OneTrust

OneTrust, LLC is a privately held American software company headquartered in Atlanta, Georgia. It develops governance, risk, and compliance technology for organizations managing privacy, data protection, security assurance, third-party risk, regulatory obligations, ethics, sustainability, and artificial intelligence governance. Its platform is designed to centralize compliance work that might otherwise be handled through spreadsheets, separate consulting processes, disconnected databases, and manual regulatory research. Founded in Atlanta in 2016 by Kabir Barday, OneTrust initially built its business around the rapid growth of global privacy regulation. The European Union's General Data Protection Regulation and the California Consumer Privacy Act created demand for systems that could identify personal data, document processing activities, manage consent and individual rights requests, and produce evidence of compliance. OneTrust expanded from these privacy-management use cases into a broader governance platform covering data mapping, privacy assessments, consent management, regulatory intelligence, third-party risk, security compliance, ethics and compliance reporting, and related environmental or sustainability workflows. The company grew through a combination of product development, international expansion, and acquisitions. Its purchase of DataGuidance in 2019 added a regulatory research and intelligence capability. The 2020 acquisition of Integris Software strengthened data discovery and classification. In 2021, OneTrust acquired Docuvision for AI-assisted redaction, Tugboat Logic for security compliance, Convercent for ethics and whistleblowing, and Planetly for carbon-tracking capabilities. These transactions broadened the company from a specialist privacy platform into a wider enterprise governance, risk, and compliance provider. OneTrust operates internationally and maintains offices or regional operations in locations including London, Bangalore, Madrid, Paris, Munich, Singapore, and Melbourne. The company reports more than 14,000 customers worldwide and more than 300 patents as of 2025. Its Atlanta headquarters occupies approximately 74,000 square feet along the Atlanta BeltLine. The company remains privately held and does not have a publicly traded stock ticker. In the 2020s, OneTrust increasingly presented artificial intelligence as part of its compliance strategy. AI-related work has included regulatory search and summarization within DataGuidance, integration with Azure OpenAI for compliance transparency and model-governance functions, and a Privacy Breach Response Agent built with Microsoft Security Copilot. These capabilities reflect a shift from simply documenting compliance activities toward automating assessment, interpretation, response, and governance of emerging technologies. In March 2026, OneTrust announced new brand positioning centered on AI-Ready Governance. In June 2022, it announced a workforce reduction of approximately 950 employees, or about one-quarter of its workforce, attributing the move to changing investor priorities and market conditions.

OneTrust was established in Atlanta, Georgia, in 2016 by Kabir Barday. Its initial opportunity came from the growing complexity of privacy regulation and the need for organizations to operationalize laws such as the European Union's General Data Protection Regulation and the California Consumer Privacy Act. Rather than treating privacy compliance solely as a legal or consulting exercise, OneTrust developed software intended to help enterprises inventory data, record processing activities, manage consent, respond to individual requests, conduct assessments, and maintain evidence for audits. The company subsequently broadened its scope beyond core privacy management. Data mapping and discovery became important parts of its platform because organizations need to understand where personal and sensitive information is stored, how it moves, and which vendors or business processes handle it. Consent and preference tools addressed interactions with customers and users, while regulatory intelligence supported teams tracking requirements across jurisdictions. OneTrust also entered adjacent governance, risk, and compliance categories involving third-party risk, security assurance, ethics reporting, whistleblowing, redaction, and sustainability. Acquisitions were a major part of this expansion. In March 2019, OneTrust acquired DataGuidance, a United Kingdom-based regulatory intelligence platform. In June 2020, it acquired Integris Software, whose technology focused on data discovery and classification. In April 2021, OneTrust acquired four businesses: Docuvision, associated with AI redaction; Tugboat Logic, focused on security compliance; Convercent, focused on ethics and whistleblowing; and Planetly, which provided carbon-tracking capabilities. Together, these transactions helped position OneTrust as a wider enterprise platform rather than a single-purpose privacy product. The company also developed a global operating footprint, with offices or regional locations reported in London, Bangalore, Madrid, Paris, Munich, Singapore, and Melbourne, in addition to its Atlanta headquarters. By 2025, OneTrust reported more than 14,000 customers worldwide and more than 300 patents. Its Atlanta headquarters occupies approximately 74,000 square feet along the Atlanta BeltLine. OneTrust's growth strategy encountered changing conditions in 2022. In June of that year, the company laid off approximately 950 employees, or around 25 percent of its workforce. The reduction was attributed to changing investor priorities and market conditions. OneTrust remained privately held rather than becoming a publicly listed company. During the 2020s, the company increasingly connected privacy and compliance management with artificial intelligence. In 2024, AI capabilities were added to DataGuidance for regulatory-text search and summarization. In 2025, OneTrust launched a Privacy Breach Response Agent built with Microsoft Security Copilot, intended to assist with incident evaluation and breach-notification mapping. The company also integrated with Azure OpenAI for compliance-transparency and model-governance functions. In March 2026, it announced new brand positioning around AI-Ready Governance, signaling an effort to address governance requirements created by enterprise AI adoption as well as conventional privacy and security obligations.

