at Financial Technnology Year
Please contact them if you have any questions.
OneTrust GRC from OneTrust
Governance, risk, and compliance platform with specialized features for pension fund governance. Includes policy management, compliance tracking, third-party risk management, board governance tools, regulatory change management, and automated reporting capabilities.
Product analysis by function
Governance Management Platforms for Compliance and Governance
Software that supports board and committee management, policy administration, and governance workflows. These platforms maintain governance documents, manage meeting schedules, and track decision implementation.
More Governance Management Platforms
More Compliance and Governance ...
Board & Committee Management
(15 Yes /15 Known /15 Possible features)
|
Meeting Scheduling Ability to coordinate and schedule meetings with automated calendar invitations. |
OneTrust GRC offers board and committee management including meeting scheduling via calendar integration and notifications. | |
|
Digital Agendas Support for creating, distributing, and amending meeting agendas electronically. |
Digital agenda creation and management is supported in Board Management module (official documentation/features). | |
|
Secure Minutes Capture Tool to record, store, and distribute meeting minutes in a secure, permission-controlled environment. |
Product includes the ability to securely record and store board/meeting minutes in permissioned environments. | |
|
Attendance Tracking System for recording and reporting on attendee participation in meetings. |
Attendance tracking is a standard feature within the board and committee modules. | |
|
Voting & Resolutions Digital tools for facilitating, recording, and storing votes and resolutions. |
Voting and resolutions features are included for digital facilitation and documentation. | |
|
Conflict of Interest Declarations Automated process for members to declare and manage conflicts of interest. |
Conflict of Interest declaration workflow is included per product datasheet. | |
|
Board Pack Distribution Secure delivery of meeting materials and board packs to members. |
Board/meeting pack distribution is supported with secure document sending and tracking. | |
|
Role-Based Access Customizable access controls for different committee and board member roles. |
Comprehensive role-based access controls are included for committees, board members, and other users. | |
|
Integration with Calendar Systems Ability to sync with external calendaring solutions (e.g., Outlook, Google Calendar). |
Supports integration with calendar platforms like Outlook and Google Calendar for meeting and task synchronization. | |
|
Automated Reminders & Notifications Automated emails or alerts for pending tasks, upcoming meetings, or policy reviews. |
Automated reminders and notifications are included for tasks, reviews, meetings. | |
|
Task Assignment & Follow-up Assign tasks to board/committee members and automate follow-up reminders. |
Board and committee tasks can be assigned with follow-up automation. | |
|
Meeting Recording Audio or video recording of meetings with secure access. |
Meeting recording capabilities listed in Board Management features. | |
|
Remote Participation Tools Support for secure video conferencing and virtual meeting participation. |
Secure remote participation (video conferencing) and collaboration tools included. | |
|
Document Annotation Board members can annotate and share notes directly on meeting documents. |
Document annotation and sharing for board/meeting materials is supported. | |
|
Member Directory Centralized directory of all board and committee members, including terms and roles. |
Centralized directory of committee and board members is available. |
Policy & Document Management
(15 Yes /15 Known /15 Possible features)
|
Centralized Document Repository Single, secure storage location for all governance and policy documents. |
Central document repository with robust policy/document management is core function. | |
|
Document Version Control Track changes, maintain prior versions, and manage approvals for documents. |
Version control on all policy and governance documents is built-in. | |
|
Searchable Document Index Advanced search capabilities across document types and content. |
Document search and indexing is prominently featured. | |
|
Document Expiry & Review Dates Automated tracking and notification of policy expiration and scheduled reviews. |
Policy expiration/review tracking and notification is supported. | |
|
Role-Based Document Access Access controlled via roles and permissions, supporting confidentiality. |
Role-based document access is enforced across all documentation. | |
|
Policy Workflow Automation Automate drafting, approval, and publishing workflows for governance documents. |
