--- title: OneTrust Tech Risk & Compliance Reviews meta_title: 'OneTrust Tech Risk & Compliance Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 108 reviews by the users' company size, role or industry to find out how OneTrust Tech Risk & Compliance works for a business like yours. aggregate_rating: rating_value: 4.6 review_count: 108 scale: '5' date_modified: '2026-08-07' parent_category: name: Governance, Risk & Compliance url: https://www.g2.com/categories/governance-risk-compliance --- # OneTrust Tech Risk & Compliance Reviews **Vendor:** OneTrust **Category:** [Security Compliance Software](https://www.g2.com/categories/security-compliance) **Average Rating:** 4.6/5.0 **Total Reviews:** 108 ## About OneTrust Tech Risk & Compliance OneTrust's Tech Risk & Compliance solution simplifies compliance and effectively manage risks. You can scale your resources and optimize your risk and compliance lifecycle by automating governance with business-ready content, guidance, and mapping. Simplify business collaboration by turning complex regulations into simple, actionable tasks that fit into your existing processes, and ensure continuous compliance. You can also mature your risk program and contextualize risk across the business to monitor over time, educate stakeholders, report to leadership, and prioritize action. Tech Risk and Compliance includes Compliance Automation and IT & Risk Management tools. Compliance Automation scales your resources while optimizing compliance processes to efficiently scope, manage, and communicate your compliance posture, empowering InfoSec and IT Compliance professionals to automate regulatory guidance, reinforce program governance, and maintain audit readiness. With Compliance Automation you can: -Simplify business collaboration to streamline compliance workflows -Deploy pre-built integrations to automate evidence collection -Collect once, comply many with 50+ ready-to-use frameworks IT Risk Management allows you to proactively identify and mitigate risk, streamline data collection, and map risk relationships to assess and quantify risk across your IT and business ecosystem. Identify risk across complex IT ecosystems by discovering information systems vulnerabilities and cybersecurity risks across an inventory of assets, processes, and vendors. Reflect the interconnected nature of how systems, data, and risk flow throughout your business to monitor changes over time. Standardize and quantify risk with context by balancing qualitative and quantitative metrics with a scalable risk methodology that can mature from a standard matrix to automated calculations to inform risk mitigation prioritization without losing critical business context. You can enhance risk ownership across the business through automation of key enterprise risk management activities such as assessments and control management to effectively engage the business, collect information, evaluate impact, and execute remediation strategies.  ## OneTrust Tech Risk & Compliance Pros & Cons **What users like:** - Users appreciate the **ease of use** of OneTrust Tech Risk & Compliance, enhancing tracking and monitoring efficiency. (17 reviews) - Users value the **powerful automation** of OneTrust Tech Risk & Compliance, enhancing risk management and streamlining processes. (15 reviews) - Users appreciate the **centralized platform** of OneTrust Tech Risk & Compliance, enhancing tracking and visibility for risk management. (12 reviews) - Users appreciate the **centralized platform for risk and compliance management** , enhancing tracking, monitoring, and overall efficiency. (12 reviews) - Users appreciate the **centralized platform** of OneTrust Tech Risk & Compliance, enhancing efficiency and accountability in risk management. (11 reviews) - Integrations (10 reviews) - Users value the **time-saving automation** and reporting features of OneTrust Tech Risk & Compliance for efficient daily management. (10 reviews) - Compliance (9 reviews) - Efficiency (8 reviews) - Users value the **compliance simplification** offered by OneTrust, enhancing efficiency in managing risks and regulations seamlessly. (7 reviews) **What users dislike:** - Users find the **complex implementation** of OneTrust Tech Risk & Compliance challenging, requiring significant time and effort to configure. (6 reviews) - Users find the **difficult setup** of OneTrust Tech Risk & Compliance challenging, often requiring significant time and learning. (6 reviews) - Users find the **steep learning curve** of OneTrust Tech Risk & Compliance to be daunting for newcomers and complex to navigate. (6 reviews) - Users find the **steep learning curve** of OneTrust Tech Risk & Compliance challenging, complicating the initial setup process. (6 reviews) - Users experience **slow loading** times with OneTrust Tech Risk & Compliance, especially when multiple tasks are active. (6 reviews) - Slow Performance (6 reviews) - Users find the **dashboard interface complex** , requiring more time to navigate and understand effectively. (6 reviews) - Users find the **initial setup complex** and time-consuming, often requiring significant effort and learning to navigate effectively. (5 reviews) - Expensive (5 reviews) - Pricing Issues (5 reviews) ## OneTrust Tech Risk & Compliance Reviews ### 1. Don't attempt SOC2 without Tugboat Logic - A must have application **Rating:** 5.0/5.0 stars **Reviewed by:** Dave N. | Director of DevOps, Mid-Market (51-1000 emp.) **Reviewed Date:** May 18, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** The Tugboat "readiness check" is a great starting point and helps fill out what controls you will need. Combine it with the evidence tracking, auto-collection, on/off-boarding modules, and awareness training, and it's the full package for a SOC2 (or indeed, security program!) **What do you dislike about OneTrust Tech Risk & Compliance?** The UI is a bit quirky around filtering (and is missing some critical filters). Similarly, the UI for the on/offboarding module needs some work for managers reviewing access. **Recommendations to others considering OneTrust Tech Risk & Compliance:** Tugboat is a HUGE help with SOC2 but do not underestimate how much work SOC2 is. Even with Tugboat, we have several months invested in prepping for SOC2. That said, it's hard to imagine not using Tugboat now. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** SOC2 compliance (type 1 and 2). Without Tugboat, just getting started was a challenge but with it, we've been able to organize our entire compliance program. **Official Response from Shannon Dougall:** > Thank you, Dave, for leaving us such a wonderful review. We are thrilled that you are a Tugboat Logic fan. Our team will definitely be happy to read what you wrote. We put customer experience and satisfaction as our priority, and your review reaffirms the hard work we put in every day. So thanks for your kind words. We will share your feedback with the product team and know that this feedback helps us get better. ### 2. Life raft for security teams and small organizations when it comes to security certifications **Rating:** 4.5/5.0 stars **Reviewed by:** Tanner L. | Director Of Operations, Mid-Market (51-1000 emp.) **Reviewed Date:** May 20, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Tugboat is simple to use and helped our organization get our feet under us regarding security documentation, training, and certification—big fan. **What do you dislike about OneTrust Tech Risk & Compliance?** Honestly not much to say here, overall been very happy with the tool. We've renewed twice now. **Recommendations to others considering OneTrust Tech Risk & Compliance:** I'd suggest that you give them a shot. It scales well and makes your life so much easier, especially if you are scrapped for resources. