Menu
OneTrust Certification Automation
OneTrust Certification Automation is the former Tugboat Logic module. Renewals ended 31 August 2026; customers are directed to Tech Risk & Compliance, a separate product. Its evidence-collection and auditor-collaboration features belong to the retired module.
OneTrust ended renewals for Certification Automation (Tugboat Logic) on 31 August 2026. Its retirement FAQ says new Certification Automation purchases are not offered. Existing customers keep access through their current term, then have up to 60 days to extract data; standard support lasts through the term or 31 August 2027, whichever comes first. OneTrust directs remaining customers to Tech Risk & Compliance. The UK G-Cloud 14 catalogue listed this module separately on 29 September 2026; that row is not a Tech Risk & Compliance price. OneTrust retirement FAQ
Best for: Existing Certification Automation customers planning their remaining access and migration to OneTrust Tech Risk & Compliance.Watch for: New Certification Automation purchases are unavailable, according to the OneTrust retirement FAQ, and renewals ended 31 August 2026. The older licence price on the UK G-Cloud 14 catalogue (29 September 2026) is historical, not a current offer. Confirm migration scope with OneTrust. Read our OneTrust Certification Automation review →
AI and MCP
MCP server: No official server for compliance data documented. Checked 12 Oct 2026.
What does the UK catalogue list for Certification Automation?
On 29 September 2026 the UK G-Cloud 14 catalogue listed Certification Automation at £36,180 a licence a year, including a 14-day trial, through reseller Oyster IMS, with call-offs open until 28 October 2026. That figure is not a Tech Risk & Compliance price. The OneTrust retirement FAQ says new purchases of this module are not offered and that renewals ended 31 August 2026. A catalogue row does not confirm that OneTrust will accept a new order. Read the OneTrust Certification Automation pricing guide.
Price source: view reported prices · checked 2026-09-29
G-Cloud 14 call-off contracts were open until 28 October 2026. A catalogue entry that stays online does not override OneTrust's statement that new Certification Automation purchases are not offered. G-Cloud 14 agreement
Ask for the first-year total, renewal cap, implementation charge, required add-ons, and separate audit fee in writing.
What does OneTrust Certification Automation do?
OneTrust was founded in 2016. OneTrust is led by John Heyman. OneTrust is headquartered in Atlanta, Georgia, United States.
These claims describe Certification Automation, the former Tugboat Logic module. They do not describe a current Tech Risk & Compliance offer.
Evidence collection
Available · G-Cloud feature list: 'Automated evidence collection'; the March 2023 launch press release claims up to 50% of evidence collection automated.
Auditor workspace
Available · G-Cloud feature list: 'Audits and auditor collaboration.'
Trust center
Partial · G-Cloud lists a 'customer portal to share security reports,' which resembles a trust page; the sources do not confirm a full public-facing trust center product under this module.
Multi-framework support
Partial · Vendor describes a 'proprietary shared evidence framework' that lets teams 'test once, comply many' across more than 29 frameworks, which describes a shared, crosswalked control model rather than fully separate native control sets per framework.
Funding history
OneTrust's last confirmed round was $150 million led by Generation Investment Management in July 2023, valuing the company at $4.5 billion (down from a $5.1 billion valuation in 2021). As of mid-2026, Reuters and other outlets report OneTrust in exploratory private-equity buyout talks (Thoma Bravo and Vista Equity Partners named as possible bidders), but no deal has closed or been confirmed.
How does OneTrust Certification Automation compare with Optro, Anecdotes, Onspring?
| Attribute | OneTrust Certification AutomationThis profile | Comp AI | Iru | Optro | Anecdotes | Onspring |
|---|---|---|---|---|---|---|
| Best for | Existing Certification Automation customers planning export and TRC migration | Engineering-led teams that value inspectable code or the option to self-host | Teams seeking SOC 2 automation and device management in one platform | Enterprise multi-framework compliance tied directly to controls, audit and IT risk | Multi-framework security and GRC teams with a dedicated compliance function and an enterprise budget | Configurable multi-framework compliance and audit programs that need no-code workflows and evidence reuse |
| Observed price | £36,180 / year | Not published | Up to $15,000 / year for Compliance Automation | Not published | $16,000–$98,260 / year | Not published |
| G2 rating | Not published | 4.7/5 (73 reviews) | 4.7/5 (853 reviews) | 4.6/5 (1,624 reviews) | 4.6/5 (60 reviews) | 4.7/5 (80 reviews) |
| Integrations | Not published | 590+ published | Not published | 200+ published | 230+ published | Not published |
| Frameworks | 2 listed | 11 listed | 11 listed | 20 listed | 10 listed | 2 listed |
| Onboarding | Not published | guided | guided | guided | guided | guided |
| Auditors here | 2 | 4 | Not published | 1 | 1 | Not published |
| Trust center | Partial | Listed | Listed | Not published | Listed | Not published |
Which frameworks does OneTrust Certification Automation support?
- SOC 2OneTrust Certification Automation says
- ISO 27001OneTrust Certification Automation says
Some frameworks use mapped controls rather than native workflows. Confirm the tests and evidence required for each program.
Who does what in a SOC 2 with OneTrust Certification Automation?
OneTrust Certification Automation
Organizes the listed control, evidence, and audit workflows.
Your team
Owns policies, control decisions, exceptions, and approval of shared evidence.