Automated policy workflow/support for drafting, approval, and publishing. | |
|
E-signature Integration Ability for stakeholders to electronically sign documents securely. |
E-signature tools and integrations (DocuSign, etc) supported. | |
|
Document Acknowledgment Tracking Track which members have read and acknowledged receipt of documents. |
Reads and acknowledgment tracking for document recipients are included. | |
|
External Document Sharing Secure sharing features for documents with external advisors or regulators. |
External secure document sharing for auditors/third-parties provided. | |
|
Document Encryption In-transit and at-rest encryption for all stored documents. |
In-transit/at-rest encryption noted in security documentation. | |
|
Activity Audit Trails Record activity, changes, and access events for all documents. |
Audit trails for all document actions and events as standard. | |
|
Template Management Pre-defined templates for common policy and governance documents. |
Template management for policy/governance documents is included. | |
|
Multi-format Document Support Support for popular document formats (PDF, Word, XLS, etc.). |
Multi-format document support (PDF, DOCX, XLS, etc.) available. | |
|
Document Retention Scheduling Automated purging and archiving based on retention policies. |
Document retention and automated archiving/purging supported by policy. | |
|
Contract & Legal Document Management Specialized workflow and security for managing contracts and sensitive legal documents. |
Dedicated legal/contract management routines with security and workflow. |
Governance Workflow Automation
(0 Yes /0 Known /15 Possible features)
|
Workflow Builder Intuitive tool to design and visualize governance workflows. |
. | No information available |
|
Approval Routing Automated routing of documents and requests for required approvals. |
. | No information available |
|
Dynamic Assignment Rules-based task assignment to roles or individuals based on process steps. |
. | No information available |
|
Deadline Management Automated deadline tracking and escalation notifications. |
. | No information available |
|
Escalation Paths Configurable escalation for non-completed actions or exceptions. |
. | No information available |
|
Progress Tracking Dashboards Dashboards for viewing workflow and project status in real-time. |
. | No information available |
|
Automated Alerts & Reminders Notifications for tasks, deadlines, and required approvals. |
. | No information available |
|
Audit Trail of Workflow Steps Complete record of each workflow action and participant. |
. | No information available |
|
Conditional Logic Support for complex routing and conditional steps within governance workflows. |
. | No information available |
|
Integration with External Tools Connect governance workflows with external email, calendar, and communication tools. |
. | No information available |
|
Customizable Forms Ability to design forms for governance processes (e.g., requests, declarations). |
. | No information available |
|
Process Analytics Reporting on workflow bottlenecks, efficiency, and compliance. |
. | No information available |
|
Automated Document Generation Auto-generate documents from workflow actions and data entries. |
. | No information available |
|
Signature Workflow Integration Automate collection of required e-signatures as part of workflow steps. |
. | No information available |
|
Workflow Templates Pre-built templates for common governance and compliance processes. |
. | No information available |
Compliance & Regulatory Management
(15 Yes /15 Known /15 Possible features)
|
Regulatory Calendar System to track filing deadlines and regulatory obligations. |
Regulatory calendar functionality for governance and compliance obligations. | |
|
Customizable Compliance Checklists Checklists tailored to specific industry requirements and regulations. |
Checklists for compliance and governance processes are customizable. | |
|
Automated Compliance Monitoring Continuous monitoring of compliance with built-in alerts for non-compliance. |
Automated compliance monitoring and alerts highlighted as major feature. | |
|
Regulatory Reporting Tools for generating and submitting reports to regulators. |
Regulatory reporting templates, workflow and submission tools included. | |
|
Rule & Policy Mapping Link regulations and policies to related internal processes and controls. |
Rule/policy mapping to processes and controls is supported (process linking). | |
|
Regulatory Change Notifications Alerts for relevant changes in laws, standards, or regulations. |
Automated notifications for regulatory change and legal updates are included. | |
|
Automated Evidence Collection Automatically gather records necessary for demonstrating compliance. |
Evidence collection for compliance reporting and audit trails is automated. | |
|