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** We used Tugboat for Security documentation and a central location for all of our work regarding certifications. We do also use it as a central place for our team to review and accept security policies. It helped save us days through all of our SOC report cycles, and to top it off, their team is incredible to work with through the process. **Official Response from Shannon Dougall:** > Tanner, thank you so much for taking the time to leave us this amazing review. I love the shout-out and the 'life raft' descriptor! ### 3. Tugboat made my life so much easier **Rating:** 5.0/5.0 stars **Reviewed by:** Anita B. | Founder, Marketing and Advertising, Small-Business (50 or fewer emp.) **Reviewed Date:** March 24, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** How easy it is to create security policies, manage security training and respond to security questionnaires. I found it simple to upload a customer security questionnaire, assign questions to team members, review the completed questionnaire and then download it back into the original format. In the last questionnaire, I completed I easily saved a day's work and know that as I use the platform to answer more questionnaires, the process will become easier and easier as the system will show me how I answered similar questions previously. Tugboat should be in the tech stack of every technology startup selling to large corporations. **What do you dislike about OneTrust Tech Risk & Compliance?** I have no complaints at all about Tugboat. It took me a little while to figure out how to format my uploaded questionnaire but once I got the hang of it everything else was intuitive. Would love to see a live chat function on the site for support. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** As a small team, we don't have a dedicated security person, Tugboat supports collaboration, accountability, and our security-related documentation requirements. Quite honestly, I'm not sure how we'd manage to address the influx of Infosec requirements without Tugboat. ### 4. Tugboat - Excellent tool and continues to evolve **Rating:** 5.0/5.0 stars **Reviewed by:** Michael O. | V, Small-Business (50 or fewer emp.) **Reviewed Date:** July 30, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Clean and intuitive user experience. The adoption is quick because the environment and onboarding experience is so easy to navigate. **What do you dislike about OneTrust Tech Risk & Compliance?** They frequently make improvements to the Policies and Controls. In doing so, they allow you to update your existing Policies / Controls however, if you do so, it will overwrite any custom edits that you've already applied. Very hard to adopt their improvements at the risk of losing your custom edits. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** It's our solution to help organize our SOC2 certification and HIPAA compliance. ### 5. Making SOC-2 possible with a small team **Rating:** 5.0/5.0 stars **Reviewed by:** Craig B. | CTO, Mid-Market (51-1000 emp.) **Reviewed Date:** May 20, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** We brought on Tugboat Logic as a part of getting SOC-2 certified. We run a pretty lean team and wanted to use a software platform to allow us to achieve SOC-2 compliance without needing to hire extra people to push spreadsheets around and monitor everything that's going on at the company by hand. So far it has achieved those goals admirably. The core compliance project gets the job done and really streamlined the process of setting up a SOC 2 audit project, with prebuild policies and controls that our auditors were pretty satisfied with. The risk assessment module took what is normally a days-long, tedious task and made it relatively painless since it was already linked to the rest of our compliance efforts. We're still working on implementing this, but the vendor management add-on also looks like it is going to be a perfect low-touch solution for that process. Additionally, the customer support is responsive and proactive, our rep has been personable, knowledgeable and helpful every step of the way. **What do you dislike about OneTrust Tech Risk & Compliance?** Of all the modules we activated we have thus far had most issues with the automated security questionnaire assistant, which is a little finicky and doesn't support some of the features of other platforms (like building out libraries of answers and assigning owners to those answers and keeping them reviewed). That said, some of this is definitely just the learning curve of new tools, and in part it's that I need to make a mindset shift to thinking of our policies themselves as the answers to questions. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** We are trying to achieve SOC2 compliance using a small team of people (zero additional resources), and so far have been successful in this effort. **Official Response from Shannon Dougall:** > Thank you, Craig, for the amazing review. We are thrilled that you are enjoying your experience with Tugboat Logic; our CS team will definitely be happy to read what you wrote. And, your feedback helps us get even better. Thanks again for taking the time. ### 6. manager **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Biotechnology | Mid-Market (51-1000 emp.) **Reviewed Date:** December 29, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** It has a lot of helpful information and a huge library for forms **What do you dislike about OneTrust Tech Risk & Compliance?** The main screen is so complex. There should be some example such as image or pdf format as a reference. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** HR and CRM, policies and controls. ### 7. We have been very impressed with the software. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** December 09, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** The Customer Service they offer is excellent. **What do you dislike about OneTrust Tech Risk & Compliance?** Needs a SOC 1 component that is out of the box **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** It has streamlined the process immensely, it is very robust though and they make a lot of upgrades and the look and layout changes frequently. Hard to keep up with. ### 8. Automate your compliance with an extremely easy to use platform & great customer service. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** October 15, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** - Integrations allow automatic evidence gathering. - Compliance calendar is a very nice and easy way to stay top on compliance requirements. - Security assurance reports allow for quick export and sharing capability with customers. RFPs take a fraction of the time because our teams can very quickly retreive all infosec requirements. **What do you dislike about OneTrust Tech Risk & Compliance?** - Employee training module can be improved. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** - Tugboat logic is enabling us to establish a robust infosec program at Knockri. ### 9. SOC2 implementation with Tugboat is making it easier. **Rating:** 4.5/5.0 stars **Reviewed by:** Allankrita S. | Information Security Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** February 02, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Tugboat is a really good help for new Organizations in implementing industries' best practices. The tugboat team is supportive and ready to help throughout the implementation and audit process. Todd is our project manager from Tugboat, he is super responsive and clear all doubts quickly. My fav part of Tugboat logic: 1. Policy Templates & Controls 2. Keep evidence as per control reference number 3. Evidence collection reminder & filters in the tool (Annually, Biannually, Quarterly, weekly ) 4. Version history on policies 5. Employee annual awareness training 6. Vendor Management feature **What do you dislike about OneTrust Tech Risk & Compliance?** Nothing as such that I dislike there is always a scope of improvement. I am liking the tool overall. **Recommendations to others considering OneTrust Tech Risk & Compliance:** 1. Worth trying this tool if your organization is new or new with the standard. 2. Try their policy templates 3. Discuss with the Tugboat team about your requirements to get the best out of it. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** 1.Tugboat is making SOC 2 implementation easier. 