Founded 2016Pure-play VRM/TPRM software

OneTrust Third-Party Risk Management

Atlanta, Georgia, United States

Third-party risk module inside OneTrust's broader trust/GRC platform, powered by "Vendorpedia," a network of 6,000+ pre-profiled vendors offering ready-made risk assessments, continuous monitoring, and workflow automation mapped to frameworks like SIG, NIST, and CSA CAIQ.

Headquarters
Atlanta, Georgia, United States
Founded
2016
Website
www.onetrust.com/products/third-party-risk-management/

Notable facts

  • Named category leader in Gartner's inaugural Magic Quadrant for Third-Party Risk Management Tools for Assurance Leaders (2026)
  • Vendorpedia launched at RSA Conference 2019 as what OneTrust called the industry's only combined security-and-privacy third-party risk exchange

Relevant guides

Pricing

Pricing not publicly disclosed on the vendor's site. Typical for B2B VRM/procurement software, which is usually quoted per scope or vendor volume.

Case study

Mews, a hospitality technology company, describes using OneTrust for regulatory and vendor risk workflows in a named customer case study. Read more →

Sources. This profile is compiled from public reference data, WebSearch-verified againstsource 1 · source 2 · source 3. Data as of 2026-07-14. See methodology.

Sourcing software in this category today? We connect risk, compliance, and procurement teams with qualified vendor risk management software vendors.

Request software

Related vendors