Compliance Attestation Tracking Track and report on user attestation to key policies or regulatory requirements. |
Attestation tracking and sign-off workflows on compliance controls exist. | |
|
Risk Register Integration Connect compliance issues to an organizational risk register. |
Risk register integrations are supported (risk and compliance module integrations). | |
|
Compliance Analytics Analytics to identify compliance trends, gaps, and risks. |
Compliance analytics: trends, risks, and gap dashboards available. | |
|
Policy Exception Management Workflow for documenting, approving, and tracking policy exceptions. |
Policy exception management workflows and documentation included. | |
|
Audit Trail of Compliance Activities Detailed auditing of all compliance-related actions and changes. |
Audit trail of all compliance-related actions and process events. | |
|
Third-party Compliance Management Extend compliance monitoring and reporting to key vendors and service providers. |
Third-party (vendor, partner) compliance management is a core feature. | |
|
User Certifications and Training Tracking Record staff certifications and required compliance training completions. |
Tracks user certifications/training for compliance as per product documentation. | |
|
Cross-jurisdictional Compliance Support Manage and track requirements across multiple applicable jurisdictions. |
Cross-jurisdiction regulatory compliance features highlighted on product sheet. |
Decision & Action Tracking
(15 Yes /15 Known /15 Possible features)
|
Decision Register Central log of all formal decisions made by boards and committees. |
Decision register/logging for board and committee decisions is included. | |
|
Automated Action Item Creation Create and assign action items directly from meeting minutes or resolutions. |
Action items can be automatically created from meeting minutes/resolutions. | |
|
Action Item Status Tracking Monitor the completion and status of governance-related action items. |
Action item status tracking/dashboards are supported. | |
|
Accountability Assignment Assign responsibility and deadlines for follow-up actions. |
Ability to assign accountability/responsibility for actions. | |
|
Completion Notification Automated notifications when assigned tasks are completed or overdue. |
Completion and overdue notifications for tasks/actions included. | |
|
Evidence Attachment Attach evidence items (documents, links, notes) to decision and action records. |
Evidence (files, links, notes) can be attached to action items/decisions. | |
|
Overdue Actions Dashboard Overview of outstanding or overdue actions by board, committee, or member. |
Overdue actions dashboard is included in board/governance reporting. | |
|
Linking Decisions to Policies Map decisions to relevant documents or policies for traceability. |
Decision-to-policy document linking enabled for traceability. | |
|
Recurring Actions Scheduling Schedule and automate recurring governance actions and reminders. |
Supports recurring actions, reminders, and scheduling. | |
|
Dependency Tracking Manage dependencies between multiple action items or decisions. |
Dependencies between action items/decisions can be managed. | |
|
Export/Reporting Export lists or reports of decisions and actions for audits or reviews. |
Full export/reporting of decision/action lists supported. | |
|
Comment and Discussion Threads Embedded discussion capability for decision and action items. |
Comment/discussion threads on items supported by Board module. | |
|
Task Re-assignment Ability to reassign actions in case of absence or role changes. |
Task/action reassignment supported in role management. | |
|
Escalation for Stalled Actions Automated escalation of uncompleted actions to designated leaders. |
Escalation workflows for stalled and overdue actions are available. | |
|
Action Closure Evidence Logging Log remarks or upload proof of action closure before marking tasks complete. |
Remarks/evidence can be logged as prerequisite for closing actions/tasks. |
User & Access Management
(15 Yes /15 Known /15 Possible features)
|
Single Sign-On (SSO) Support Integration with SSO providers for streamlined, secure login. |
Single Sign-On features and integrations (SAML 2.0, AzureAD) present. | |
|
Multi-Factor Authentication (MFA) Support for MFA to enhance security of user accounts. |
Supports multi-factor authentication via leading ID providers. | |
|
User Provisioning and De-provisioning Automated onboarding and offboarding of users based on roles. |
Automated user provisioning and de-provisioning via enterprise directory integration. | |
|
Role-Based Access Controls Granular permissions management based on organizational and governance roles. |
Role-based access controls are foundational (used throughout platform). | |
|
Delegated User Administration Allow designated personnel to manage users in subgroups or committees. |
