OneTrust vs Securiti: how they compare in 2026

AI is shipped and confirmed in the contract, as a layer on a product that works without it. The core is registry and workflow software: a data map, consent banners and preference centers, data subject request automation, vendor and third party inventories, assessment templates for more than fifty standards, and policy approval workflows, all of which work without any model. Where AI appears, it speeds up an existing step, as when an AI assisted risk assessment produces a summary and findings that go to human approval. OneTrust sells AI governance as a subject, keeping registers of a customer's models, agents and datasets and controlling them at runtime, which is the product managing someone else's AI rather than being AI. The Master Terms answer whether AI is used in the services with a plain yes.

AI appears here in three ways, and none makes the models the product a legal buyer pays for. First, as subject matter: the AI Governance, EU AI Act and NIST AI RMF pages sell the ability to govern a customer's AI, which is managing someone else's models. Second, as infrastructure for the customer: Gencore AI prepares data for training, runs prompt, retrieval and response firewalls, and builds copilots, which is AI plumbing rather than AI doing the buyer's work. Third, as technique inside classification and the DataAI Command Graph. Remove the models and most of the platform remains saleable: data discovery and scanning across a stated thousand or more integrations, a catalog, lineage, a data map producing records of processing activity, data subject request workflow, consent capture, assessment templates and breach notification.

Accuracy is neither loudly claimed nor measured, and the document that would answer it is available only on request. The AI assisted assessment on the home page produces a risk summary and graded findings on personal data processing, model accuracy and transparency, which a compliance officer will act on, and no accuracy rate, benchmark, test set or failure mode is published. The product does not retrieve legal authority, so source links and citator checks are not the point; the risk is a wrong risk rating, not a fabricated citation. The Master Terms say the AI Systems Transparency Report is available on request, and its contents could not be read. Checked the home page, trust center, pricing and packaging page and contracting explainer.

Accuracy is asserted repeatedly in the marketing and measured nowhere. Product copy claims accurate data classification, discovery of shadow and cloud native assets, and unified intelligence. Classification precision is the key quality measure for a discovery product: a missed store of personal data is the failure that matters, and over broad matches create work that erodes trust in the tool. No precision or recall figure, benchmark, test set or false positive rate is published on any page read. The platform does not retrieve legal authority or produce citations a reader would open. The agreement is more candid than the marketing: Securiti warrants substantial conformity with the Documentation, not the accuracy of any classification result.

A review point is drawn with named roles, and the rest of the control structure is incomplete. The AI use case workflow on the home page runs intake, then AI risk assessment, then a review and approve stage with three pending reviewers, Privacy, Security and Legal, then continuous monitoring with real time oversight and alerts. That puts a human gate after the machine output and says who holds it. The AI Governance package adds configurable approvals, attestations and evaluation gates before production, and runtime controls on prompts, outputs, data access and allowed AI actions. Nothing says what the assessment does unattended, when it defers, or what happens when it is wrong, and nothing describes how OneTrust's own models behave, as distinct from the gates it sells.

Oversight is sold as a product, not described as a control over the vendor's own output. Securiti ships real runtime controls: prompt, retrieval and response firewalls for large language models, and Agent Commander for detecting and undoing AI agent mistakes. All of them govern the customer's AI systems rather than Securiti's classification and assessment engine. On its own side, nothing says what runs unattended, what confidence threshold makes the system defer, where a reviewer sits relative to a classification decision, or what happens when a classification is wrong. Assessment Automation implies people write assessments, without describing a check on machine output. The agreement is the only place a supervision expectation appears, and it points at the customer: the product augments rather than replaces professional advisors, and the customer must confer with legal counsel as needed. That assigns responsibility rather than describing a mechanism.

A named customer, a named individual and real figures are published, with no dates. The GOL customer story quotes Bruna Boccini, Head of Compliance and Data Protection Officer at the airline, who says vendor approval fell from almost thirty days to between five and zero, and request completion from fourteen or fifteen days to a few minutes, across seven billion identifiers and thousands of data flows and vendors. A commissioned Forrester Total Economic Impact study reports a 227 percent three year return and a seven month payback, with a documented method. Logos include Adobe, Samsung, Pfizer, Walgreens, Aetna, Atlassian, Maersk and Bristol Myers Squibb, and the vendor claims more than 14,000 customers, including more than half the Fortune 500. No customer story or study found carries a date, and the GOL figures are the interviewee's own account rather than a measured study.

Named organizations and individuals appear with titles and dates, but with no figures for what changed. The Spotlight Talks series has on the record interviews with a director of global analytics at Dye and Durham, an SVP of product at Walker and Dunlop discussing a 135 billion dollar portfolio, and named executives at Sanofi, Volkswagen and International Flavors and Fragrances, dated April to June 2025. That is interview material, not outcome measurement: no before and after metric, deployment scale or time saving is attached. Analyst recognition is extensive but is not deployment evidence: GigaOm, Frost and Sullivan, IDC MarketScape, Forrester Wave, Gartner Cool Vendor and an RSA Conference Innovation Sandbox win. Section 9.2 of the customer agreement requires customers to join Securiti's reference program and develop a profile with an executive quote and logo, so testimonials are a contract term rather than purely voluntary.

Published commitments are substantive and contractual, and training is not addressed. A buyer can read before signing: an openly published Data Processing Addendum with version history; a purpose limit under which personal data is processed only for the purposes in the agreement and never bought or sold; customer ownership of all data input; tenant separation in a logically separated cloud database with one production environment per customer; ISO 27701 certification; and deletion or export at any time during the term and for sixty days after. Nothing found says whether customer content is used to train or improve models, a notable silence for a company selling AI governance. Nothing covers third party model providers. Privilege and work product are never mentioned, though the platform is sold to privacy counsel and its workflow assigns a legal reviewer.

The architecture is documented in detail, and the data use question is answered in the vendor's favor. In the agreement or its security exhibit: a virtual database instance for each customer separates its data logically and is destroyed when the customer leaves. Personal data the platform identifies is put through a one way irreversible hash, with a commitment that personal data is never captured in clear text in logs or databases. Confidentiality is mutual, with notice and a chance to contest compelled disclosure. The customer owns Customer Data, and all of it is deleted from online systems within one business week of a confirmed request. Against that, section 2.1 grants Securiti a royalty free, worldwide license to use Customer Data both to provide the service and for enhancing product or services, with no carve out for model training and no definition of enhancement. Privilege and work product are not addressed, and there is no position on third party model providers.

Nothing found addresses the line between an information tool and legal advice, on a product that produces compliance judgments for professionals. The platform assigns risk ratings, generates assessments against the EU AI Act, GDPR and US state privacy laws, and routes them to a reviewer named Legal. In place of an advice position, the Master Terms warrant that the services will materially conform to the OneTrust User Guide during the term. No statement says outputs are not legal advice, OneTrust is not a law firm, no professional relationship arises, or users should seek advice on their own facts, and no jurisdiction limit or supervision and competence discussion appears. The Master Terms PDF and the Legal and Compliance Information page were not opened and may contain a disclaimer. Read: the home page, trust center, pricing page and contracting explainer.

A real position on advice versus tooling is published in the agreement itself. The disclaimer at section 5.4 says the customer acknowledges the product is meant only to augment its privacy practices, not to replace legal and other professional advisors, and that the customer is a data controller responsible for the data it collects and its own privacy policies. Section 2.5 adds that the customer takes full responsibility as controller, warrants it has met transparency obligations and obtained consents and legal bases, and must confer as needed with legal counsel to confirm and maintain compliance. That allocates professional judgment to the person relying on the output. No jurisdiction limit is named for the tool's coverage, nothing addresses the supervision or competence duties of the practitioner using it, and no professional guidance is referenced.

A real governance framework is published, without results. The trust center says OneTrust's AI governance program is run by an interdisciplinary AI Governance Committee, supported by governance processes across the organization and the AI lifecycle, an internal AI use policy and employee training. That names an accountable body, a lifecycle scope and two instruments, backed by a Responsible AI section, a published Journey to AI Governance toolkit and an AI Systems Transparency Report. No individual is named as accountable; the committee is identified only by function. Nothing is disclosed on uneven output, with no bias evaluation, testing regime or result on any public page, a notable gap for a vendor that sells bias and drift monitoring to others. The AI Systems Transparency Report is available on request, not published, and was not read.

