OneTrust Tech Risk & Compliance Reviews & Product Details

One central repository for all things compliance-related. Easy tracking to ensure you keep up to date with evidence collection. Review collected by and hosted on G2.com.

It is still a maturing tool and will gain more robustness as it evolves. No showstopper, just ease of use of things and things that will make the complete process smoother moving forward. They already have implemented a change that we suggested! Review collected by and hosted on G2.com.

The Tugboat "readiness check" is a great starting point and helps fill out what controls you will need. Combine it with the evidence tracking, auto-collection, on/off-boarding modules, and awareness training, and it's the full package for a SOC2 (or indeed, security program!) Review collected by and hosted on G2.com.

The UI is a bit quirky around filtering (and is missing some critical filters). Similarly, the UI for the on/offboarding module needs some work for managers reviewing access. Review collected by and hosted on G2.com.

Tugboat is simple to use and helped our organization get our feet under us regarding security documentation, training, and certification—big fan. Review collected by and hosted on G2.com.

Honestly not much to say here, overall been very happy with the tool. We've renewed twice now. Review collected by and hosted on G2.com.

How easy it is to create security policies, manage security training and respond to security questionnaires. I found it simple to upload a customer security questionnaire, assign questions to team members, review the completed questionnaire and then download it back into the original format. In the last questionnaire, I completed I easily saved a day's work and know that as I use the platform to answer more questionnaires, the process will become easier and easier as the system will show me how I answered similar questions previously. Tugboat should be in the tech stack of every technology startup selling to large corporations. Review collected by and hosted on G2.com.

I have no complaints at all about Tugboat. It took me a little while to figure out how to format my uploaded questionnaire but once I got the hang of it everything else was intuitive. Would love to see a live chat function on the site for support. Review collected by and hosted on G2.com.

Clean and intuitive user experience. The adoption is quick because the environment and onboarding experience is so easy to navigate. Review collected by and hosted on G2.com.

They frequently make improvements to the Policies and Controls. In doing so, they allow you to update your existing Policies / Controls however, if you do so, it will overwrite any custom edits that you've already applied. Very hard to adopt their improvements at the risk of losing your custom edits. Review collected by and hosted on G2.com.

We brought on Tugboat Logic as a part of getting SOC-2 certified. We run a pretty lean team and wanted to use a software platform to allow us to achieve SOC-2 compliance without needing to hire extra people to push spreadsheets around and monitor everything that's going on at the company by hand. So far it has achieved those goals admirably. The core compliance project gets the job done and really streamlined the process of setting up a SOC 2 audit project, with prebuild policies and controls that our auditors were pretty satisfied with. The risk assessment module took what is normally a days-long, tedious task and made it relatively painless since it was already linked to the rest of our compliance efforts. We're still working on implementing this, but the vendor management add-on also looks like it is going to be a perfect low-touch solution for that process. Additionally, the customer support is responsive and proactive, our rep has been personable, knowledgeable and helpful every step of the way. Review collected by and hosted on G2.com.

Of all the modules we activated we have thus far had most issues with the automated security questionnaire assistant, which is a little finicky and doesn't support some of the features of other platforms (like building out libraries of answers and assigning owners to those answers and keeping them reviewed). That said, some of this is definitely just the learning curve of new tools, and in part it's that I need to make a mindset shift to thinking of our policies themselves as the answers to questions. Review collected by and hosted on G2.com.

It has a lot of helpful information and a huge library for forms Review collected by and hosted on G2.com.

The main screen is so complex. There should be some example such as image or pdf format as a reference. Review collected by and hosted on G2.com.

The Customer Service they offer is excellent. Review collected by and hosted on G2.com.

Needs a SOC 1 component that is out of the box Review collected by and hosted on G2.com.

- Integrations allow automatic evidence gathering.

- Compliance calendar is a very nice and easy way to stay top on compliance requirements.

- Security assurance reports allow for quick export and sharing capability with customers. RFPs take a fraction of the time because our teams can very quickly retrieve all infosec requirements. Review collected by and hosted on G2.com.

- Employee training module can be improved. Review collected by and hosted on G2.com.

Tugboat is a really good help for new Organizations in implementing industries' best practices. The tugboat team is supportive and ready to help throughout the implementation and audit process. Todd is our project manager from Tugboat, he is super responsive and clears all doubts quickly.

My fav part of Tugboat logic:

1. Policy Templates & Controls

2. Keep evidence as per control reference number

3. Evidence collection reminder & filters in the tool (Annually, Biannually, Quarterly, weekly )

4. Version history on policies

5. Employee annual awareness training

6. Vendor Management feature Review collected by and hosted on G2.com.

Nothing as such that I dislike there is always a scope of improvement. I am liking the tool overall. Review collected by and hosted on G2.com.