Delegated user/group administration supported in user management area. | |
|
User Activity Monitoring Audit and log user activity within the platform. |
Comprehensive user activity logging and monitoring features. | |
|
Group and Committee Memberships Easily manage group affiliations and role memberships. |
Board management includes flexible committee/group membership management. | |
|
Guest/External User Access Secure, time-limited platform access for external advisors, auditors, or consultants. |
Guest external user access via secure, permissioned sessions is supported. | |
|
Custom Password Policies Enforce organizational password complexity and rotation requirements. |
Custom password policy enforcement (length, complexity, rotation) is configurable. | |
|
Account Lockout Policies Security measures for failed login attempts and account lockouts. |
Account lockout security measures supported per security documentation. | |
|
Bulk User Management Support for bulk upload or changes to user permissions and accounts. |
Bulk user create/edit functionality present in admin module. | |
|
Access Request and Approval Workflow Automate and document the approval process for user access changes. |
Automated access request and approval workflows can be configured. | |
|
Session Timeout Configuration Adjustable limits for user session activity and automatic logoff. |
Session timeout and auto-logoff settings adjustable by admin. | |
|
User Directory Synchronization Integration with enterprise directory systems (e.g., Active Directory, LDAP). |
Synchronization with enterprise user directories (AD, LDAP) is supported. | |
|
User Access Review Reporting Generate reports for periodic access reviews and audits. |
Access review/audit reporting tools are built-in. |
Audit & Evidence Management
(15 Yes /15 Known /15 Possible features)
|
Audit Trail Logging Comprehensive logs of all actions, changes, and access events throughout the platform. |
Comprehensive audit logging throughout all platform modules. | |
|
Evidence Repository Central, secure storage for audit evidence (documents, communications, files, etc.). |
Centralized evidence repository (secure file storage) for compliance and audit. | |
|
Audit Query Support Rapid response to audit requests with filtered document and record search. |
Audit query support and advanced filtered search is standard. | |
|
Audit-ready Reports Pre-built report templates for common audit requirements. |
Pre-built and custom audit report templates included for audit cycles. | |
|
Data Export Capabilities Ability to securely export audit logs and supporting documentation. |
Secure export of documentation and logs for audit/evidence purposes. | |
|
Tamper-evident Logging Ensure audit logs cannot be altered without detection. |
Tamper-evident audit logging according to industry security standards (SOC2/ISO 27001 basis). | |
|
Point-in-Time Snapshots Store system state/archive at specific dates for evidence and historical reference. |
Point-in-time snapshot and evidencing supported for historical compliance. | |
|
Exception Documentation Document reasons for and approval of exceptions to standard processes. |
Exception documentation and approval logging is standardized in workflows. | |
|
Link Evidence to Decisions Direct association of evidence files with meeting items, decisions, policies, or actions. |
Every piece of evidence can be linked directly to meeting items and decisions. | |
|
Access-controlled Evidence Sharing Secure, permission-based access for internal or external auditors. |
Access-controlled evidence sharing for auditors and compliance reviews. | |
|
Retention Management Automated application of retention policies to audit evidence and logs. |
Evidence retention management automated per policy/schedule. | |
|
Evidence Version Control Track changes or additions to audit evidence over time. |
Evidence versioning and change tracking provided. | |
|
Audit Issue Tracking Track and manage audit findings, recommendations, and remedial actions. |
Audit issue and remediation tracking covered in audit/issue modules. | |
|
Cross-linking to Policies Link audit evidence and findings directly to governing policy documents. |
Cross-linking of audit evidence and findings to policies/procedures. | |
|
Audit Engagement History Log of all past audit events, responses, and outcomes for reference. |
Full audit engagement history is maintained for reference. |
Reporting & Analytics
(15 Yes /15 Known /15 Possible features)
|
Custom Report Builder Design, save, and schedule custom reports from governance and compliance data. |
Custom report builder for governance and compliance is available. | |
|
Dashboards Configurable, real-time dashboards for monitoring key governance metrics. |
Role-based, configurable dashboards are supported for key metrics. | |
|
