OneTrust

25 criteria · 100 points

Rating breakdown

Recalculated 13 November 2026 using the same 25 criteria for every listing. An explicit “no” scores zero; an answer not found in the vendor pages reviewed scores zero and is marked separately. The pages used for this profile are listed in Sources and verification.

Not found in reviewed pages: 2 of 25 criteria.

Product functions

Capabilities

• Anonymous reportingPublished by the vendor
• More than one intake channelPublished by the vendor
• Two-way dialogue with the reporterPublished by the vendor
• EU Directive 2019/1937 documentedPublished by the vendor
• Case workflow with statusesPublished by the vendor
• Audit trail for handler actionsPublished by the vendor
• Role-based access controlPublished by the vendor
• Internal notes hidden from the reporterPublished by the vendor
• Deadline tracking and remindersPublished by the vendor
• Conflicts-of-interest registerPublished by the vendor
• Gifts and hospitality registerPublished by the vendor
• Code-of-conduct attestationPublished by the vendor
• Ethics or compliance training recordsNot published either way
• Policy managementPublished by the vendor
• Single sign-onPublished by the vendor
• Documented public APIPublished by the vendor
• Public trust or security pagePublished by the vendor
• Applies AI to report contentNot published either way
• Monthly billing optionVendor states it is not offered
• Self-serve sign-upVendor states it is not offered
• Free trial or sandboxVendor states it is not offered

published by the vendor·vendor states it is not offered·not published either way

Assurance and regulation

Certifications and national law

Who it is for

Best fit and differentiators

Typical buyerOrganisations already buying OneTrust for privacy or GRC that want ethics disclosures in the same platform and contract.

• Conflict-of-interest and gifts registers sit beside the speak-up channel
• EU data residency is a published option
• Ethics is one module of a much larger privacy platform