Nothing published addresses governance of Securiti's own models, which contrasts with what the company sells. Securiti publishes extensive material on AI governance frameworks as product capability, with pages for the EU AI Act, the NIST AI Risk Management Framework, the OWASP Top 10 for LLM Applications and CDMC, and sells an AI Governance module. None of that is Securiti's own governance. No responsible AI page, AI policy, ethics statement, AI governance committee, named accountable owner, testing regime before release or bias evaluation is published. The site navigation was read in full and has no such page. The security exhibit names a security official and a cross functional Security Council, which is information security governance, not AI governance. A vendor selling AI governance publishes none of its own.

Retention, deletion, access control, subprocessors and incident practice are all published and specific. Retention is set by the customer, with built in data minimization including automatic deletion and retention periods that OneTrust encourages customers to shorten. Customers may delete or export their data in a structured, machine readable format at any time during the term and for up to sixty days after, after which remaining data is destroyed. Access is managed by the customer, with ISO 27001, 27017 and 27701 certification and security duties set out in Appendix 1 of the published DPA. Subprocessor changes carry thirty days' notice and a right to object on reasonable data protection grounds, remedied by an alternative or termination of the affected subscription. Incidents are notified without undue delay, with updates and cooperation on the customer's own reporting. Encryption is AES-256 at rest and in backup and at least TLS 1.2 in transit, and the trust center publishes a 2026 penetration test summary and disaster recovery and continuity exercise memos. The subprocessor list itself sits on the customer portal, not the open trust center.

The security exhibit to the customer agreement is specific across most of the ground; a named subprocessor list is missing. Deletion has a stated window: on a request by ticket or email, Securiti deletes all Customer Data from online systems within one business week of confirmation, keeping data only where law requires. Incidents have a deadline and method: notice of a security breach as soon as practicable and no later than seventy two hours after Securiti becomes aware, by email with a read receipt to a designated address. Securiti may not tell third parties without approval, and the customer alone decides whether affected consumers are notified. Access control is role based, reviewed regularly and monitored, with only a stated subset of staff able to reach customer data. Testing has a cadence: annual third party penetration tests and audits, weekly internal scans, and disaster recovery tested twice a year, with a summary available on request. Devices carry at least AES-128 full disk encryption. Third parties appear only as categories such as IT service providers and cloud providers, and the CCPA addendum has the customer approve transfers to unnamed affiliates, providers and vendors.

What the vendor stands behind is published, specific, versioned and independently assessed. The Master Terms of Service are published in full in a legal center, currently version 5.1 effective 23 March 2026, with every earlier version back to August 2020 downloadable alongside the DPA, Standard Contractual Clauses, Business Associate Agreement and product terms. Each party's liability is capped at total annual fees paid or payable in the prior year, which OneTrust notes is broader than the common cap tied to fees for one service, with willful misconduct and intellectual property claims uncapped. An indemnity covers third party IP infringement claims from use of the cloud services, with OneTrust controlling the defense. A warranty commits the services to conform materially to the User Guide for the term. A plain language explainer, Contracting with OneTrust, sets this out and explains why OneTrust refuses uncapped liability for data breach. An independent TermScout assessment rates the terms 70 percent customer favorable with a perfect score against buyer deal breakers. Nothing addresses wrong AI output, and no insurance position is stated.

The agreement covers indemnity, a cap, a warranty and insurance in specific terms. The indemnity covers more than intellectual property. Securiti defends the customer against third party claims that use of the product infringes a US patent, copyright, trade secret or trademark, and separately against claims arising from Securiti's use or disclosure of Customer Data in breach of the agreement. Direct damages are capped at the lesser of amounts paid under the order form in the previous twelve months or one million dollars, with consequential damages excluded for both sides and the customer's payment obligations carved out. A warranty commits the product to substantially meet the order form, substantially conform to the documentation and be free of malicious code, with performance again, termination and a pro rata refund as the exclusive remedy. An insurance position is published: errors and omissions, professional liability and cyber cover of at least three million dollars per claim and in aggregate, held through the term and two years after, with thirty days' notice of cancellation. A service level agreement adds 99.5 percent availability, tiered credits and a termination right below 92 percent for three months running. Nothing is specific to wrong AI output.