1. 2026AI-Ready Governance positioning

   OneTrust announced new brand positioning centered on AI-Ready Governance.

   Source
2. 2025Privacy Breach Response Agent launch

   OneTrust launched an agent built with Microsoft Security Copilot to support breach evaluation and notification mapping.

   Source
3. 2024AI features added to DataGuidance

   DataGuidance gained AI-supported regulatory search and summarization features.

   Source
4. 2022Workforce reduction

   The company laid off approximately 950 employees, or about 25 percent of its workforce, citing market conditions and changing investor priorities.

   Source
5. 2021Expansion through four acquisitions

   OneTrust acquired Docuvision, Tugboat Logic, Convercent, and Planetly, extending its product coverage into redaction, security compliance, ethics, whistleblowing, and carbon tracking.

   Source
6. 2020Integris Software acquisition

   The acquisition expanded OneTrust's data discovery and classification capabilities.

   Source
7. 2019DataGuidance acquisition

   OneTrust acquired DataGuidance, adding regulatory intelligence and research capabilities.

   Source
8. 2016OneTrust is founded in Atlanta

   Kabir Barday founded OneTrust as a software company focused initially on privacy and compliance requirements.

   Source

Enterprise governance, risk, and compliance platform focused on privacy, security, regulatory compliance, data governance, and responsible artificial intelligence.

• OneTrust Privacy ManagementPrivacy management

  A suite for organizing privacy programs, including data inventories, processing records, privacy assessments, individual-rights workflows, and compliance documentation. It is intended to help legal, privacy, security, and data teams coordinate obligations across jurisdictions and business systems.

• OneTrust Consent and Preference ManagementConsent management

  Tools for collecting, storing, and applying user consent and communication preferences across digital experiences. The offering supports organizations that need to present notices, capture choices, and honor those choices across websites, applications, and marketing or customer-service processes.

• OneTrust Data Discovery and MappingData governance

  Capabilities for locating, classifying, and mapping data across organizational environments. These functions help companies understand data stores, sensitive information, processing activities, and relationships among systems, vendors, and regulatory obligations.

• OneTrust DataGuidanceRegulatory intelligence2019

  A regulatory research and intelligence platform acquired by OneTrust in 2019. It provides structured information about privacy and data-protection requirements, with AI-supported search and summarization features added in 2024.

• OneTrust Third-Party Risk ManagementThird-party risk

  Software for assessing and monitoring risks associated with suppliers, partners, and other external parties. It supports the collection of evidence, questionnaires, assessments, and oversight activities connected with privacy, security, and compliance requirements.

• OneTrust AI GovernanceArtificial intelligence governance

  Capabilities focused on governing artificial-intelligence use, including compliance transparency and model-governance functions. The offering reflects OneTrust's expansion into controls and documentation for organizations developing or deploying AI systems.

• Privacy Breach Response AgentIncident response2025

  An AI-enabled agent launched in 2025 and built with Microsoft Security Copilot. It is designed to assist organizations in evaluating privacy incidents and mapping events to potential breach-notification requirements.