The CPA firm
Sets audit scope, tests controls independently, and issues the SOC 2 report.
Certification Automation is a self-service compliance-management tool; OneTrust does not issue the buyer's SOC 2 report. The buyer's own licensed CPA firm performs the actual audit and uses the product's auditor-collaboration workspace to request and review evidence.
Which auditors work with OneTrust Certification Automation?
2 licensed audit firms in our directory list OneTrust Certification Automation experience. Listing experience is not an endorsement.
| Firm | Licence | Peer review |
|---|---|---|
| ThoropassPublished Type 2 fee: $12,000–$85,000 | Licensed CPA | Pass |
| Atom Assurances LLC | Licensed CPA | Enrolled, no completed review shown |
Questions for your OneTrust migration
- What access remains under our current Certification Automation subscription?
- Which auditor users, roles, SSO settings, logs, comments, and credentials need manual export or recreation in Tech Risk & Compliance?
- How will legacy audits and findings be exported or recreated?
- What are the written Tech Risk & Compliance scope, migration services, contract terms, and price?
OneTrust Certification Automation FAQ
Where is OneTrust based?
OneTrust is headquartered in Atlanta, Georgia, United States.
Who runs OneTrust?
John Heyman is the CEO of OneTrust.
Who founded OneTrust?
Kabir Barday founded OneTrust in 2016.
Does OneTrust Certification Automation include the SOC 2 audit?
Certification Automation is a self-service compliance-management tool; OneTrust does not issue the buyer's SOC 2 report. The buyer's own licensed CPA firm performs the actual audit and uses the product's auditor-collaboration workspace to request and review evidence. A licensed CPA firm issues the SOC 2 report.
Is OneTrust Certification Automation itself SOC 2 compliant?
Supporting a buyer's SOC 2 program does not establish that OneTrust Certification Automation holds a current SOC 2 report. Ask for the vendor's current report during security review.
Similar platforms
OneTrust Certification Automation on SOC2Auditors
Sources 16 records · last read 2026-10-27
These links show what we checked and when.
| Establishes | Source | Retrieved |
|---|---|---|
| Company funding article states its 2016 founding. | OneTrust Press | 2026-09-29 |
| Current locations page identifies Atlanta as US headquarters. | OneTrust Vendor docs | 2026-09-29 |
| Current company page identifies CEO John Heyman and founder Kabir Barday. | OneTrust Vendor docs | 2026-09-29 |
| Company page lists privately held status. | OneTrust on LinkedIn Marketplace | 2026-09-29 |
| July 2023 financing announcement gives $150M round, more than $1B cumulative and $4.5B valuation. | OneTrust Press | 2026-09-29 |
| Official press release confirming OneTrust's acquisition of Tugboat Logic, signed September 2021, expected to close that month; includes CEO quotes from both companies and pre-acquisition Tugboat Logic scale (800 customers, 140 employees). | OneTrust Press | 2026-07-24 |
| Official March 2023 launch of the Certification Automation name, describing 29 frameworks and over 100 integrations. | PR Newswire / OneTrust Press | 2026-07-24 |
| Independent trade press coverage of the Certification Automation launch, confirming it sits inside 'the OneTrust GRC and Security Assurance Cloud' and citing the 29-framework, 100+ integration figures. | Help Net Security Press | 2026-07-24 |
| Live UK G-Cloud catalogue page for OneTrust Certification Automation, re-read 2026-09-29: £36,180 a licence a year and a 14-day trial, listed by reseller Oyster IMS on G-Cloud 14. | UK Government Digital Marketplace (G-Cloud 14), listed by reseller Oyster IMS Marketplace | 2026-09-29 |
| States the Tugboat Logic name change to Certification Automation took effect December 13, 2022. | OneTrust (myOneTrust knowledge base) Vendor docs | 2026-07-24 |
| OneTrust raised $150 million in July 2023 at a $4.5 billion valuation, a roughly 12% step down from its prior $5.1 billion valuation. | Crunchbase News Press | 2026-07-24 |
| G2 tracks OneTrust's certification/GRC capability under the product name 'OneTrust Tech Risk & Compliance' (also called 'OneTrust GRC and Security Assurance Cloud' in reviewer text), not as a separate 'Certification Automation' listing; a current star rating scoped to this module was not independently verified. | G2 Review platform | 2026-07-24 |
| Tugboat Logic / Certification Automation retirement FAQ: end of renewals 2026-08-31; end of standard support 2027-08-31; after renewal ends, customers can extract data for up to 60 days. | OneTrust (myOneTrust) Vendor docs | 2026-09-08 |
| Certification Automation Migration Guide: remaining customers are migrated to Tech Risk & Compliance (TRC) on the OneTrust Platform. | OneTrust (myOneTrust) Vendor docs | 2026-09-08 |
| G-Cloud 14 (RM1557.14) runs until 28 October 2026 and still allows direct-award call-offs. | Crown Commercial Service / Government Commercial Agency Marketplace | 2026-09-29 |
| The successor Tech Risk & Compliance page cites 200+ pre-built integrations and a 500+ connector gallery, both platform-wide figures. No OneTrust page states an integration count for Certification Automation; /products/certification-automation now serves a "Compliance Automation" page with no count. | Vendor (OneTrust) Vendor docs | 2026-10-27 |
Not yet confirmed
- Customer count · last checked 2026-09-24
- G2 rating · last checked 2026-07-24