| Category | Function | Share | Rank | Negative rate | Labels | Quadrant |
|---|---|---|---|---|---|---|
| GRC platforms | Security operations | 0% | 65 of 77 | 37% | 27 | criticized challenger |
| Compliance automation | Security operations | 0% | 39 of 54 | 40% | 10 | criticized challenger |
| Model | First choice | Alternative | Mention | Negative | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 1 | 1 | 2 |
| GPT-5.4 mini | 0 | 1 | 0 | 0 | 1 |
| Gemini 3.5 Flash | 0 | 0 | 1 | 3 | 4 |
| Perplexity Sonar | 0 | 0 | 2 | 1 | 3 |
| Grok 4.1 Fast | 0 | 0 | 1 | 2 | 3 |
| Mistral Small | 0 | 0 | 2 | 1 | 3 |
| DeepSeek V4 Flash | 0 | 2 | 1 | 3 | 6 |
| Llama 4 Maverick | 0 | 0 | 1 | 0 | 1 |
| Qwen 3.7 Flash | 0 | 3 | 2 | 0 | 5 |
| Kimi K2 | 0 | 2 | 0 | 1 | 3 |
| GLM 4.7 FlashX | 0 | 2 | 1 | 1 | 4 |
| MiniMax M2.5 | 0 | 0 | 1 | 1 | 2 |
Verbatim evidence the judge attached to positive labels.
“regulated enterprise needing cross-cutting risk and policy management → Archer, ServiceNow GRC, or OneTrust” DeepSeek V4 Flash · Compliance automation · comparative prompt · alternative
“Strong brand recognition, comprehensive ESG coverage | Companies needing broad compliance coverage” GLM 4.7 FlashX · GRC · direct prompt · alternative
“Tier 2: Enterprise GRC with Mid-Market Reach ... AuditBoard, OneTrust, LogicManager, Diligent” Qwen 3.7 Flash · Compliance automation · scale prompt · alternative
“It is the leader if your primary driver is Data Privacy combined with AI Governance.” Qwen 3.7 Flash · GRC · comparative prompt · alternative
Verbatim evidence attached to negative labels. A warning on a product with few labels is a warning; on a product with many, it is one voice among them.
“OneTrust, MetricStream, ServiceNow GRC ($30K–$150K+/year) are enterprise-tier and will far exceed most limited budgets” DeepSeek V4 Flash · GRC · budget prompt · hard negative
“Verdict: Avoid unless you truly have thousands of employees and a dedicated GRC team.” DeepSeek V4 Flash · Compliance automation · negative prompt · hard negative
“enterprise suites like ServiceNow, OneTrust, or MetricStream ... are out of the question” Gemini 3.5 Flash · GRC · budget prompt · hard negative
“Tier 3: Enterprise Suites (e.g., AuditBoard, OneTrust, Archer) ... usually require a full-time system administrator just to keep them running” Gemini 3.5 Flash · GRC · scale prompt · soft negative
Citations exist only for the models that return a source list, four of the twelve in this edition, so these counts come from 77 of the 103 answers that named OneTrust and are not a share of its labels.
262 of the 262 domain citations in answers naming OneTrust came from somebody else's page.
Pages are listed as the models cited them.
Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when OneTrust's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as OneTrust, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.
It does not get any change to labels, shares or verdicts, any preview, or any say over which quotes appear. A verification link goes to your work email; an address at onetrust.com is approved on the spot, any other address is reviewed by hand.
Your name and company appear on the claimed page, or the company alone if you ask below. A title and a LinkedIn address appear there too if you give them, and are left off if you do not. Your email address is never published.