Configuring Email Server Settings

The OneTrust application sends notification emails to users and data subjects. By default, these emails are sent from noreply@m.onetrust.com. You can customize the email address from which the platform sends notification emails by configuring OneTrust with any of the following email server setup options.

Note:

Email Settings are only available to Site Admin users in the parent organization. Please contact OneTrust Support for assistance when updating or adding email domains to your account.

Email Server Setup Options

The following methods are available to configure email notifications from OneTrust:

Methodology

License Availability

Configuration/Setup Required

Recommended Use

IP Safelisting

Default Configuration

All

Effort: Easy

Companies looking for easy configuration and not wanting to customize the sender email address for notification emails.

This method uses the OneTrust cloud email platform, which uses the automated security that ensures customers do not manage the DomainKeys Identified Mail (DKIM) and Sender Policy Framework (SPF). The IP addresses used for email delivery are not published for this purpose, which therefore eliminates the need to rotate DKIM keys or update SPF for IP changes.

Note:

If you require IP safelisting for email delivery within your internal teams, OneTrust recommends using the Custom SMTP Relay or Microsoft Exchange Online configuration.

Custom SMTP Relay

Advanced, Enterprise

Effort: Moderate

For more information, see Configuring Custom SMTP Email Accounts.

Companies wanting full control over emails coming from the OneTrust application. Emails are sent from the application via SMTP configuration directly to the customer's email server. This works for any email server supporting SMTP.

*Some email servers impose daily limits to the volume of email traffic sent. Ensure your server supports the expected capacity relative to how you're planning to use OneTrust.

If using this method, contact your network team to discuss whether IP safelisting is required. If required, please refer to About OneTrust Hosting Options, Locations, and Backup.

Send on Behalf of my Domain

Advanced, Enterprise

Effort: Moderate

For more information, see Configuring Send on Behalf of my Domain.

Companies wanting OneTrust's email server to handle delivery of email but delegate the ability of OneTrust to send emails on behalf of their companies domain. Requires setup of SPF and CNAME in DNS records to ensure reliable delivery of emails sent.

This method uses the OneTrust cloud email platform, which uses the automated security that ensures customers do not manage the DomainKeys Identified Mail (DKIM) and Sender Policy Framework (SPF). The IP addresses used for email delivery are not published for this purpose, which therefore eliminates the need to rotate DKIM keys or update SPF for IP changes.

Note:

If you require IP safelisting for email delivery within your internal teams, OneTrust recommends using the Custom SMTP Relay or Microsoft Exchange Online configuration.

Microsoft Exchange Online

Advanced, Enterprise

Effort: Advanced

For more information, see Configuring Microsoft Exchange Email Accounts.

Companies wanting full control over emails coming from the OneTrust application. Emails are sent from the application via Microsoft Exchange Online directly to the customer's email server.

If using this method, contact your network team to discuss whether IP safelisting is required. If required, please refer to About OneTrust Hosting Options, Locations, and Backup.