Verified User in Hospital & Health Care
AH
Verified User in Hospital & Health Care
Mid-Market (51-1000 emp.)
"Tugboat for Compliance"
4.5/5
What do you like best about OneTrust Tech Risk & Compliance?

Tugboat has been a great resource for policy guidance. Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

Takes a while getting used to navigating through all the features. Review collected by and hosted on G2.com.

Response from Cheryl Rasmuson of OneTrust Tech Risk &...

Thank you so much for your review. If you have any specific feedback on navigation and feature organization, we'd love to hear it as we are constantly in the process of improvement. Feel free to reach out to marketing@tugboatlogic.com at any time and we'll make sure you get in contact with the right people.

Mykola S.
MS
Mykola S.
Head of Information Security
Mid-Market (51-1000 emp.)
"We use heavily Tugboat Logic to become SOC 2 certified"
5/5
What do you like best about OneTrust Tech Risk & Compliance?

The most helpful thing in Tugboat logic is integrations with other services for automatic evidence collection. And some integrations even allow to attach collected data to any evidence task which greatly simplifies preparaness for compliance. Risk register, project readiness, ease of auditor engagement, vendor management, privacy features and ability to get quickly support makes Tugboat Logic as a great service to achive compliance goals. Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

Its hard to say I dislike something. Rather below points should be improved:

* On and offboarding review and approval need to be improved with adding bulk updates, ability to add custom description for particular access, etc

* Add support of SOC 2 Type I. On this moment platform is mainly focused on SOC 2 Type II with reminders and frequency for evidence collection Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
AI
Verified User in Information Technology and Services
Small-Business (50 or fewer emp.)
"Everything you need or a GRC tool"
5/5
What do you like best about OneTrust Tech Risk & Compliance?

Modular - allows you to pick and choose the pieces that are relevant to your business Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

Because it is modular, some of the navigation can be a bit cumbersome Review collected by and hosted on G2.com.

Ray H.
RH
Ray H.
Associate
Small-Business (50 or fewer emp.)
"FinMain SOC2 Type 1 Audit"
5/5
What do you like best about OneTrust Tech Risk & Compliance?

Simplifies tasks and provides helpful insights along the way. We were able to work with our Auditors throughout the Audit period, allowing them full access to request and evaluate the evidence provided. Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

We were hoping to see additional integration offerings and updated policy templates with fewer typos. Review collected by and hosted on G2.com.

Verified User in Hospital & Health Care
EH
Verified User in Hospital & Health Care
Small-Business (50 or fewer emp.)
"SOC2 audits are bearable with Tugboat"
5/5
What do you like best about OneTrust Tech Risk & Compliance?

Audit coordination features, Azure integrations Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

There are a few integrations (e.g. Salesforce) that would be helpful. Review collected by and hosted on G2.com.

Response from Cheryl Rasmuson of OneTrust Tech Risk &...

Thank you for the review! I've made a note with our Product team about integrations, particularly salesforce, for you.

Verified User in Computer Software
EC
Verified User in Computer Software
Small-Business (50 or fewer emp.)
"Bit pticey!"
2.5/5
What do you like best about OneTrust Tech Risk & Compliance?

Tugboat Logic provides an efficient Workflow Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

Tugboat Logic User Interface is too confusing Review collected by and hosted on G2.com.

Response from Cheryl Rasmuson of OneTrust Tech Risk &...

Hi there and thank you for the review. I'm sorry to hear that the UI has been a problem, but the good news is we're in the process of updating it. If you have any feedback you'd like us to hear, please feel free to reach out to me at marketing@tugboatlogic.com and I'll ensure that it gets to the right people.

Caleb T.
CT
Caleb T.
It Administrator
Mid-Market (51-1000 emp.)
"Amazing Customer service and super easy platform to navigate."
5/5
What do you like best about OneTrust Tech Risk & Compliance?

I love how the platform allows my team to easily keep track of all of our security policies in one place. We utilize there vendor assesment and auidt report gatherting. Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

Sometimes there are too many options to choose from when creating an audit report or questionnaire. It can be an issue when cutting back on specific questions needed. Review collected by and hosted on G2.com.

Anthea R.
AR
Anthea R.
Founder, CEO
Small-Business (50 or fewer emp.)
"With Tugboat Logic -SOC 2 Type 2s Are Possible in 90 Days with Minimal Impact on Entire Team"
5/5
What do you like best about OneTrust Tech Risk & Compliance?

I am a social worker by education and started a non profit organization to help youth in foster care achieve permanency through adoption. We have a small team- and COVID 19 made that team even smaller. Increasingly our customers want to know that the applications they leverage are SOC 2 Type 2 compliant. We knew we had a responsibility to our customers/end users to do whatever it took to give them peace of mind, that our web based app meets and or exceeds the standards the AICPA has set forth.

As the Founder and CEO, I became the driver for the SOC 2 Type 2 Audit. We had gone through a SOC 2 Type 1 in the year prior with a company that charged so much money with an end result consisting nothing more than a pre-formated report and no way to continue tracking compliance to ready ourselves for a SOC 2 Type 2. I believed there had to be something out there that could help us and I am so happy I found Tugboat Logic. Tugboat Logic ensures you are set up for success continuously- and is so easy to use that we found an auditor who charged us 50% of what other auditors in this space charge. In a timespan of about 90 days and with limited impact on my team- we had a SOC 2 Type 2 report completed.

The process flow and the way Tugboat Logic connects policies to controls and evidence make organization a breeze. I love how it allows you to document employee training and onboarding/offboarding in a way that is tied to our evidence collection. No more excel lists, files in Sharepoint- with Tugboat Logic, I can ensure our organization not only achieves SOC 2 Type 2 certification but maintains compliance throughout the year. Tugboat Logic helped us complete a SOC 2 Type 2 in 90 days. No we not only have an audit under our belt but we also have a tool that will make subsequent audits go even faster! Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

I have no complaints at this time- this software changed my life! Review collected by and hosted on G2.com.

Sondra R.
SR
Sondra R.
Information Security & Compliance Officer
Mid-Market (51-1000 emp.)
"Making a tough topic manageable and easy"
5/5
What do you like best about OneTrust Tech Risk & Compliance?

I came to my company to create an information security program where there was no formal one. The goal was SOC2 certification. With a list of specific needs, I found that Tugboat Logic was the best option of the nearly dozen that I tried. It provided policy templates, which proved invaluable! It provided controls for each policy which I could take to my tech team and find the ways to implement them that fit with our business. It enabled easy evidence collection and sharing with the auditor. Overall, I can't imagine trying to create a from-scratch InfoSec program without it! Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

A few user experience approaches aren't particularly intuitive for me, but my customer success contact is always immediately responsive to help me figure out how to get things done quickly. Review collected by and hosted on G2.com.

Response from Shannon Dougall of OneTrust Tech Risk &...

Sondra, congrats on earning your SOC 2 Type II! We are so grateful for your kind words; the Tugboat team will be delighted to hear your feedback. Thank you for taking the time to review us.

Verified User in Computer Software
AC
Verified User in Computer Software
Small-Business (50 or fewer emp.)
"A great raodmap to help you with your journey to SOC-2 compliance"
5/5
What do you like best about OneTrust Tech Risk & Compliance?

One central repository for all things compliance-related. Easy tracking to ensure you keep up to date with evidence collection. Review collected by and hosted on G2.com.

What do you dislike about OneTrust Tech Risk & Compliance?

It is still a maturing tool and will gain more robustness as it evolves. No showstopper, just ease of use of things and things that will make the complete process smoother moving forward. They already have implemented a change that we suggested! Review collected by and hosted on G2.com.