Automated Scheduled Reports Auto-generate and distribute reports on a regular schedule. |
Scheduled/automated report generation and distribution is available. | |
|
Export to Multiple Formats Download reports in PDF, Excel, CSV, or other useful formats. |
Reports can be exported in various standard formats (PDF, Excel, CSV). | |
|
Data Visualization Charts, graphs, and visual aids for performance and compliance trends. |
Data visualization via charts, graphs, and other visual report components. | |
|
Report Access Controls Restrict access to sensitive reports based on user roles and permissions. |
Report access control based on roles/permissions available. | |
|
Drill-through Analytics Navigate from summary dashboards to detailed report data. |
Drill-through analytics to access detailed report data in dashboards. | |
|
Filter and Search Capabilities Advanced filter and search on report data. |
Advanced filter/search in reporting is available. | |
|
Automated KPI Monitoring Continuous monitoring of key performance indicators with alerts for threshold breaches. |
Automated KPI monitoring with threshold notifications provided. | |
|
Audit and Compliance Reporting Pre-built templates for regulatory, audit, or compliance reporting. |
Audit and compliance reporting templates part of product offering. | |
|
Historical Data Analysis Compare current and past governance/compliance performance data. |
Historical data analysis available in performance/compliance analytics. | |
|
Integration with BI Tools Connect platform data to external business intelligence tools. |
API integration with external BI/reporting tools documented. | |
|
Scheduled Distribution Lists Auto-email scheduled reports to distribution groups or individuals. |
Configurable scheduled distribution for automatic emailing of reports is available. | |
|
Interactive Data Exploration Users can interact with report visualizations in the browser. |
Interactive data exploration for dashboards and analytics. | |
|
Maturity & Benchmarking Reports Compare governance maturity or compliance benchmarks against peers. |
Benchmarking and maturity reports included for governance self-assessment. |
Integration & Interoperability
(13 Yes /13 Known /15 Possible features)
|
API Availability Availability of well-documented APIs for exchanging data with other systems. |
RESTful APIs for broad integration documented and available. | |
|
Single Sign-On Integration Seamless login integration with enterprise authentication solutions. |
Single sign-on integration is broadly supported. | |
|
Data Import/Export Bulk import/export of data to/from external platforms and legacy systems. |
Bulk import/export capabilities for data migration/processes. | |
|
Integration with Cloud Storage Connect platform to cloud storage services (e.g., SharePoint, Dropbox, Google Drive). |
Cloud storage integrations (SharePoint, OneDrive, Google Drive) available. | |
|
Email System Integration Bi-directional communication with corporate email systems. |
Integration with email systems for notifications and records. | |
|
Calendar Integration Sync platform events with individual or shared calendars in real time. |
Real-time calendar integration included for meetings/events. | |
|
Directory Service Integration Synchronize user accounts and groups with enterprise identity systems. |
Directory service synchronization for user account management available. | |
|
Workflow & Automation Tool Integration Integrate with external workflow automation (e.g., Zapier, Power Automate). |
Integration with external workflow/automation tools such as Zapier and Power Automate available. | |
|
Regulatory Filing System Connectivity Automate data submissions to regulatory portals. |
Product can connect to regulatory filing/portal systems where integration is feasible. | |
|
Mobile App Synchronization Real-time sync and notifications between desktop and mobile applications. |
Mobile app sync ensures instant notifications and updates cross-device. | |
|
Data Export Frequency The maximum number of data exports possible per day. |
No information available | |
|
Supported Integration Endpoints Number of external systems/platforms that can be connected simultaneously. |
No information available | |
|
Webhook Support Real-time external event notification via webhooks. |
Webhook support for external notifications described in integration documentation. | |
|
Custom Integration Toolkit Resources for custom integration development (SDKs, sandboxes). |
Custom integration toolkits (dev guides, SDKs, sandbox) are available. | |
|
Audit Logging of Data Transfers Audit trail for all data exchanged with external systems. |
Audit logs for all data exchanged via APIs/integrations are maintained. |
Security & Data Protection
(14 Yes /14 Known /15 Possible features)
|
Data Encryption In Transit Encryption standards applied to data during transmission. |
