OneTrust Tech Risk & Compliance Reviews & Product Details

Tugboat customer success team was there every step of the way as we were going through our certification process. There were even present in our planning calls with our auditors (based on our request) in case we had a question about how the platform helps with a particular aspect of the process.

This helped us tremendously because we had the confidence that we were not doing additional work for aspects that are already solved by the platform (e.g., Annual Security Awareness Training, and Application Access Tracking). While documentation of the product features is useful, this level of just-in-time guidance is incredibly valuable.

The Platform itself is constantly adding new features and refinements that solve newer problems we have as we grow (e.g., Risk Tracking). The built-in integrations with issue tracking systems (e.g., GitHub and JIRA) and cloud platforms (e.g., AWS and Azure) are significant time savers as well.

While evaluating products to manage our Information Security Program in general and SOC 2 in particular, we observed that none of competitors had the balance of maturity (both product and process), features and cost that Tugboat did. Our experience with using the product has only convinced us that we made the right choice. Review collected by and hosted on G2.com.

Not a whole lot. We have to spend some effort to catch up on the new features that are introduced, and it can be a little overwhelming to see new menu items pop-up periodically. Tugboat does provide a "What's New" section in the portal and "Ask The Expert" workshops which helps quite a bit. I think this is a good problem to have from a vendor who is constantly addressing a greater set of use-cases. Review collected by and hosted on G2.com.

The best thing about Tugboat is that it has pre-defined policy templates for a variety of policies, which is useful to improve upon your own policies, or add new ones. I also like the easy uploading of evidence as well as the fact you can see all your controls and policies in one place, easy to browse. Also, the editing of the policy documents is easy and sleek. It is also very convenient to be able to discuss evidence tasks with your auditor right on the platform. Review collected by and hosted on G2.com.

Sometimes hard to go back and forth between policy documents and their associated evidence tasks, and I cannot mark an evidence task as 'Waiting' on something or a date. Review collected by and hosted on G2.com.

The industry knowledge and helpfulness from their staff made all the difference. Thank you to the Tugboat logic staff who actually cared about us and helped us through every step of our audit. Review collected by and hosted on G2.com.

There were some small issues that came up with the software itself but were always addressed quickly, which is expected from a small technology startup. Review collected by and hosted on G2.com.

Easy to use and excellent customer support. Review collected by and hosted on G2.com.

Some great features such as onboarding/offboarding were not fit for a company of over 1000 people. Review collected by and hosted on G2.com.

Ease of use, excellent support. Webinars are valuable tools Review collected by and hosted on G2.com.

Some of the required evidence tasks seem repetitive. I have not really found a downside, I could not do a lot of my job without Tugboat. Review collected by and hosted on G2.com.

TugBoat Logic's platform is perfect for small businesses and startups. The challenges of SOC 2, PCI, and other compliance audits are immense. TugBoat helps you gather the essential information, stay organized and on track to compliance success. Review collected by and hosted on G2.com.

The product is dense and sometimes a challenge to navigate the deeper layers of the tool. It's best to lean on the implementation team to get guidance on using the full power of TugBoat Logic. Review collected by and hosted on G2.com.

I liked how everything was laid out on the dashboard - it seemed logical enough however we did have a few onboarding calls with our success manager who went setting things up, without this I don't think we would have been able to start right away - mainly because several of us had never worked on compliance before so all of the terminology and requirements were new to us. I liked the suggestions and guidance offered by Tugboat and the alerts. Was easy to see how policies, controls and evidence tasks are linked together. Review collected by and hosted on G2.com.

It wasn't clear to us right away if our comments on policies were only viewable between us or if they would also be visible to our auditor. Review collected by and hosted on G2.com.

a) I love Tugobat support for quickly responding to questions on how to provide difficult evidence. b) Their tooling is reasonable. c) They provide a nice referral to various Auditors so that we could select the appropriate Auditors based on price, timelines, etc Review collected by and hosted on G2.com.

a) No support for Rippling MDM b) The tool can be more intuitive. e.g. It should clearly show how to conduct and track security awareness training in the question that we asked for. The auditor's view is hidden and it is nice to see the tool from their perspective. c) Tuboat hooks up with lots of Software(Jira, Google Cloud, etc) and it was not clear on what they extracted as evidence from it. Review collected by and hosted on G2.com.

Framework and default templates available in the platform make it easy for the IT and Security Team to create best practices in line with the framework such as ISO, SOC, NIST, and GDPR. Review collected by and hosted on G2.com.

Security Questionnaires are pretty manual. Every time we have to repeat the same process for each vendor. IT will be great if this can be automated Review collected by and hosted on G2.com.

The frameworks and templates provided out of the box give you a great place to start, changes are tracked and support is terrific. Review collected by and hosted on G2.com.

There are sometimes features that I wish were present but they are minor items. Review collected by and hosted on G2.com.