No more typing reviews! Try our Samantha, our new voice AI agent.
OneTrust GRC Logo

OneTrust GRC pros and cons

Vendor: OneTrust
4.1 out of 5
Badge Leader

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

OneTrust GRC enables vendor assessments and scheduling for updates at specific intervals.
It provides the capability to review fourth and fifth parties extensively.
OneTrust GRC assists in automating privacy impact assessments and aids in managing audits and incidents efficiently.
It offers comprehensive policy management along with built-in templates for GDPR and ISO compliance.
OneTrust GRC supports IT and vendor risk management, crucial for compliance with data protection regulations globally.

CONS

Vendor Risk dashboard is basic and not interactive, with improvements expected in future releases.
Manual processes are required for workflow automation, and there are limitations to both automation and customized workflows.
Integration capability requires improvement, as linking various DSAR systems can be time-consuming.
Lacks presence of comprehensive professional services offered, such as free initial consultation hours annually.
Implementation challenges exist, particularly in scoping for individuals outside governance, risk, and compliance.
 

OneTrust GRC Pros review quotes

Gerald Pegg - PeerSpot reviewer
Governance Risk and Compliance Coordinator at HUB International
Oct 11, 2024
The privacy impact assessment automation tool and the incident management tool are very user-friendly.
Brooke Lynne Bowman - PeerSpot reviewer
Senior Compliance Manager at a healthcare company with 201-500 employees
Oct 23, 2024
The platform is especially useful in startup environments where we're typically starting from scratch.
Steve Peacock - PeerSpot reviewer
Director - Security & Compliance at Venzo
Apr 26, 2024
One of the most beneficial features of the product has been its cloud-based IT and vendor risk management tools, along with built-in templates for GDPR and ISO compliance.
Learn what your peers think about OneTrust GRC. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,221 professionals have used our research since 2012.
reviewer2055579 - PeerSpot reviewer
Cyber Security Consultant at a tech services company with 51-200 employees
May 31, 2024
The most valuable feature of the solution is that it already has visibility about all the data protection regulations or other cybersecurity regulations related to several countries
Dave Anifowoshe - PeerSpot reviewer
Information Security Officer at a financial services firm with 11-50 employees
Oct 24, 2024
The simplicity of OneTrust GRC, particularly its user interface, is valuable as it makes it easy to use and not complex.
reviewer2394882 - PeerSpot reviewer
Compliance Analyst at a computer software company with 1,001-5,000 employees
Apr 25, 2024
We have data from Jira regarding addiction related to Europe as well as California. Additionally, we have data related to the Indian Data Protection Bill. Therefore, GDPR compliance is highly beneficial.
reviewer2122608 - PeerSpot reviewer
Group Head of Risk at a retailer with 1,001-5,000 employees
Mar 27, 2023
As a solution for IT risks, it is a very good product.
FC
Regional Security Officer at a comms service provider with 10,001+ employees
Sep 6, 2023
The product helps us streamline audit and incident management processes.
reviewer2093358 - PeerSpot reviewer
Senior Enterprise Risk Manager at a retailer with 10,001+ employees
Feb 13, 2023
It does help in the automation of our privacy impact assessments.
reviewer1589922 - PeerSpot reviewer
Manager, Information Security Risk at a university with 1,001-5,000 employees
May 28, 2021
One of the valuable features of this solution is it has the ability to review fourth and fifth parties to the nth degree.
 

OneTrust GRC Cons review quotes

Gerald Pegg - PeerSpot reviewer
Governance Risk and Compliance Coordinator at HUB International
Oct 11, 2024
I wish there were more customization options, particularly within the privacy rights automation module.
Brooke Lynne Bowman - PeerSpot reviewer
Senior Compliance Manager at a healthcare company with 201-500 employees
Oct 23, 2024
The implementation of OneTrust could have been smoother, particularly in terms of scoping for those outside of governance, risk, and compliance.
Steve Peacock - PeerSpot reviewer
Director - Security & Compliance at Venzo
Apr 26, 2024
They could enhance the product's functionalities like audit management and ensure consistency across modules.
Learn what your peers think about OneTrust GRC. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,221 professionals have used our research since 2012.
reviewer2055579 - PeerSpot reviewer
Cyber Security Consultant at a tech services company with 51-200 employees
May 31, 2024
The platform was not built in a way that allowed multinational entities to use it seamlessly.
Dave Anifowoshe - PeerSpot reviewer
Information Security Officer at a financial services firm with 11-50 employees
Oct 24, 2024
There could be enhancements related to AI.
reviewer2394882 - PeerSpot reviewer
Compliance Analyst at a computer software company with 1,001-5,000 employees
Apr 25, 2024
There are several areas for improvement. One is the integration capability. Connecting various DSAR systems can be time-consuming if a single integration takes months to complete.
reviewer2122608 - PeerSpot reviewer
Group Head of Risk at a retailer with 1,001-5,000 employees
Mar 27, 2023
I haven't seen any return on investment using the solution. If I had the opportunity, I would use a different solution.
FC
Regional Security Officer at a comms service provider with 10,001+ employees
Sep 6, 2023
The product is not that easy to set up.
reviewer2093358 - PeerSpot reviewer
Senior Enterprise Risk Manager at a retailer with 10,001+ employees
Feb 13, 2023
There are limitations to customized workflow automation, and they need to increase both the available automation and the customized workflow.
reviewer1589922 - PeerSpot reviewer
Manager, Information Security Risk at a university with 1,001-5,000 employees
May 28, 2021
They could improve by offering free help. A solution, a lot of times, is not just the use of the solution. For example, it is the overall engagement, how well do they support the system, what is their SLA, and how long their response time is to an issue. It would be beneficial if they had some type of professional services where they offer the first five hours of professional services a year for free. That would be a substantial benefit rather than having to buy professional services or professional services packages.