Industry-standard TLS encryption for data in transit documented. | |
|
Data Encryption At Rest Encryption of all stored data in databases and backups. |
At-rest encryption documented (AES-256 per security whitepaper). | |
|
Granular Access Permissions Fine-grained access control for sensitive content. |
Granular/fine-grained access permissions applied throughout. | |
|
Data Residency Options Choice of data storage location to comply with national regulations. |
Data residency options (EU, US, etc.) depending on contract/tenant. | |
|
Penetration Testing Regular independent security testing and vulnerability scanning. |
Regular penetration testing mentioned in compliance documentation. | |
|
Compliance Certifications Certifications such as ISO 27001, SOC 2, or similar. |
Platform holds ISO 27001, SOC 2, and other compliance certifications as per website. | |
|
Secure Mobile Access Data protection for mobile users and devices. |
Mobile access security features, including encryption and device controls, are documented. | |
|
Disaster Recovery & Backups Automated backup and recovery policies for all data. |
Automated backups and disaster recovery procedures described. | |
|
Incident Response Procedures Documented and tested plan for managing security incidents. |
Incident response plans are in place and tested as required for certified GRC platforms. | |
|
Real-time Threat Monitoring Continuous monitoring and alerting for security events. |
Continuous real-time threat monitoring provided as part of security offering. | |
|
Customer Security Portal A portal for customers to review security operations and documents. |
Customer portal available for reviewing security status and docs. | |
|
Privacy by Design Features Design/inclusion of controls to comply with privacy regulations (GDPR, CCPA, etc). |
Privacy by design controls and privacy compliance (GDPR, CCPA, etc.). | |
|
Secure File Transfer Methods for securely transferring files to and from the platform. |
Secure file transfer protocols in use for importing/exporting data. | |
|
Time to Restore from Backup Maximum platform recovery time from backup in case of disruption. |
No information available | |
|
Physical Security Controls Safeguards for physical data centers (access control, environmental monitoring, etc). |
Physical data center provider security controls noted (SOC/ISO audit). |
Usability & Support
(14 Yes /14 Known /15 Possible features)
|
Intuitive User Interface User-optimized design supporting quick learning and efficient task completion. |
UI is recognized as user-optimized for GRC/business users, with emphasis on quick incident/report/action management. | |
|
Role-based Dashboards Different dashboards tailored to user roles (trustees, managers, admins, etc). |
Role-based dashboards for instant visibility by user/committee type available. | |
|
Responsive Design Platform adapts to any device (desktop, tablet, mobile). |
Platform is responsive for all device form factors (desktop, tablet, mobile). | |
|
Accessible Design (ADA, WCAG) Accessibility and compatibility for users with disabilities. |
ADA/WCAG accessibility documented on website. | |
|
Customizable Workflows Users can tailor governance workflows to their organizational needs. |
Workflows customizable at client/org level. | |
|
In-app Help and Tutorials Built-in user guides, tooltips, and access to help resources. |
In-app help, tutorials, and onboarding provided. | |
|
Live Chat Support Real-time assistance from support staff. |
Live chat support included for enterprise plans. | |
|
Email and Ticketing Support Support available via email or online ticket submission. |
Support via email and ticketing system is provided. | |
|
Phone Support Hours The number of hours per day phone support is available. |
No information available | |
|
Dedicated Account Manager Access to a named support/contact person for enterprise accounts. |
Dedicated account managers available for enterprise and key accounts. | |
|
Onboarding & Training Services Structured programs for training new users and facilitating rollout. |
Onboarding and training services provided as part of professional services. | |
|
Self-service Knowledge Base Users can search and find solutions to common issues. |
Knowledge base/self-service documentation available. | |
|
Multi-lingual Support Ability to use the platform in multiple languages. |
Platform supports multiple languages for user interface. | |
|
User Communities or Forums Access to peer support through online communities. |
User communities and forums for support exist. | |
|
User Feedback Mechanism In-platform tools for submitting ideas and improvement suggestions. |
User feedback and suggestion tool in-platform. |
This data was generated by an AI system. Please check
with the supplier. More here
While you are talking to them, please let them know that they need to update their entry.