Topic

OneTrust

OneTrust is a cloud-based governance, risk, and compliance (GRC) software platform designed to help organizations manage data privacy, security, and regulatory compliance at scale. The platform provides tools for privacy impact assessments, consent management, third-party risk assessment, and audit workflows, making it widely used for managing GDPR, CCPA, and other data protection regulations. For AI governance specifically, OneTrust helps enterprises document AI models, assess algorithmic risks, track data lineage, and maintain compliance with emerging AI regulations like the EU AI Act.

1 item

Corporate PolicyGlobal2026-07-07

OneTrust's AI Governance Committee Framework Sets a Practical Bar for Agentic AI Controls, Including Traceability and Least-Privilege Requirements

OneTrust has published a detailed account of how it built its own AI Governance Committee, including a structured 'buy versus build' decision framework for third-party AI tools and specific controls for agentic AI systems. The guidance requires decision control restrictions, full traceability of autonomous actions, and least-privilege data governance for any AI that operates with meaningful autonomy. The publication functions as a practitioner implementation guide that compliance teams at other enterprises can benchmark against their own programs.

agentic AI governance committee traceability tool-use risk least privilege OneTrust third-party AI risk AI procurement