2.The tool got inbuilt policy templates that can be altered to match your Organization's. All the controls are well defined and guide you in the implementation part and if you still have a doubt their experts are just an email away. 3.Controls are well referenced with COSO & ISO 27001 framework, so you don't need to check them separately. 4. The tool helps you to maintain compliance by reminding you about periodic evidence collection. 5.You don't have to create a separate record on employee's awareness of policies, the tool has this feature built. 6.It also facilitates to send automatic vendor security questionnaire & track their responses. ### 10. Tugboat made SOC 2 Certification incredeibly easy for us! **Rating:** 5.0/5.0 stars **Reviewed by:** Raghu D. | VP, Software Engineering, Mid-Market (51-1000 emp.) **Reviewed Date:** March 24, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Tugboat customer success team was there every step of the way as we were going through our certification process. There were even present in our planning calls with our auditors (based on our request) in case we had a question about how the platform helps with a particular aspect of the process. This helped us tremendously because we had the confidence that we were not doing additional work for aspects that are already solved by the platform (e.g., Annual Security Awareness Training, and Application Access Tracking). While documentation of the product features is useful, this level of just-in-time guidance is incredibly valuable. The Platform itself is constantly adding new features and refinements that solve newer problems we have as we grow (e.g., Risk Tracking). The built-in integrations with issue tracking systems (e.g., GitHub and JIRA) and cloud platforms (e.g., AWS and Azure) are significant time savers as well. While evaluating products to manage our Information Security Program in general and SOC 2 in particular, we observed that none of competitors had the balance of maturity (both product and process), features and cost that Tugboat did. Our experience with using the product has only convinced us that we made the right choice. **What do you dislike about OneTrust Tech Risk & Compliance?** Not a whole lot. We have to spend some effort to catch up on the new features that are introduced, and it can be a little overwhelming to see new menu items pop-up periodically. Tugboat does provide a "What's New" section in the portal and "Ask The Expert" workshops which helps quite a bit. I think this is a good problem to have from a vendor who is constantly addressing a greater set of use-cases. **Recommendations to others considering OneTrust Tech Risk & Compliance:** Evaluate not just the product but also the people and processes around the product. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** We are using Tugboat to become SOC 2 certified and also manage our internal audit process. We have saved significant time (compared to using spreadsheets or issue tracking software) in addressing use-cases around security awareness training, application access training, and internal audits. It also has nice project management tools such as reminders when tasks are due and a calendar view to show the deliverables. ### 11. All SOC2 controls and tasks in one place **Rating:** 4.5/5.0 stars **Reviewed by:** Bruno D. | Chief Software Architect, Small-Business (50 or fewer emp.) **Reviewed Date:** February 01, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** The best thing about Tugboat is that it has pre-defined policy templates for a variety of policies, which is useful to improve upon your own policies, or add new ones. I also like the easy uploading of evidence as well as the fact you can see all your controls and policies in one place, easy to browse. Also, the editing of the policy documents is easy and sleek. It is also very convenient to be able to discuss evidence tasks with your auditor right on the platform. **What do you dislike about OneTrust Tech Risk & Compliance?** Sometimes hard to go back and forth between policy documents and their associated evidence tasks, and I cannot mark an evidence task as 'Waiting' on something or a date. ' **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Yearly SOC2 Type II compliance ### 12. Wouldn't have made it through our Audit without Tugboat! **Rating:** 5.0/5.0 stars **Reviewed by:** Tanner C. | IT Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** December 11, 2020 **What do you like best about OneTrust Tech Risk & Compliance?** The industry knowledge and helpfulness from their staff made all the difference. Thank you to the Tugboat logic staff who actually cared about us and helped us through every step of our audit. **What do you dislike about OneTrust Tech Risk & Compliance?** There were some small issues that came up with the software itself but were always addressed quickly, which is expected from a small technology startup. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Tugboat first got our company ready for a SOC audit and not only organized all the information needed from an auditor but also provided industry standard security policies tailored to our company. All this information is neatly organized in the Tugboat Logic software, helping both us and the auditor. The knowledge Tugboat brings to the table is invaluable, coming from a company going through their first audit. Tugboat then helped us choose an auditor and helped us all the way through to the end of the audit process. ### 13. Great tool very easy to use and excellent support, and great integration features! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Medical Devices | Enterprise (> 1000 emp.) **Reviewed Date:** September 29, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Easy to use and excellent customer support. **What do you dislike about OneTrust Tech Risk & Compliance?** Some great features such as onboarding/offboarding were not fit for a company of over 1000 people. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** I have almost reached compliance of multiple frameworks in a few months. CCPA, HIPAA, GDPR, POPIA. ### 14. Tugboat for SOC2 Audit and Certification in the Financial Sector **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.) **Reviewed Date:** June 03, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Ease of use, excellent support. Webinars are valuable tools **What do you dislike about OneTrust Tech Risk & Compliance?** Some of the required evidence tasks seem repetitive. I have not really found a downside, I could not do a lot of my job without Tugboat. **Recommendations to others considering OneTrust Tech Risk & Compliance:** Excellent tool if you are working towards SOC compliance. It is also a great tool for remaining in compliance, using for tracking employee access, vendor reviews, and risk assessment. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Risk assessment, vendor reviews, employee on/offboarding. We have realized the benefits to centralized data for all these items. We also know we could not have gotten our SOC 2 certifcation without Tugboat. ### 15. The SOC 2 Hero! **Rating:** 5.0/5.0 stars **Reviewed by:** Ryan C. | Vice President, Strategy and Innovation, Mid-Market (51-1000 emp.) **Reviewed Date:** February 01, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** TugBoat Logic's platform is perfect for small businesses and startups. The challenges of SOC 2, PCI, and other compliance audits are immense. TugBoat helps you gather the essential information, stay organized and on track to compliance success. **What do you dislike about OneTrust Tech Risk & Compliance?** The product is dense and sometimes a challenge to navigate the deeper layers of the tool. It's best to lean on the implementation team to get guidance on using the full power of TugBoat Logic. