OneTrust Tech Risk & Compliance Reviews & Product Details

My favorite feature of TBL is the readiness projects. It provides a compartmentalized assessment for SOC, ISO, GDPR, etc. compliance tailored to your product or company. Review collected by and hosted on G2.com.

My division and the broader parent company are utilizing TBL. It took quite a bit of manual work to unlink similar policies and controls, duplicate where necessary, and map them to the correct readiness project. It'd be really nice if TBL enabled this level of segmentation out of the box. Review collected by and hosted on G2.com.

The team at Tugboat was very knowledgeable and helpful with all the questions that we had regarding the platform Review collected by and hosted on G2.com.

Too many tabs to click on when you are looking for something specific Review collected by and hosted on G2.com.

I like that we can repurpose previously answered questions via Tugboat's machine learning suggested answers. Saves a lot of time with onerous InfoSec questions Review collected by and hosted on G2.com.

Tugboat could make the user interface a bit more intuitive so that it's easier to find what you're looking for. It would be helpful if Tugboat added a capability to conduct video training and testing for behavioral things like employee Phishing avoidance. Review collected by and hosted on G2.com.

We were 2 years into developing our own information security process and found ourselves with a mess of borrowed policies and procedures and a set of controls that were not aligned with our organizational goals. We gave up on trying to hack together our security system and decided to work through a framework instead. We initially started down the path of HITRUST and realized after a year of implementation that the requirements needed by HITRUST did not align with the size of our company. We started down the path of SOC and wanted to leverage an existing set of tools and frameworks to help us along. The two vendors we looked at were Tugboat and Vanta. Both companies looked promising but Tugboat was the one that had the right pricing structure for our sized company.

We are 3 months into implementation and we like the following:

1. Policies and controls that more fit our organizational requirements.

2. Easy to read and updateable policies.

3. Easy to manage controls and evidence collection

4. Ability to collaborate with auditors.

5. Ability to manage security questionnaires with existing controls and evidence.

6. Automatic evidence collection with integrations with most of the application we already use. Review collected by and hosted on G2.com.

So far, we like everything we have seen. Review collected by and hosted on G2.com.

We were able to finally have an easy-to-use platform to start the journey of our security audits. TugBoat is thus far exactly what we were looking for and more, covering all of our security needs. TugBoat has made outlining the necessary steps to becoming SOC 2 compliant far more understandable and achievable. Review collected by and hosted on G2.com.

Currently, still new on the platform and I have nothing to voice in terms of dislikes. There are perhaps small interface problems that can be addressed, but the on-boarding and integration with our systems is going smoothly. Review collected by and hosted on G2.com.

The platform makes working with auditors seamless and ultimately streamlines our SOC2 auditing process. Robyn and Jacqui are great resources to ensure we get the most out of the product. Review collected by and hosted on G2.com.

I have no complaints about the platform. I've seen the platform grow and change - getting used to change may take some adjusting but it is simply a part of the improvement process. The Tugboat team always encourages any feedback. Review collected by and hosted on G2.com.

Can easily answer risk questionnaires for vendor onboarding Review collected by and hosted on G2.com.

Collaboration features are limited (e.g., cannot tag an individual for them to be notified) Review collected by and hosted on G2.com.

Everything that would be needed was there for you the first time you logged in. The policies and controls are clear, well linked, and ready for you to edit and submit evidence to. Review collected by and hosted on G2.com.

There's nothing to dislike. But if I had to suggest something, it would be helpful if there were more resources available for HIPAA compliance. Review collected by and hosted on G2.com.

The workflows are already created and it makes it easy to configure the workstreams Review collected by and hosted on G2.com.

Still need some learning curve to be able to understand the tools. Review collected by and hosted on G2.com.

The product supports the cloud first mentality and does support flexibility to implement custom requirements Review collected by and hosted on G2.com.

The interface is good but has room to be further enhanced Review collected by and hosted on G2.com.