Platform
Attribute-Based Access Control (ABAC) Phase 1: Foundations
Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by using assignments through sharing, attributes, or workflows to determine which records users can access and what permissions they have on those records. ABAC Phase 1: Foundations is available for supported objects across AI Governance, Privacy Automation, Tech Risk & Compliance, and Third-Party Management and introduces assignment-based permissions, sharing and access management, and record-level auditing, helping organizations implement least-privileged access, improve governance, and simplify collaboration across teams and workflows.
ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0, with support initially available for a subset of objects and functionality. Additional capabilities and object support will be introduced in future releases through ABAC Phase 2: Dynamic Access.
This feature is under Public Preview. Please contact OneTrust Support to request early access. For more information, see Attribute-Based Access Control (ABAC) Phase 1: Foundations in the Settings & Administration release notes and Attribute-Based Access Control (ABAC) User Guide.
OneTrust Activity Logs
Gain a unified, real-time view of user and system audit events across the OneTrust platform with Activity Logs to increase visibility and control, investigate issues faster, and meet compliance requirements with a complete, traceable audit trail. Through a centralized audit experience, teams can quickly search and filter audit records, monitor activity across solutions from a single location, and export audit data for broader reporting and analysis.
This feature is under Public Preview. Please contact OneTrust Support to request early access. For more information, see OneTrust Activity Logs.
Key Pair Rotation
Refresh expiring Snowflake key pairs directly from the credentials flow instead of replacing them manually outside the product. Expiration reminder emails help teams rotate keys on time and maintain authentication continuity during the transition to the new key pair.
This feature is under Public Preview. Please contact OneTrust Support to request early access. For more information, see Rotating Key Pairs for Integrations Credentials.
AI Agents: Personal Data Questions
Accelerate privacy impact and vendor risk assessments by using AI Agents to answer personal data questions during questionnaire completion. This feature analyzes assessment documents to identify likely data subjects and personal data types, then uses those results to support answers and update the linked inventory data map when the assessment is submitted.
This feature is under General Availability for customers with solution packaging. For more information, see Leveraging AI Auto-Responses for Assessments.
AI Agents: Supplemental Documentation
Upload supplemental documentation during privacy impact and vendor risk assessment setup so AI Agents in Copilot can use additional context to answer assessment questions more effectively. This feature lets users add, remove, or skip documents before launch and makes those files available for AI auto-completion, improving output quality, transparency, and assessment completeness.
This feature is under General Availability for customers with solution packaging. For more information, see OneTrust Privacy Risk Agent Feature Guide.
Custom Notifications for Assessment Templates
Send customized, trigger-based automated email messages from a new global Notifications tab on the Assessment templates screen. This enhancement speeds up assessment completion, reduces support requirements, and provides users with more relevant information in the assessment.
This feature is under General Availability. For more information, see Configuring Custom Email Notifications on Assessment Templates
Improved Approver-Only Assessment Sections
Configure approver-only sections on assessments automatically using template rules or inventory-based values. These enhancements mean users can launch assessments with approver-only sections directly from the self-service portal.
This feature is under General Availability. For more information, see Configuring Approver-only Assessment Sections