Integration is clearly part of the offering, but no connection could be named from the pages read. An Integrations page sits in the platform menu, described as an extensive set of integrations for adding data management to existing workflows; Third-Party Management automates vendor assessments with ecosystem integrations; the consent product scales through APIs across channels; and some services ship components customers install themselves, such as cookie consent scripts and data discovery agents. OneTrust is also sold through the Azure Marketplace, with its own supplemental terms. No specific system is named on the pages read, no API reference or developer documentation was found, and nothing says what moves in which direction. The Integrations page was not opened and may say more.

Real integrations exist, are named, and stop short of documented depth. Securiti states more than a thousand integrations across data systems and names the principal ones on its own navigation: AWS, Google Cloud, Azure, Snowflake and Databricks each carry a dedicated page, with a connectors index behind them. What travels is describable at a high level from the product set, since discovery, classification, access intelligence and lineage all operate by reaching into those systems and reading their contents, and downloadable components are deployed inside the customer's own environment for parts of the platform. What is missing is the implementer's view: no API reference or connector specification is published on the pages read, and nothing describes the direction or granularity of what moves for any individual system. A documentation site exists at docs.securiti.ai, listed among the company's own internet-facing assets in the published system description, and was not opened, so depth was neither confirmed nor excluded.

Tenancy is stated plainly, residency is offered, and processing location is left open. The contracting explainer describes cloud services on shared architecture, code and infrastructure, with customer data in a logically separated cloud database and each customer given a single production tenant, plus nonproduction environments in some subscriptions and more available to buy. Customers can choose from various geographic hosting locations. HIPAA and PCI compliant environments are available for specialized needs, backed by a published PCI attestation and a HITRUST certification. The available regions are not listed, so a buyer must ask, and processing location is not distinguished from storage, which matters for the AI features since no model or provider is named.

The deployment model is stated plainly, with partial residency detail. The published system description sets out a multi tenant cloud service on AWS and GCP, with a virtual database instance for each customer providing logical separation, plus downloadable components that run inside the customer's own environment. Residency is real: instances sit in several geographically distributed data centers, and each instance serves customers from a specific geography as a standalone offering with no data exchange between instances, which answers the processing question directly. Two clouds are identified by their endpoints: a Global Production Cloud and an EU Production Cloud at app.eu.securiti.ai with its own status page. Resilience detail is published: daily backups copied to a data center in another region, a pilot light disaster recovery strategy, failover across availability zones, and a stated 24 hour RTO and RPO. The full list of regions is not given beyond the EU and Global clouds, and nothing describes what changes between deployment options.

Current, independent attestations can be downloaded directly as PDFs, with no form, email capture or NDA click: a SOC 2 Type II report, a second SOC 2 Type II for Certification Automation, ISO/IEC 27001, 27701, 27017 and ISO 9001 certificates, and a published Statement of Applicability showing which controls are in scope. Alongside them sit a PCI DSS attestation signed November 2025 with a responsibility matrix, a HITRUST certification letter, TISAX, TX-RAMP, the Spanish ENS conformity statement, and a CAIQ v4.0.3 self assessment on the Cloud Security Alliance STAR registry. Documentation goes beyond certificates to a 2026 penetration test summary, a completed SIG questionnaire, a security, privacy and architecture whitepaper, disaster recovery and continuity exercise memos, and a live status page. All of this is openly published.

The certifications are real and named, and none of the evidence can be reached without asking. Securiti states SOC 2 Type II certification, with the report available on request to prospective and current customers, and holds ISO 27001:2022 and ISO 27701:2019, the privacy information management standard. The agreement backs the SOC 2 position, committing Securiti to provide its latest SOC 2 report or an industry standard successor on request. The published system description names AWS and GCP and the shared responsibility split, annual third party penetration tests and audits, weekly internal scans, and a disaster recovery test summary on request. There is no trust center and nothing to download. No auditor or certification body is named for any of the three, and no certificate date, examination period or scope appears. Every route to the evidence is a request.