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** We are using TugBoat Logic to help us support our customers, provide excellent trust assurance, and to share our cybersecurity program. TugBoat Logic has helped us complete a SOC 2 report and other projects related to compliance and overseeing cybersecurity best practices. ### 16. Clean and simple to use **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** February 02, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** I liked how everything was laid out on the dashboard - it seemed logical enough however we did have a few onboarding calls with our success manager who went setting things up, without this I don't think we would have been able to start right away - mainly because several of us had never worked on compliance before so all of the terminology and requirements were new to us. I liked the suggestions and guidance offered by Tugboat and the alerts. Was easy to see how policies, controls and evidence tasks are linked together. **What do you dislike about OneTrust Tech Risk & Compliance?** It wasn't clear to us right away if our comments on policies were only viewable between us or if they would also be visible to our auditor. **Recommendations to others considering OneTrust Tech Risk & Compliance:** Great place to get started! **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Trying to meet compliance so we can meet requirements with some of our potential and future customers. This is a big benefit to structured documentation for compliance. ### 17. It is a comprehensive GDPR and SOC Tool **Rating:** 4.0/5.0 stars **Reviewed by:** Zahid S. | Co-Founder/CISO, Small-Business (50 or fewer emp.) **Reviewed Date:** February 02, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** a) I love Tugobat support for quickly responding to questions on how to provide difficult evidence. b) Their tooling is reasonable. c) They provide a nice referral to various Auditors so that we could select the appropriate Auditors based on price, timelines, etc **What do you dislike about OneTrust Tech Risk & Compliance?** a) No support for Rippling MDM b) The tool can be more intuitive. e.g. It should clearly show how to conduct and track security awareness training in the question that we asked for. The auditor's view is hidden and it is nice to see the tool from their perspective. c) Tuboat hooks up with lots of Software(Jira, Google Cloud, etc) and it was not clear on what they extracted as evidence from it. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** a) We are trying to get SOC 2 and hence we need a tool to manage our Security policies. b) We also aim to use Tugboat to manage our GDPR policies c) We realized that it was an easy mechanism to provide evidence to auditors and they provided a nice template for Security Policies that we can easily edit. ### 18. Tugboat Logic - Amazing Security Assurance Platform for GRC Automation **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Education Management | Mid-Market (51-1000 emp.) **Reviewed Date:** May 17, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Framework and default templates available in the platform make it easy for the IT and Security Team to create best practices in line with the framework such as ISO, SOC, NIST, and GDPR. **What do you dislike about OneTrust Tech Risk & Compliance?** Security Questionnaires are pretty manual. Every time we have to repeat the same process for each vendor. IT will be great if this can be automated **Recommendations to others considering OneTrust Tech Risk & Compliance:** One of the best in the market for managing SOC 2 and other security compliance **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** - Easy Requirements Mapping with SOC 2 and ISO - Easy to Manage - User Friendly - Ready Templates ( Policy and Procedures) **Official Response from Shannon Dougall:** > Thank you for posting a review! And also, thank you for your feedback; it helps us become an even better company. ### 19. Excellent platform for managing your corporate security framework! **Rating:** 4.5/5.0 stars **Reviewed by:** Brett A. | Vice President Operations, Mid-Market (51-1000 emp.) **Reviewed Date:** June 03, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** The frameworks and templates provided out of the box give you a great place to start, changes are tracked and support is terrific. **What do you dislike about OneTrust Tech Risk & Compliance?** There are sometimes features that I wish were present but they are minor items. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Enabling rapid deployment of security frameworks for managing security policies and facilitating audits. ### 20. Tugboat Logic will guide you through the storm! **Rating:** 5.0/5.0 stars **Reviewed by:** Charles M. | Director, Information Security, Mid-Market (51-1000 emp.) **Reviewed Date:** February 03, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Fantastic platform, easy to navigate. Continuous non-intrusive updates. Wonderful pre-sales and support team. **What do you dislike about OneTrust Tech Risk & Compliance?** It was difficult finding Tugboat, they need to make sure they are on the top of google search. I almost went with a competitor and stumbled across Tugboat by accident. **Recommendations to others considering OneTrust Tech Risk & Compliance:** Compared to the competition, they will work hard to earn your business. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Partnering with Tugboat allows us to easily update our security platform with the added benefit of a SOC2 report in the end. The team knows the security field well enough to introduce us to recommended audit firms which was a huge plus. Partnering with the wrong audit firm can break the bank. ### 21. GRC with clarity **Rating:** 4.5/5.0 stars **Reviewed by:** James O. | Information Security Officer / Director of Information Security, Mid-Market (51-1000 emp.) **Reviewed Date:** May 18, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Ease of building out an overall audit program so that it's easy to visualize the current status of a specific program. **What do you dislike about OneTrust Tech Risk & Compliance?** I would love to see more frameworks offered at the lower tiers. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Being able to demonstrate compliance to HIPAA and SOC2 programs and making sure that controls and policies are mapped effectively. **Official Response from Shannon Dougall:** > James, thank you so much for taking the time to leave us this awesome review. ### 22. Great audit management platform for small teams **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Human Resources | Mid-Market (51-1000 emp.) **Reviewed Date:** August 30, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** The automated evidence collection capabilities **What do you dislike about OneTrust Tech Risk & Compliance?** onboarding/offboarding module is not beneficial **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** The TBL platform has the attention to detail a proper audit management platform has to keep you on top of your audit prep and acheivement. ### 23. Tugboat Review **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.) **Reviewed Date:** February 01, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** The proactive alerting / reminders of what is necessary to stay on top of things. **What do you dislike about OneTrust Tech Risk & Compliance?** I think viewing the product workflow (UX) through the lens of different user-types would expose some friction in the process. For example, I as a CPSO and executive may come at everything starting with our policies, and then that leads to our controls / procedures, which in turn yield the evidence for those controls. But an auditor may come at it starting with the controls and evidence. Reporting showing how all the pieces fit together would help greatly here. For example, show me how a piece of evidence is linked to all its related controls and its related policies. **Recommendations to others considering OneTrust Tech Risk & Compliance:** Do training before jumping in. What seems intuitive might come back to bite you. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Efficiency in managing our adherence to our frameworks. ### 24. Tugboat helped streamline the setup of our GRC program and simplifies audits! **Rating:** 5.0/5.0 stars **Reviewed by:** Joe D. | Head of Information Security, Small-Business (50 or fewer emp.) **Reviewed Date:** February 02, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Having policies, controls, and evidence collection all in one place with the ability to give our auditors access to the information they need without duplicating efforts. Tugboat includes a browser plugin to simplify evidence collection, and policies are directly linked to controls and associated evidence collection. **What do you dislike about OneTrust Tech Risk & Compliance?