally available · Research snapshot 2026-09-06
Visit the official product source ↗AI risk & compliance management · Agent discovery & inventory · Data governance & privacy
Useful conversation with: CISO, Privacy officer, AI governance lead.
Show me the AI use-case intake and approval workflow end to end, and which evidence OneTrust captures automatically versus manually.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Vendor claim
Product page states a central inventory of models, datasets, agents and vendors with ownership and lifecycle status, configurable AI use-case intake and approval workflows, automated risk tiering by use case/system/component, and impact assessments.
Limit: Product marketing page; no technical documentation was fetched, so workflow configurability and discovery coverage are unverified.
Vendor claim
Solutions page claims continuous discovery of AI across environments, policy evaluation across models, data, agents and vendors, real-time guardrails and runtime enforcement, and generation of audit-ready evidence with attestations.
Limit: Marketing claims only. Runtime enforcement scope, supported platforms and what 'audit-ready' means for any specific framework are not evidenced.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction