Using Conversational Analytics Insights Chatbot

The AI chatbot can analyze and generate summaries, tables, and visuals for the following objects:

• AI governance objects:

  • AI systems - Designed to achieve specific business outcomes using artificial intelligence. It captures essential details about the AI system, including its purpose, design specifications, compliance with regulatory requirements, ethical considerations, and performance metrics.

  • Datasets - A structured collection of data that is organized to facilitate easy access and management. It helps keep track of specific data used for building, training, or testing AI models.

  • Models - The learning frameworks used to build and inform AI and machine learning applications.

  • Projects - Used to track where AI is deployed for business initiatives, applications, or services to achieve specific business outcomes.

• Assessments - Questionnaire templates sent out to respondents to gather information.

• CMP time series - Data trends and metrics over time within the Consent Management Platform (CMP).

• Consent time series - The tracking and analysis of consent-related metrics over a period of time.

• Contracts - A legally binding contract between a business and an outside supplier or service provider, defining the terms of an exchange of goods or services.

• Controls / Control Implementations - The requirements which are put into place to avoid risks, errors, or to define measures that will take place if an error or risk is found.

• Engagements - The active involvement, communication, and interaction between an organization and its external vendors or third-party entities.

• Incidents - An event that occurred that was the direct result of an issue identified with a lack of controls in place to prevent the incident from occurring.

• Inventories:

  • Assets - Any entity used to collect, store, process, or access personal data.

  • Entities - A legal entity (other than a third-party service provider) that is involved in your organization's data processes.

  • Processing activities - Operations performed on personal data, such as collection, storage, use, or deletion.

  • Vendors - Any external, third-party provider of goods or services involved in your data collection processes.

• Issues - A deviation, deficiency, or event that introduces risk to systems, data, operations, or compliance—often requiring documentation, remediation, and potential escalation.

• Privacy requests and subtasks - A user's submission to an organization asking for actions related to their personal data. Subtasks, on the other hand, are actions that need to be taken based on a privacy request.

• Risks - The probability of exposure, loss of critical assets and sensitive information or reputational harm as a result of a cyber-attack or breach within an organization.

Use these tips to get the most accurate and helpful responses from the Copilot chatbot. For more information, see OneTrust Platform Copilot.

• If results are inaccurate, include more details in your prompt. More context typically yields more precise answers.

• Conversational analytic insights is designed for simple questions. Complex or multi-layered queries may not return the expected results.

• The chatbot does not currently interpret user context. If you need user-specific information, include the user's name or email address in your prompt.

• After submitting a prompt, allow a few seconds for the system to return a response.

To access Conversational Analytics insights, users must be assigned the appropriate AI permissions. The following permissions are required:

• Access insights Copilot

• AI Copilot chatbot

The chatbot can summarize key metrics, identify trends, and generate visuals based on the objects you manage within the OneTrust Platform. The examples below highlight the types of questions you can ask for each object type to help you understand what information the chatbot can retrieve and how to structure effective prompts.

• AI Governance Objects:

  Projects

  You can ask for counts of projects, upcoming deadlines, project stages, project types, or projects grouped by owner.

  Datasets

  You can view the total number of datasets, identify dataset sources, or request information about recorded and registered datasets.

  Models

  You can retrieve the total number of registered models, see how many models exist by task type, or review model stage distribution over time.

  AI systems

  You can request metrics on essential details on regulatory-mandated information, including the technical details of the AI itself, such as training processes and performance metrics.

• Assessments: You can ask questions about open, stalled, or overdue assessments, upcoming deadlines, and completion trends over time.

• Controls: You can ask about the number of controls by effectiveness rating to understand how well controls are performing within the overall risk management framework.

• Inventories: You can request metrics related to asset counts by stage, last assessment date, overall risk levels of inventories, as well as track vendor workflow status and onboarding‑to‑assessment timelines.

• Privacy Requests & Subtasks: You can ask about DSAR request volumes, request statuses, overdue items, or the distribution of requests across task types or workflow stages.

• Risks: You can ask questions about the total number of risks, the number of mitigated risks, and the average residual risk score. You can also request metrics that show the risk distribution by category, stage, or level to better understand risk concentration and control effectiveness.

• Vendor Engagements: You can ask the chatbot to track total and open engagements, monitor where engagements sit in the workflow, and view distribution across risk levels or stages.

• Vendor Contracts: You can request metrics and visuals on total active contracts, see counts by contract status, or view lists of contract details such as owner, type, status, and associated vendor.