** The awareness training module could use some improvement. It was useful initially for policy acknowledgements, but has limited use beyond that function. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** We use Tugboat to manage our GRC program and to facilitate audits. Audits are significantly less stressful with the Tugboat workflow. ### 25. Great GRC start-up for a start-up ourselves **Rating:** 5.0/5.0 stars **Reviewed by:** Bryan R. | G, Mid-Market (51-1000 emp.) **Reviewed Date:** May 18, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** I love the collaboration that Tugboat has shown over our relationship **What do you dislike about OneTrust Tech Risk & Compliance?** As with many new products and start-up, the Tugboat product is constantly in development. Not everything fits our use cases. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Overall GRC management. SOC compliance, etc. **Official Response from Shannon Dougall:** > Start-ups helping start-ups, I love it! Thanks, Bryan, for sharing your review with the community and us. ### 26. Good Security Partner **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Health, Wellness and Fitness | Enterprise (> 1000 emp.) **Reviewed Date:** October 26, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** 1. Compliance guidelines 2. Integrations 3. Support **What do you dislike about OneTrust Tech Risk & Compliance?** User experience can be improved by providing more filters, etc. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** We used this tool for risk assessment and found it very useful for our requirements. ### 27. Streamlines the SOC2 process **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Accounting | Small-Business (50 or fewer emp.) **Reviewed Date:** February 02, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** The onboarding process coupled with the application, and the ability to generated documents **What do you dislike about OneTrust Tech Risk & Compliance?** Could have better cloud integrations, especially with GCP **Recommendations to others considering OneTrust Tech Risk & Compliance:** Definitely request a demo and see if they meet your needs. There are others with better cloud integrations, but they're building out additional functionality to support information gathering, and are definitely worth using. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** We're embarking on SOC2, and this has reduced the amount of effort that's required. Ultimately, we needed something that would reduce the amount of discovery that's necessary to achieve SOC2. It's also really useful that they have existing relationships with accounting firms, and that those accounting firms are familiar with the tooling that we're utilizing to conduct our SOC2 preparation. Overall, it's definitely useful. ### 28. Love Tugboat Logic!! Like a kickstarter for my program!! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Consumer Services | Small-Business (50 or fewer emp.) **Reviewed Date:** February 02, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** I love the collaboration most. The partnership I've experienced with Tugboat is well above par. Beyond that the product is feature rich for the data any small firm needs to launch quickly into answering both "What matters most?" and "What does the whole journey look like?". The evidence collection features are really helpful too! **What do you dislike about OneTrust Tech Risk & Compliance?** Wish that I could integrate to my Jira system where most of my partners work inside. Transfer to (e.g. Deep Clone of a pre-built project plan) or linking to tasks in Jira would make the info collection simpler for my environment. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Getting started without re-creating the wheel from scratch is the biggest win we've experienced so far. ### 29. It has been helping me maintain a higher level of security **Rating:** 4.0/5.0 stars **Reviewed by:** Charles W. | Mid-Market (51-1000 emp.) **Reviewed Date:** November 14, 2020 **What do you like best about OneTrust Tech Risk & Compliance?** Its main point in its favor is the fact that just by adding the url of my site, all the necessary security elements can be automatically added to guarantee the robustness and integrity of my website is perfect. **What do you dislike about OneTrust Tech Risk & Compliance?** Its interface is very complex, which often hampers the process, the customer service team is not as efficient when answering questions about problems that may arise, the fact that it has so many functions, but not Know how to simplify the processes a bit really disappoints me a bit, since it does not allow to exploit all its functionalities due to the high degree of complexity that all processes have. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** It has been helping me to maintain a higher level of security on my website by being able to integrate several of the certificates and cookie policies in a fairly fast and efficient way, however, the fact that currently everything is so complex and difficult to perform has become a huge headache for me, and in fact I do not recommend them to anyone. ### 30. Smooth, structured and well designed **Rating:** 4.5/5.0 stars **Reviewed by:** Srinidhi D. | Head-People and Culture, Small-Business (50 or fewer emp.) **Reviewed Date:** February 01, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** The ease of navigation and the structure **What do you dislike about OneTrust Tech Risk & Compliance?** The awareness module seems very basic. In my opinion, it really is not of much use. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** We are able to put down better processes for our organization. As a small organization, some of the processes may not be given immediate priority but with TBL, we have been able to get an early headstart. This has helped us streamline and structure a few policies and processes better. ### 31. Great product that keeps getting better **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in International Trade and Development | Small-Business (50 or fewer emp.) **Reviewed Date:** February 04, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** I like the service that comes with it. The tools are fantastic, but when I've run into a challenge or had questions, they are so quick to answer and throw resources to help me, even as a smaller company **What do you dislike about OneTrust Tech Risk & Compliance?** There are some limitations on the way you view the data. The data it holds it quite robust, but you don't always see it where you need to when you need to. The coming dashboards for metrics will help this a lot. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** The biggest problem we're solving is organizing our ISO 27001 and SOC2 projects with limited resources. The tasks and automation on evidence collection is really useful. ### 32. It has a large number of functions and tools **Rating:** 4.0/5.0 stars **Reviewed by:** Farnanda W. | Small-Business (50 or fewer emp.) **Reviewed Date:** November 07, 2020 **What do you like best about OneTrust Tech Risk & Compliance?** It has a large number of functions and tools that are quite useful for regulating data security. **What do you dislike about OneTrust Tech Risk & Compliance?** Its interface is not intuitive at all, this makes the whole application quite cumbersome and complicated, its customer service team is the next bad thing, in my experience they took too long to respond, and when it finally got They deigned to give an answer they never gave a correct solution to my problem, their learning is quite problematic, although they have video tutorials and a large number of tools to teach how to use the system, the application is so complicated that it is still virtually impossible learn how to use this application properly. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** In theory, my idea was to use it to improve the security and way of presenting the data on my web page, after researching everything it looked quite promising regarding the advantages it would have, but in practice it became a complete nightmare, never I was able to use this application in the proper way due to its great complexity, in short I do NOT recommend this application to anyone. ### 33. Good product for tracking audits; workflow needs some streamlining. **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** February 01, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Functions that allow centralized management of policies and other aspects that are required for SOC2. Ability to automate evidence collection and reminders to collect manually. Having having a common workspace to work with an auditor through the entire audit process. **What do you dislike about OneTrust Tech Risk & Compliance?** Workflow management between evidence requests, task and controls could be streamlined. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Managing the processes to achieve SOC2 compliance and efficiently engage with customers looking to gain an understanding of our security posture. Now have single repository for policies and a way to manage updates and schedule reviews, a means to effectively manage the audit process, and a streamlined process to engage with an auditor. ### 34. GRC platform for Startups **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Education Management | Mid-Market (51-1000 emp.) **Reviewed Date:** June 22, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** - SOC2 Readiness Modules and Templates - Built in Policy and Procedures as per information security standards such as ISO 27001, GDPR etc **What do you dislike about OneTrust Tech Risk & Compliance?** Tugboat is one of the little bit expensive offering **Recommendations to others considering OneTrust Tech Risk & Compliance:** Go to product for startups looking for easy to manage and configure GRC Platform **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Manage GRC Automations and Internal Audits across the organization. Easy to use and configure platform for small teams. ### 35. Security and Compliance Manager **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** May 18, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** A very helpful tool to kickstart a security program, no matter what your current situation is. **What do you dislike about OneTrust Tech Risk & Compliance?** Pricing can be a little steep, but you're always able to work it out with customer reps. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Achieving SOC 2 and ISO 27001 compliance. **Official Response from Shannon Dougall:** > Thanks for the awesome review. It's much appreciated, and we are happy you find our tool so helpful. ### 36. Compliance made easy **Rating:** 5.0/5.0 stars **Reviewed by:** Vladimir V. | Customer Success Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** June 25, 2020 **What do you like best about OneTrust Tech Risk & Compliance?** - Overall time saver especially if you are a small company just starting your InfoSec journey (and you don't have security experts on staff) - Demystifies the process of setting up a security program - Selecting pre-canned compliance frameworks (SOC2, ISO etc.) with one click - Policies and controls created automatically - Answer client security questionnaires by quickly selecting policies and controls and previously answered questionnaires - Tugboat is quick to respond to questions and suggestions **What do you dislike about OneTrust Tech Risk & Compliance?** - Already decent integration list needs expanding - Some UI quirks need to be ironed out **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** - Any young company is unlikely going to have a full time security officer on staff. Tugboat provides a true virtual Security Officer. - Takes the mystery out setting up a security program and getting ready for SOC 2 - Answering client questionnaires is quick and efficient (almost no typing required) - Policy updates and improvements handled by Tugboat (easy update) ### 37. An amazing support team and a great platform! **Rating:** 4.5/5.0 stars **Reviewed by:** Julia B. | Small-Business (50 or fewer emp.) **Reviewed Date:** June 17, 2020 **What do you like best about OneTrust Tech Risk & Compliance?** Easy to navigate platform that keeps everything organized for you and the entire team. I like the fact that you can assign roles and responsibilities, forward newly created policies for review, and see the progress of all the tasks and each team member. **What do you dislike about OneTrust Tech Risk & Compliance?** Some of the policies and references were very specific to US laws and regulations which do not apply to companies operating in Canada. **Recommendations to others considering OneTrust Tech Risk & Compliance:** - review and assign policies to appropriate team members - set a goal of how many policies each team member has to review every week - schedule regular meetings to easily follow up on the progress and address any issue that may arise with the policy review or process implementation - designate a reviewed for the work that is done on the platform - connect appropriate Softwares to automate evidence collection - find an auditor who is comfortable with using the platform **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Tugboat was able to provide a comprehensive list of policies and controls that were applicable to us in preparation for the certification process, which allowed us to review our current operations and update it accordingly. This approach significantly simplified the process and provided clear guidance for the implementation of appropriate controls. ### 38. Decent platform that still have lots of room for growth **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Accounting | Mid-Market (51-1000 emp.) **Reviewed Date:** February 01, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** I like how modern it looks and how the tugboat team continuously improve its platform to make it easier for users to navigate **What do you dislike about OneTrust Tech Risk & Compliance?** There is still a lot of room for improvements and sometimes it may seem like Tugboat is not improving fast enough. Sometimes they come up with features that are not as good as the previous ones. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** We use Tugboat as auditors. Our clients use Tugboat to manage their audit projects continuously. ### 39. We needed help getting policies - Tugboat made it possible. **Rating:** 5.0/5.0 stars **Reviewed by:** Ryley M. | Mid-Market (51-1000 emp.) **Reviewed Date:** June 09, 2020 **What do you like best about OneTrust Tech Risk & Compliance?** Easy to use, and quickly creates policies. Creates SOC2 instantly. Enables regulatory compliance at whatever level you need. Far easier to deal with than any other competitors we researched. Generates policies that have been suitable for a variety of clients: banks, airlines, healthcare etc. Increased accuracy, and consistency on a case by case basis (less customs) Centralized everything for our sales teams to work with. CISO loves having quick access to policies, that are easy to tweak as needed. **What do you dislike about OneTrust Tech Risk & Compliance?** Would love a mobile-native client. Can't wait for the RFP section to become smarter and smarter :) **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** We needed to create new policies. Tugboat made it happen. Saved us a huge lift on generating these one by one ourselves, and managed it quickly. We have recommended them to other clients. Our compliance process used to be completely manual, when we were dealing with our clients. It was one off by one off -- Tugboat has made it streamlined and easy. We are a decentralized organization -- this helped, as we have lots of institutional knowledge that has to be grabbed on a one off basis - with a huge continuity risk should someone leave the org. Now - this is not a problem. ### 40. Super Friendly UI and support for any new Audit **Rating:** 4.5/5.0 stars **Reviewed by:** Soumya Ranjan P. | L, Mid-Market (51-1000 emp.) **Reviewed Date:** February 01, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** The staff knowledge and the way UI is designed. **What do you dislike about OneTrust Tech Risk & Compliance?