OneTrust Data Discovery & Security

Additional Info

CompanyOneTrust
Websitehttps://onetrust.com/
Company size (employees)1,000 to 4,999
Headquarters RegionNorth America
Type of solutionSoftware

Overview

Companies are scrambling to ensure they don’t miss out on the AI revolution, and that means putting their data to work. But how can they begin to leverage that data for innovation–much less protect it–without first understanding what data they have and where it resides?

By providing visibility and control into an organization’s data estate and establishing systems to efficiently and effectively govern that data, companies can reduce data risk and enable trusted data use.

Data discovery is the first step in any data governance program. With OneTrust, privacy, security, marketing, and data science teams can discover, classify, inventory, and map sensitive data no matter where it is. With more than 200 pre-built connectors into data sources like Microsoft 365, Salesforce, Snowflake, DataBricks, Box, Google Drive, and more, OneTrust helps organizations gain a deep understanding of their data to then apply the correct privacy and security policies.

Once personal data is obtained, you must ensure its use is documented and safeguarded — what actions should be taken to appropriately protect and manage it? OneTrust identifies data issues such as out-of-place data, obsolete data, or failed controls and connects to over 500+ third-party applications (ServiceNow, Jira, Microsoft Purview, Alation, Collibra, and more) for automated remediation and enforcement actions such as retention, deletion, archival, quarantining, masking, or redaction.

Whether an organization needs to implement GDPR, HIPAA, ISO27001, or other data governance frameworks, OneTrust automates workflows to ensure compliance with all applicable data security rules and privacy regulations. Teams can define and orchestrate policies to reduce data risk, retain and delete data according to custom or regulatory schedules, or minimize their data footprint and attack surface.

Key Capabilities / Features

Data Discovery & Classification: OneTrust offers an unrivaled data discovery and classification engine with scanning capabilities that go far beyond just capturing metadata. OneTrust goes to field- and file-level depth to increase data visibility and improve classification accuracy. AI enables discovery and classification of personal, sensitive, and other data in unstructured file shares, structured databases, big data storage, SaaS applications, and cloud solutions. Scan complex data, including PDFs, ZIP files, and images with full OCR capabilities.


Data Retention & Deletion: More data means more exposure to attack or misuse. OneTrust enables organizations to easily identify data that violates retention policies and automate deletion processes to reduce risk. Apply custom retention policies, or create policies for jurisdiction or industry.


Data Minimization: The more data you have, the bigger the attack surface and the storage bill. With OneTrust, companies identify data that is kept outside of best practice or regulatory timeframes. Identify redundant, obsolete, and trivial (ROT) data across the data estate to remove it from your data footprint.


Data Risk Mitigation: OneTrust helps companies continuously monitor and assess their data and security measures, and automatically remediate issues. Fix data security issues, like removing open access to sensitive data in OneDrive, redacting sensitive data in Salesforce, or deleting sensitive files from file shares


Data Access Governance: Over-privileged access is a risk that can be reduced by only sharing sensitive data with people authorized or granted permissions. OneTrust finds and remediates overly permissive access to data and triggers automatic workflows to disable sharing.


Data Security Posture Management (DSPM): With OneTrust, it’s easy to continuously assess data and security posture, automatically remediate issues with data policies, and ensure data is known, protected, and governed depending on jurisdiction and data type. Monitor for changes and detect data drift.


How we are different

Ability to discover and manage unstructured data: This is a standout capability from OneTrust. With OneTrust, organizations can accurately identify and classify both unstructured and structured data sources at the field- and file-level. OneTrust uses AI to analyze the entire context, patterns, and terms within an unstructured file to not only identify the terms and classifications in the file, but also the type of file. Common examples include resumes, financial statements, source code, and medical records.This ensures no data is left behind and organizations have a full and accurate understanding of data across their data estate. No matter what technology they use for data storage, OneTrust gives organizations the ability to discover, classify, and catalog data from virtually any system.


Regulatory research and intelligence: Organizations gain access to OneTrust’s global community of regulatory experts, in-house researchers, and extensive research database across hundreds of jurisdictions, allowing them to quickly understand and adapt to regulatory change. Integrated with OneTrust Data Discovery & Security, companies can implement and adhere to data governance and security frameworks to ensure compliance.


Intuitive and scalable platform: From megabytes to petabytes, OneTrust scales to meet the demands of even the largest enterprise datasets. OneTrust's enterprise-scale solution, capable of handling billions of data transfers and extensive connectivity and adaptability, makes it a great fit for any team or organization. With agile development and simplified "one-click" deployment on Amazon Web Services and Microsoft Azure, teams can start on their data governance journey in a fraction of the time. Organizations can also demonstrate data governance program effectiveness by reviewing trends in data hygiene, like where sensitive data has been found, and looking at policy violations to identify areas of program improvement.