OneTrust Tech Risk & Compliance vs. Vanta

OneTrust provides a repeatable and defined process for vendor assessments but should be adapted to your organization. OneTrust functions well for a centralized document repository. The pricing of modules and what modules are required for workflows to function fully should be better defined. Automated assessments can wind up in spam filters and should be communicated outside of the platform prior to sending to the vendor.

Incentivized

Vanta seems excellent for startups, but I expect that they would be even more useful at bigger companies. I think it really helps people that haven't done SOC2 before. I also think it would help in monitoring compliance across teams with many users. If the budget is extremely tight, I think it would be possible to save money by not using it.

Incentivized

• Module wise implementation.
• Very reasonable price structure.
• Easy and speedy to implement.
• Product roadmap.

• API driven capabilities offer a very easy way to connect your systems to their application.
• It was mostly intuitive to figure out what needed to be configured.
• I like how responsive they have been and how they have been able to outline the entire process for us from the start to the end.

Incentivized

• Documentation chasing for assessments is not as automated or hands-off as demos made it seem.
• Getting custom risk matrix set up required professional onboarding.
• Platform is less than intuitive.
• Pricing is module dependent and demos do not highlight which module is included in which workflow.

Incentivized

• In my opinion, they make it very hard to contact them when you need something.
• In my experience, they write their contracts to make it difficult to cancel service.
• In my experience, they have no policy for refunds in addition to their [...] contacts.

Great to maintain for our SOC2 compliance and further compliance evolutions

Incentivized

In my experience, the sheer volume of tasks and to do items is a bit inundating.

Always available

Incentivized

Fast although the agent may take some time to reping on checks

Incentivized

Direct support and replies in a timely manner to tickets submitted

Incentivized

Pretty straight forward

Incentivized

Straight Forward

Incentivized

Pretty seemless and did it almost entirely myself

Incentivized

During the assessment, we found that OneTrust is easier to use, set up, and administer. it has a quick ROI and value for business. The OneTrust product support and roadmap are far more competitive in comparison to TrustArc. OneTrust is specialized in GRC including Data Privacy and Cookie compliance, where Archer is good in Enterprise Risk management.

Vanta's reporting was far superior, the price was competitive but my engineers running the project said that working with vanta would save them significant amount of time. Secondly vanta had more integrations so they could plug directly into the systems we use!

Incentivized

Works as intended

Incentivized

• More uniform vendor assessments.
• Defensible numeric metrics reflecting risk.
• Centralized document repository for audit proofs.

Incentivized

• We were able to close contracts because we had our SOCII compliance in place
• SOCII certification process was reduced by at least 80%

Incentivized