** The information on different controls are miss matching some times. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Was able to go through SOC2 audit within very less time. ### 41. Tugboat Logic Review **Rating:** 4.5/5.0 stars **Reviewed by:** Jeremie R. | Mid-Market (51-1000 emp.) **Reviewed Date:** July 02, 2020 **What do you like best about OneTrust Tech Risk & Compliance?** Tugboat greatly simplifies the completion of security questionnaires resulting in significant savings of time and resources. Having ready access to infosec reports and listing of controls by area is incredibly handy for compliance exercises. **What do you dislike about OneTrust Tech Risk & Compliance?** This isn't so much a dislike of Tugboat, but we were underwhelmed to hear that professional services firms (e.g. Big 4 audit firms) aren't familiar with the tool and proposing instead to populate a massive spreadsheet. We've since heard that Tugboat is partnering with select audit firms so we will be looking to leverage those partnerships to gain significant efficiencies in the certification/audit process. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** As we move towards obtaining a SOC2 Type2 report, Tugboat has been incredibly helpful in populating and documenting our controls and supporting artifacts. Tugboat has also been an instrumental resource in responding to lengthy security questionnaires. ### 42. Saves time and is an easy product to navigate and use **Rating:** 5.0/5.0 stars **Reviewed by:** Ross M. | Small-Business (50 or fewer emp.) **Reviewed Date:** May 28, 2020 **What do you like best about OneTrust Tech Risk & Compliance?** The product layout and usability are some of the best I have ever seen. The pre-built policies and controls are saving us a "tugboatload" of time. They even receommended and audit company that is very professional, reasonable and fast. Sales process with Jeff was great and their support team has been excellent all around. Needless to say, I have already recommended this to other companies in the same situation, needing SOC 2 certification. **What do you dislike about OneTrust Tech Risk & Compliance?** Nothing that I dislike yet, although would have preferred if the trial had the full list of controls and policies, but understand the need to not give it all away up front. **Recommendations to others considering OneTrust Tech Risk & Compliance:** The intuitive interface make it easy for non coding people to understand and use unlike some others in the market. Try to use an audit team that has used tugboat before as this will make your life a lot easier in the beginning to get ramped up. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Solving the need to get SOC 2 completed. Both Type 1 and Type 2. We will also use it for GDPR and other compliance needs. ### 43. Simplifying Security & Compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Raj C. | Sr. Manager Security & Compliance, Mid-Market (51-1000 emp.) **Reviewed Date:** May 22, 2020 **What do you like best about OneTrust Tech Risk & Compliance?** Tugboat has an easy to use interface that doesn't take a lot of time to get used to. I was able to quickly navigate and figure out how things work. The policy section is detailed and had essentially everything I needed for our organization to get up to speed and compliant. The same is true of controls as well. **What do you dislike about OneTrust Tech Risk & Compliance?** I wish there was a way to customize frameworks such that I could easy add/remove controls and policies as I switch between different frameworks. Unfortunately, the workaround suggested seems a little tedious and at times, redundant. Also, for the application access review, it would have been ideal to have Tugboat query these applications to determine user access levels, as the users are already loaded on TBL and each of the application. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Improving our compliance posture primarily, and addressing the security concerns that are raised as we work on getting more compliant. Currently, we are working on SOC2, but plan to use this to chase down other certifications that our customers frequently ask us about. ### 44. Achieved our SOC2 Compliance in record time, with Tugboat's help **Rating:** 5.0/5.0 stars **Reviewed by:** Karin C. | President, Small-Business (50 or fewer emp.) **Reviewed Date:** May 20, 2020 **What do you like best about OneTrust Tech Risk & Compliance?** The UI is very flexible and intuitive. You can apply filters to your work to help you sort and manage. We knew we needed to try to achieve SOC2 Type 1 compliance in just 4 short months, start to finish, and that was a daunting task. Gratefully, Tugboat allowed us to approach the work very methodically, and the default policy templates were an excellent starting point for us to build off of. Once we began our SOC2 audit, Tugboat allowed us to prepare everything in an organized way for the auditors, exactly as they wanted to see the information. Other important features we fell in love with: The ability to easily manage our employees' annual Security Awareness Training with the push of a button. Any updated policies automatically make it into the training, and we can see who completed which sections and who has not yet completed their requirements. We opted for the Questionnaire add-on, to aid in responding to security questionnaires from prospects and RFPs. This has already been a huge timesaver for us- we simply upload the questionnaire into Tugboat, and walk through the questions. Tugboat looks for the correct response from our list of policies and controls, and it's as simple as clicking a button to insert the response. When we're done, we can download from Tugboat back to the customer's original format. **What do you dislike about OneTrust Tech Risk & Compliance?** The biggest downside at this point is the inability to integrate Tugboat with our own Component Content Management system, easyDITA. We have been working with Tugboat's product management team however, and they are delivering on an API that will allow us to integrate, later this year. The only other downside, and it's a small one, is that the Questionnaire add-on only takes spreadsheet or CSV formatted documents. When a customer provided us with their security questionnaire in an MS Word format, our Tugboat CSM was kind enough to convert it for us so we could upload into Tugboat to pull our responses, but it wasn't ideal because we couldn't export it in its original format to return to the customer. It took a bit of rework, but in the end, using the Questionnaire tool was still a timesaver, even with the additional steps needed. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Without a doubt, Tugboat allowed us to reach our SOC2 compliance faster than we ever believed we could. This was not only a cost savings for us, but opened new revenue opportunities with customers who had a SOC2 requirement of their SaaS vendors. The Questionnaire add-on has, in just a few short months, already saved us at least 100 hours and over time, with it's machine learning capabilities, it will become even more efficient and save us even more time. ### 45. Tugboat Logic makes SOC2 easy **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** February 02, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Automates the process of SOC audits. Great additional module support for questionnaires and other compliance practices. Keeps all of our application accesses logged easily. Integrations into AWS are helpful for sanity checks on configuration. **What do you dislike about OneTrust Tech Risk & Compliance?** Wish I could expand columns on index pages. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** No problems to date. Lots of time saved that would otherwise be spent doing manual monitoring of compliance. ### 46. Fantastic Compliance Operations Platform for Startups and Growing Companies **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** February 02, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** It actually supports the process of getting SOC implemented and audits done, instead of just being a database, or doing something that's not really SOC like some of the competitors. **What do you dislike about OneTrust Tech Risk & Compliance?