AI Defense Stack

AI governance, risk & compliance

OneTrust AI Governance: AI governance product

OneTrust AI Governance is an AI governance product from OneTrust. It is a commercial product offered as: SaaS. Pricing model: contact sales.

  • Last reviewed
Visit OneTrust AI Governance (opens in a new tab)
Commercial Layer 1: Governance and risk

Best for

Organizations that want AI governance workflows alongside other OneTrust privacy and risk products, with templates for the EU AI Act, NIST AI RMF and ISO 42001

Consider instead if

  • You want a governance platform that installs on-premises or in your private cloud. See ModelOp Center or Credo AI.
  • You want model factsheets and fairness and drift evaluation in the same product. See watsonx.governance.

What OneTrust AI Governance does

OneTrust AI Governance is a commercial AI governance product from OneTrust. Its solution page describes an inventory of AI systems, models, agents, datasets, vendors and use cases, risk assessment templates for the EU AI Act, NIST AI RMF and ISO 42001 with automated risk tiering, an AI Policy Manager, intake and approval workflows, runtime monitoring of policy violations, and audit-ready evidence. OneTrust's platform hosting documentation describes Microsoft Azure hosting, either multi-tenant with dedicated tenant databases or a single-tenant Dedicated Cloud. The pricing page says pricing is based on admin users and AI inventory and links to a custom quote form. It is a governance product, not a model scanner.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Vendor
OneTrust Source, checked October 21, 2026: onetrust.com (opens in a new tab)
Status
Active Source, checked October 21, 2026: onetrust.com (opens in a new tab)
Open source
No: closed source (proprietary) Source, checked October 21, 2026: onetrust.com (opens in a new tab)
Latest release
Not documented in the sources we checked
Deployment
SaaS Source, checked October 21, 2026: my.onetrust.com (opens in a new tab)
Pricing model
Contact sales: Pricing based on admin users and AI inventory. No prices are listed; a Get Pricing link leads to a form for a custom quote. (as listed on October 21, 2026; check the vendor for current pricing) Source, checked October 21, 2026: onetrust.com (opens in a new tab)
Website
onetrust.com Source, checked October 21, 2026: onetrust.com (opens in a new tab)
Documentation
Not documented in the sources we checked
API reference
Not documented in the sources we checked
Quickstart
Not documented in the sources we checked
Security page
onetrust.com Source, checked October 21, 2026: onetrust.com (opens in a new tab)
Attestations or disclosure
ISO/IEC 27001 certification; ISO/IEC 27701 certification; ISO/IEC 27017 certification; SOC 2 Type II audit report available Source, checked October 21, 2026: onetrust.com (opens in a new tab)

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Integrations

Where OneTrust AI Governance fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that OneTrust AI Governance covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L1 Governance Governance and risk Primary Decide which AI uses are allowed, give each an owner, assess its risk and keep the evidence an auditor or regulator will ask for. Follows its category, AI governance, risk & compliance
L2 Discovery Discovery and posture Also covers Documents discovery of AI systems and their addition to the inventory. Discovers and inventories AI systems, models, agents, datasets, vendors and use cases, with owners and dependencies
L8 Monitoring Monitoring and response Also covers Documents tracking of model and agent evaluation metrics and logging of policy violations at runtime. Tracks model and agent evaluation metrics and logs policy violations at runtime

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

OWASP LLM risks mapped to OneTrust AI Governance, with the capabilities each mapping rests on
RiskHow it appliesBased on
LLM02 Sensitive Information Disclosure Policies can redact sensitive data in prompts and outputs, and the AI Guard SDK identifies sensitive data in prompts and responses in line. Defines acceptable use and required controls, and enforces them by blocking, redacting or routing actions and agent permissions; AI Guard SDK identifies sensitive data in prompts and responses in real time, and can block or redact it before it reaches the model
LLM06 Excessive Agency Agents are registered with a defined purpose and their permissions are enforced by policy. Defines acceptable use and required controls, and enforces them by blocking, redacting or routing actions and agent permissions; AI Guard SDK identifies sensitive data in prompts and responses in real time, and can block or redact it before it reaches the model

Not mapped in our analysis: LLM04, LLM09. These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.

Alternatives and related tools

More in AI governance, risk & compliance, ranked within the category by Coverage Score.

Holistic AI

Holistic AI

Commercial
  • SaaS

A commercial platform that finds AI systems, tests their risk and maps controls to regulations.

Best for: Enterprises that want AI discovery, automated testing and regulation mapping in one governance platform, including a private single-tenant cloud option

Coverage Score 55 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency
  • LLM09 Misinformation

Reviewed

Credo AI

Credo AI

Commercial
  • SaaS
  • Self-hosted

A commercial AI governance platform for AI inventory, risk assessment and policy mapping to regulations.

Best for: Enterprises that want one system of record for AI use cases, vendors and policy packs, with a self-hosted option for private environments

Coverage Score 54 out of 100
  • LLM06 Excessive Agency

Reviewed

AI Verify

AI Verify Foundation

Open sourceApache-2.0
  • Self-hosted

An open-source toolkit that runs fairness, explainability and robustness tests and builds reports.

Best for: Teams that want a free, self-hosted toolkit to test tabular or image classification and regression models and produce an assessment report

Coverage Score 47 out of 100 None mapped

Reviewed

OneTrust AI Governance FAQ

Is OneTrust AI Governance open source?

No. It is a commercial product and we found no public source repository for it.

How is OneTrust AI Governance hosted?

OneTrust's platform hosting documentation says hosting is provided by Microsoft Azure, as a multi-tenant cloud with dedicated tenant databases or a single-tenant Dedicated Cloud.

What does OneTrust AI Governance cost?

The pricing page lists no prices. It says pricing is based on admin users and AI inventory and links to a form for a custom quote.

Key facts you can cite

We have no commercial relationship with OneTrust.

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.