OneTrust acquires Tugboat Logic to automate InfoSec assurance and certification

Information privateness, governance, and compliance platform OneTrust has introduced plans to accumulate Tugboat Logic, a platform that firms use to garner safety certifications akin to ISO 27001. Phrases of the deal weren’t disclosed.

Based in 2016, OneTrust is one of numerous companies focusing on serving to different companies preserve knowledge privateness, each for regulatory compliance and to satisfy clients’ rising expectations that their knowledge can be handled with child gloves. OneTrust presents a self-assessment instrument that companies akin to Allianz, Maersk, and Huawei can use to see how they adjust to GDPR and different authorized frameworks (or fail to), with further instruments akin to “knowledge mapping” that illustrate how knowledge flows by way of a corporation and throughout borders, in addition to myriad companies spanning cookie compliance, consent administration, and breach response.

Gartner predicts that by 2023, knowledge from practically two-thirds of the world’s inhabitants can be coated by native and regional privateness rules — akin to Europe’s GDPR and California’s CCPA. As such, the enterprise governance, threat, and compliance (GRC) market was pegged at $35 billion in 2020.

Automation for the individuals

Whereas OneTrust has some present performance to assist companies after they’re audited for certification, Tugboat Logic is particularly about eradicating friction from the method by automating key steps. The four-year-old VC-backed firm is in the end centered on addressing a expertise hole within the safety and compliance trade.

Utilizing AI and machine studying, Tugboat Logic automates data safety (InfoSec) coverage creation and “audit readiness” so firms can show to clients that they’re critical about knowledge safety. The Tugboat Logic platform features a prebuilt library of 40 insurance policies to take a whole lot of the spadework out of making data safety (InfoSec) insurance policies, and it additionally presents automated safety questionnaire responses to expedite request for proposal (RFP) submissions.

“Any enterprise that makes use of knowledge is now a regulated enterprise, and no matter dimension, these firms are held to the identical threat compliance and certification requirements as subtle packages,” OneTrust CEO Kabir Barday famous in a press launch. “Tugboat Logic simplifies safety assurance and certification automation to assist rising firms simply reveal why they are often trusted and provides a degree of assurance about their safety and compliance posture.”

Above: The Tugboat Logic platform

Attain

OneTrust has been on one thing of an acquisition spree in 2021, bolstering its core providing with third-party risk management platform Shared Assessments; ethics and compliance company Convercent; and automated data-redaction provider DocuVision. These offers have been partially funded by the Atlanta, Georgia-based firm’s latest $510 million money injection, which was spread throughout two rounds of funding beginning final December.

Different notable gamers within the house embody BigID and Didomi, both of which have raised sizable investments in latest months. However by extending its attain into associated knowledge privateness and safety verticals, OneTrust is positioning itself as a extra alluring proposition for firms of all sizes by providing complete instruments and companies. The corporate can cross-sell and upsell to Tugboat Logic customers as their companies develop, providing all method of instruments spanning privateness, ethics and compliance, ESG, third-party threat, knowledge governance, and extra.

OneTrust stated it expects to shut the Tugboat Logic acquisition within the coming weeks.