Skip to main content
OneTrust logo

OneTrust

Security and trust center evidence

onetrust.comCompliance and GRCLast verified 17 Sep 2026

Summary

OneTrust has 2 registry-verified rows in the CertReports index, last verified 17 Sep 2026. The strongest row is CSA STAR: STAR Level 1 self-assessment (CAIQ). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 17 Sep 2026, OneTrust is listed in the CSA STAR registry with a STAR Level 1 self-assessment (CAIQ) issued 28 Jul 2021, with no expiry date provided. As of 17 Sep 2026, OneTrust is listed in the EU-US Data Privacy Framework registry as Active for EU-US Certification, SW-US Certification, and UK Extension Certification, issued 14 Sep 2016 and expiring 13 Jul 2027. No public evidence found for SOC 2 as of 17 Sep 2026. No public evidence found for ISO 27001 as of 17 Sep 2026. No public evidence found regarding a BAA offering (HIPAA) as of 17 Sep 2026.

  • CSA STAR: listed in CSA STAR registry, Level 1 self-assessment (CAIQ), issued 28 Jul 2021, no expiry date given (as of 17 Sep 2026).
  • EU-US Data Privacy Framework: listed in DPF registry as Active (EU-US, SW-US, UK Extension Certifications), issued 14 Sep 2016, expires 13 Jul 2027 (as of 17 Sep 2026).
  • SOC 2, ISO 27001, and HIPAA/BAA: no public evidence found as of 17 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.

Among compliance and grc vendors

2verified rows

Category median 1, across 118 indexed compliance and grc vendors. OneTrust has more verified rows than 97 percent of them.

consent managementdata governancegdprprivacy compliancerisk management

Compliance grid

Subprocessors

No subprocessor list captured yet.

Similar vendors with evidence

Related by product tags and the Compliance and GRC category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.