OneTrust Privacy Automation vs. Vanta

OneTrust offers the monitoring, the assessment, and the verification process of data, a formal way of ensuring the results outlined are correct, understandable, and confined. Besides, the policy and the website scanners from OneTrust are incredible, virtual, and concrete. Besides, OneTrust outlines the risk management options, with the customer mapping and taking the required assessments. Lastly, websites and cookies are efficiently scanned and made efficient for concrete business management.

Incentivized

Vanta seems excellent for startups, but I expect that they would be even more useful at bigger companies. I think it really helps people that haven't done SOC2 before. I also think it would help in monitoring compliance across teams with many users. If the budget is extremely tight, I think it would be possible to save money by not using it.

Incentivized

• Help us process DSR or Data subject Request efficiently
• Goes particularly well with our most useful device which is Iterable.
• User friendly interface

Incentivized

• Integrations with source control and infrastructure providers.
• Guidance around what makes a company's policy secure.
• Portals that supply our auditors with everything they need to write their reports.

Incentivized

• I had a hard time trying to figure how to save the cookie settings correctly.
• Integrate OneTrust with other systems is not automatic.

Incentivized

• Alerts and employee onboarding and offboarding were not entirely complete when we started using the product.
• It would be nice if we could assign policies to specific people in the Vanta app.
• Sometimes, refreshing the tests when you make the changes to pass takes a little more time than desired.

Incentivized

Great to maintain for our SOC2 compliance and further compliance evolutions

Incentivized

In my experience, the sheer volume of tasks and to do items is a bit inundating.

We have used a shared hosted tenant managed by OneTrust for over three years with only one instance of a lengthy (4+ hours) unexpected outage which happened years ago.

Incentivized

Always available

Incentivized

We selected a European hosting location based on our initial use case, however, our usage of the OneTrust platform has expanded globally to where the majority of users sit in the Americas or Asia-Pacific regions. There is a noticeable lag when navigating the platform for users located far away from the hosting location.

As a user, you can mitigate any sluggish response time by the aggressive use of multiple browser tabs. I commonly have one tab open on an Inventory detail screen, another tab on an Assessment window, and maybe another tab on a customized inventory list screen. If one tab is slow I hop to another tab and work on that tab while the first tab responds.

Incentivized

Fast although the agent may take some time to reping on checks

Incentivized

Both our customer rights access and cookie consent advisors were responsive and helpful in getting us trained on using the platform and the various assets implemented on our website. We had multiple training sessions that were more than enough in getting all of the users on our team familiar with what we needed to do.

Incentivized

Direct support and replies in a timely manner to tickets submitted

Incentivized

Pretty straight forward

Incentivized

An implementation specialist worked with us remotely during our initial deployment. Due to the diverse geographic locations of my organization's participants, the implementation and training had to be done remotely (this was before COVID-driven remote work).

The implementation specialist was knowledgeable and helpful but to really get full benefit from the platform I encourage organizations to dedicate a specialist within your company to really study and learn the platform.

Incentivized

Straight Forward

Incentivized

Pretty seemless and did it almost entirely myself

Incentivized

OneTrust is designed to focus on privacy management, the other tools are tailored for privacy but not primarily focused on privacy management.

Incentivized

Osano and Vanta both meet our requirements at a comparable rate. When comparing quality of ongoing product support, we felt that Vanta is the preferred option. For feature updates and roadmaps, we preferred the direction of Osano over Vanta.

Incentivized

The platform has exceptional capabilities to customize the user interface, reports, and recorded information. In most cases, the customization can be compartmentalized so that if the customization performed for Department A is determined to not impact Department B, the customization can be hidden from Department B.

We have four different departments using the IT Risk Management module. Three departments share their work in what we call the 'shared data risk management zone'. Another department is using IT Risk Management for a bespoke portfolio risk management task, and the customization for this department is largely hidden from the other departments.

Incentivized

Works as intended

Incentivized

• We are able to quantify the number of business and technical processes assisted by the governance specialists
• The governance specialists that use the platform are more effective and efficient.

Incentivized

• In my experience, they aren't really helpful after all. They ended causing more problems when documents went missing on our trust page. They caused us some embarrassment when we referred people to a mostly empty page.
• They are now attempting to, in my opinion, force us to renew service.