AI use is confirmed, and nothing underneath it is named publicly. The Master Terms answer whether OneTrust uses AI in the services with a plain yes and point to the AI Systems Transparency Report, available on request. No model, family, provider or architecture is named on any public page read, and nothing rules out a third party foundation model, so a customer cannot tell whose model produces its assessments and documentation. Inference location is not separated from storage. No commitment to notify customers of model changes was found, though the subprocessor process carries thirty days' notice and would cover a model provider engaged as a subprocessor. The transparency report exists and can be requested, but nothing is named where a reader can see it.

The platform is built around models and names none of them. Securiti describes a knowledge graph at the core, classification across structured and unstructured data, preparing data for vector databases, curating and cleaning data for model training and tuning, and prompt, retrieval and response firewalls for large language models. All of that implies models, and no model, model family, provider or architecture is named on any page read. Nothing says whether a third party foundation model is called in classification or in the copilot products, and nothing rules one out. AWS and GCP are named as infrastructure, which says where workloads run, not whose models they are. No commitment to notify customers when the models change is published. The architecture is described in real terms; nothing underneath it is identified.

The unit and structure are published in detail, and no figure appears. A pricing and packaging page sets out nine packages across five solution families, each with key features listed so the split between base and suite editions is visible, and each with its own charging meter: AI Governance on admin users and AI inventory; the Consent Management Platform on average daily visitors across channels and properties; Universal Consent and Preference Management on data subject profiles captured; Privacy Automation on users and privacy asset inventory; Tech Risk and Compliance on admin users and asset inventory; and Third-Party Management on admin users and third party inventory. FAQs explain that pricing uses value based usage meters in tiers, with an account executive moving a customer up a tier when usage consistently exceeds limits. No rate, band, floor or currency appears, every package routes to a Get Pricing form, and nothing says what implementation or professional services add.

No figure or tier is published, but the charging unit can be read from the agreement. The site navigation was read in full and has no pricing page; every commercial route is a demo request or contact form. The customer agreement caps the number of Authorized Users at the figure in the order form, which makes named users the unit of charge. Fees are quoted and paid in US dollars. Payment obligations cannot be canceled, are not prorated for partial months and are not refundable. Late payment carries interest of one and a half percent a month, and subscriptions renew automatically for terms equal to the first unless either party gives thirty days' written notice. The service level agreement adds credits of four, six and ten percent against availability levels. A buyer can see the shape of the commercial relationship in advance but learns nothing about cost: no rate, band, package or tier name is published.

Coverage is described three ways, with substance, and the boundary is left open. Solutions are organized by function into six families, by role into data, marketing, privacy, and security and risk teams, and by regulation, with pages for GDPR, US privacy law and the EU AI Act plus a wider regulatory index. Tech Risk and Compliance cites templates across more than fifty standards and frameworks, AI Governance aligns to the EU AI Act, NIST and ISO 42001, and third party screening covers politically exposed persons, sanctions and watchlists through Dow Jones data. Published logos span regulated industry, retail, pharmaceuticals, technology and nonprofits. Nothing says where the product stops, such as organization size, data volume or poor fit. The By Role menu, where a legal buyer would look, has no page for legal or counsel, although the product's own workflow assigns a legal reviewer.

Coverage is documented across industries, regulations and technology, and the boundary is left open. Six industries have dedicated pages: financial services, healthcare, telecom, retail, travel and hospitality, and manufacturing. Regulations are named, with pages for GDPR, California's CPRA, Brazil's LGPD, Canada's PIPEDA, China's PIPL, the EU AI Act, the NIST AI Risk Management Framework, the OWASP Top 10 for LLM Applications and CDMC, behind a wider list. Technology coverage is put at more than a thousand integrations, with the major cloud and data platforms named. Nothing says where the product stops: no organization size, data volume, or environments and obligations it does not reach. The Roles navigation offers Data+AI Builders, Data Security, Data Privacy, Data Governance and Marketing, with no page for legal or counsel, although the privacy pillar is work a data protection officer or privacy counsel owns and the agreement tells the customer to confer with legal counsel.