• 2026AI-Ready Governance

  Global

  OneTrust announced new brand positioning built around AI-Ready Governance, presenting governance, risk, compliance, and privacy capabilities as infrastructure for responsible enterprise AI adoption.

  Outcome. New brand positioning announced; longer-term commercial outcome is not documented in the supplied sources.

  Source

• 2025Launch Privacy Breach Response AgentProduct launch

  Privacy incidents require rapid assessment of affected data, jurisdictions, and notification duties.

  What changed. OneTrust launched a Privacy Breach Response Agent built with Microsoft Security Copilot.

  Aftermath. The launch extended OneTrust's use of AI into incident evaluation and breach-notification mapping.

  Source
• 2024Add AI features to DataGuidanceProduct launch

  Regulatory teams increasingly need faster ways to locate and interpret rules across jurisdictions.

  What changed. OneTrust added AI-supported regulatory-text search and summarization to DataGuidance.

  Aftermath. DataGuidance expanded from a regulatory information resource toward an AI-assisted research workflow.

  Source
• 2022Reduce workforceStrategy

  The company cited changing investor priorities and market conditions.

  What changed. OneTrust laid off approximately 950 employees, representing about 25 percent of its workforce.

  Aftermath. The workforce reduction became a significant restructuring event in the company's growth history; further effects are not documented in the supplied sources.

  Employees affected. Approximately 950 employees laid off (June 2022)

  Source
• 2021Expand through Docuvision, Tugboat Logic, Convercent, and PlanetlyM&A

  OneTrust pursued adjacent governance, risk, and compliance categories beyond privacy management.

  What changed. The company acquired Docuvision, Tugboat Logic, Convercent, and Planetly.

  Aftermath. The acquisitions added capabilities in AI redaction, security compliance, ethics and whistleblowing, and carbon tracking.

  Source
• 2020Acquire Integris SoftwareM&A

  Data discovery and classification are foundational to privacy and data-governance programs.

  What changed. OneTrust acquired Integris Software.

  Aftermath. The transaction expanded OneTrust's data discovery and classification capabilities.

  Source
• 2019Acquire DataGuidanceM&A

  OneTrust sought to strengthen its privacy platform with regulatory research and intelligence.

  What changed. OneTrust acquired the United Kingdom-based DataGuidance platform.

  Aftermath. DataGuidance became part of OneTrust's broader regulatory and compliance offering.

  Source

• 2026OneTrust announces AI-Ready Governance positioning

  OneTrust announced new brand positioning focused on AI-Ready Governance, emphasizing governance and compliance practices for organizations adopting artificial intelligence.

  Campaign
  Source
• 2025OneTrust introduces Privacy Breach Response Agent

  OneTrust launched a Privacy Breach Response Agent built with Microsoft Security Copilot to help automate incident evaluation and mapping of potential breach-notification obligations.

  Product launchOther
  Source
• 2024OneTrust adds artificial-intelligence capabilities to DataGuidance

  AI-based functions were added to the DataGuidance regulatory research platform to support regulatory-text search and summarization.

  Product launch
  Source
• 2022OneTrust reduces workforce by approximately 950 employees

  OneTrust laid off approximately 950 employees, described as about 25 percent of its workforce. The company cited changing investor priorities and market conditions.

  Other
  Source
• 2021OneTrust completes a group of governance and compliance acquisitions

  OneTrust acquired Docuvision, Tugboat Logic, Convercent, and Planetly, adding AI redaction, security compliance, ethics and whistleblowing, and carbon-tracking capabilities.

  M&A
  Source
• 2020OneTrust acquires Integris Software

  The acquisition of Integris Software expanded OneTrust's capabilities in data discovery and classification, areas that support privacy assessments and data-governance programs.

  M&A
  Source
• 2019OneTrust acquires DataGuidance

  OneTrust acquired the United Kingdom-based DataGuidance regulatory intelligence platform, expanding its privacy-management offering with regulatory research and compliance content.

  M&A
  Source

1. OneTrust
2. OneTrust official website