** I have minor misgivings about details in the UI, though the functionality is solid. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Running compliance operations is 90% more efficient compared to building our own tools. ### 47. Not a great implementation process or check-in **Rating:** 2.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** February 02, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Seems useful and deeply integrated with other platforms **What do you dislike about OneTrust Tech Risk & Compliance?** Post sales I would say this is one of the worst platforms I have ever used. We saw a complete drop in engagement with our company right after the dotted line was signed. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Onboarding and Offboarding of employees while ensuring the company is properly protected. **Official Response from Cheryl Rasmuson:** > Thank you for your review and honest feedback. We value all feedback, positive and negative to help guide our decisions and make a better experience for our customers. We're sorry to hear that your experience was not up to our high standards. Delivering a high value onboarding experience is something we pride ourselves on. We would welcome the opportunity to deliver you with the experience you should have had with us. Please feel free to reach out to our VP of Customer Success (sydney@tugboatlogic.com) to discuss. ### 48. The platform has great features and the support staff are amazing. **Rating:** 5.0/5.0 stars **Reviewed by:** Laura B. | Privacy Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** February 03, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** The ease of collecting and organizing the evidence for audits. **What do you dislike about OneTrust Tech Risk & Compliance?** I would love to see more guidance and templates **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** SOC2 audits and privacy GDPR compliance. Benefits are huge in that all employees can access the platform and keep track of the state of audits and compliance program ### 49. Great Experience **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.) **Reviewed Date:** February 02, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** Everything I could need in one place. Great Customer Service. **What do you dislike about OneTrust Tech Risk & Compliance?** Took a bit to get the hang of the navigation. Not always intuitive. **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** Helping to organize our SOC compliance needs. Has helped to keep everyone on track and organized without high internal overhead. ### 50. Great resource for cyber security governance and compliance management **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** May 18, 2021 **What do you like best about OneTrust Tech Risk & Compliance?** An intuitive user interface, templates derived from current cybersecurity standards **What do you dislike about OneTrust Tech Risk & Compliance?** Does not include AsiaPac cybersecurity standards/ compliance regime **What problems is OneTrust Tech Risk & Compliance solving and how is that benefiting you?** cyber security governance and compliance management **Official Response from Shannon Dougall:** > Thank you for the review; it's much appreciated! ## OneTrust Tech Risk & Compliance Discussions - [Can I use this tool for more than one standard](https://www.g2.com/discussions/41360-can-i-use-this-tool-for-more-than-one-standard) - 2 comments - [View OneTrust Tech Risk & Compliance pricing details and edition comparison](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-08-08+14%3A00%3A01+-0500&secure%5Bsession_id%5D=fb4323b7-7893-45ef-b20f-c77c0c477dc6&secure%5Btoken%5D=643434e493b3564019d0f98ddbaa5e6f1ee99a92d996ae74fbb437192af8ce0f&format=llm_user) ## OneTrust Tech Risk & Compliance Features **Additional Functionality** - Incident Management - Real-Time Monitoring - Evidence Management - Risk Alerts - Reporting & Statistics - Third-Party Integrations - Workflow Management - Risk Analysis - Sarbanes-Oxley Compliance - Single Sign On - Compliance Management - Policy Management - Real-Time Reporting - Audit Trail - Assessment Management - HIPAA Compliant - Operational Risk Management - Document Storage - Enterprise Risk Management - Data Visualization - Configurable Workflow - Vendor Management - IT Risk Management - User Management - Issue Management - Internal Controls Management - AI Copilot - Environmental Compliance - Customizable Reports - Data Import/Export - Risk Management - API - Document Management - Risk Assessment - Activity Dashboard - Task Management - Audit Management - Generative AI - Governance - Corrective and Preventive Actions (CAPA) - Alerts/Notifications - FDA Compliance - Secure Data Storage - Approval Process Control - Version Control **Functionality** - Customized Vendor Pages - Centralized Vendor Catalog - Questionnaire Templates - User Access Control **Generative AI** - AI Text Generation **Generative AI** - AI Text Generation - AI Text Summarization - Generative AI - Approval Process Control **Risk assessment** - Risk Scoring - 4th Party Assessments - Monitoring And Alerts - AI Monitoring **Generative AI - Security Compliance** - Predictive Risk - Automated Documentation **Monitoring - IT Risk Management** - AI Monitoring **Platform AI Features - Policy Management** - Reports - Workflow Management - Customizable Reports - Content Management - Renewal Management - Document Management - Forms Management - Compliance Management - Incident Management - Lifecycle Management - Template Management - Audit Management - Assessment Management - Policy Metadata Management - Expiration Management - Configurable Workflow **Additional Functionality** - Version Control - Secure Data Storage - Search/Filter - Reminders - Monitoring - API - Activity Tracking - Activity Dashboard - Role-Based Permissions - Single Sign On - Policy Training - Archiving & Retention - Audit Trail - Attestation - AI/Machine Learning - Chatbot - Collaboration Tools - Risk Analysis - Self Service Portal - Document Analysis - AI Copilot - Third-Party Integrations - Policy Creation - Digital Signature - Alerts/Notifications - Policy Library - Real-Time Notifications - Document Review - Reporting/Analytics - Customizable Templates **Additional Functionality** - HIPAA Compliant - Workflow Management - Secure Data Storage - Third-Party Integrations - Access Controls/Permissions - Consent Management - Data Mapping - Audit Management - API - Role-Based Permissions - Policy Management - Single Sign On - Risk Management - Search/Filter - Template Management - Multi-Language - Data Visualization - User Management - Monitoring - PIA/DPIA - Alerts/Notifications - Sensitive Data Identification - Self Service Portal - Archiving & Retention - Data Import/Export - Risk Assessment - Activity Dashboard - Document Management - PCI Compliance - Incident Management - Data Governance - Compliance Management - Customizable Templates - AI Copilot - Reporting & Statistics - Generative AI - Data Storage Management - File Management - Customizable Reports - Performance Metrics - Risk Analysis - Intrusion Detection System - Log Analysis - Security Auditing - Log Management - Reporting/Analytics - Risk Alerts - PCI Assessment - Vulnerability Scanning - Event Logs - File Integrity Monitoring - Exceptions Management - Data Synchronization - Compliance Tracking - Activity Monitoring - Audit Trail - Secure Login **Generative AI - Vendor Security and Privacy Assessment** - Text Summarization - Text Generation **Agentic AI - IT Risk Management** - Autonomous Task Execution - Multi-step Planning ## Top OneTrust Tech Risk & Compliance Alternatives - [Drata](https://www.g2.com/products/drata/reviews) - 4.7/5.0 (1,326 reviews) - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,665 reviews) - [Optro](https://www.g2.com/products/optro/reviews) - 4.6/5.0 (1,609 reviews)