Is OneTrust profitable in 2026?

OneTrust said in May 2024 it expected to surpass $500M in ARR that year while maintaining positive free cash flow. Third-party estimates put 2025 revenue near $550M, up from about $500M in 2024, suggesting continued positive cash generation into 2026.

OneTrust is privately held and venture/growth-equity backed, last valued around $4.5B-$5.1B depending on source. As of November 2025 it was reportedly in active talks to sell to private equity in a deal potentially exceeding $10 billion, though no deal had closed as of early 2026.

Is OneTrust laying off workers in 2026?

OneTrust cut about 100-120 employees in March 2026 as part of 'operational optimization,' following a much larger cut of roughly 950 employees (25% of staff) in June 2022. Headcount as of 2025-2026 sits around 2,300-2,600, roughly flat.

Could AI replace OneTrust's software?

OneTrust's core workflows like DSAR fulfillment and privacy assessments are exactly what agentic AI automates, and rivals like Vanta and TrustArc's Arc ship similar AI agents. OneTrust is racing to own that automation itself via its own 'privacy and risk agents,' launched through 2025.

Who is OneTrust's biggest competitor?

Vanta and Drata explicitly market as OneTrust alternatives and are taking SMB/mid-market share, especially after OneTrust raised its pricing floor to $10,000/year in Q2 2026. TrustArc, relaunched as 'Arc' in December 2025 with an AI layer, also directly competes.

What is OneTrust's market share in privacy software?

Independent industry analysis credited OneTrust with roughly 29.7% market share in privacy management software as of 2026, more than double its nearest competitor, per Contrary Research citing IDC data.

Cybersecurity companies · acquisition pending · United States

OneTrust

onetrust.com ↗

OneTrust sells software that helps companies track privacy, data, and AI compliance rules.

Protection under test

Assessed 21 July 2026 · Evidence as of 21 July 2026

Something worth protecting exists and is being tested right now.

On the recordSince 21 July 2026 · Checkable from H1 2026 · Every call on the record Checkpoint: Resolution of reported $10B+ private equity buyout talks

The call

The Fortune 100 core looks stable for now, but the mid-market edge is bleeding to cheaper AI-native rivals while a new CEO and a possible $10B sale add uncertainty on top.

OneTrust makes software that helps large companies manage privacy rules and security compliance. The company is hard to replace at Fortune 100 firms because its software is deeply woven into their workflows, and it has a unique database of global regulations that took years to build. However, newer AI-powered competitors like Vanta and Drata are winning over smaller and mid-size companies by automating the same work faster and cheaper. The one thing that matters most: whether OneTrust's biggest Fortune 100 customers stay loyal as the company raises prices and these cheaper rivals get better, plus whether the company's planned buyout by a private equity firm actually closes without major problems or job cuts that scare away those big customers.

Why

AI pressure: Vanta, Drata, TrustArc/Arc. AI-native rivals ship cheaper, faster compliance automation and are pulling in the small and mid-size customers OneTrust just priced out. Could AI do the core job? Only partly.

Bigger players: Microsoft. Microsoft currently partners with OneTrust on privacy tooling but could build native AI-governance features into its own cloud stack. Could a giant copy it? Probably.

What protects it. Deep workflow lock-in and a proprietary regulatory database keep 75% of Fortune 100 customers tied in.

What would change this call

Vanta or Drata announce two or more Fortune 100 wins named as OneTrust displacements. Would show AI-native rivals breaching OneTrust's enterprise stronghold, not just SMB tier.
OneTrust's enterprise net revenue retention reported below 115% through 2026. Would show core Fortune 100 customer base is eroding, not just the abandoned SMB tier.
Reported PE buyout (~$10B+) closes or collapses in 2026. Would show whether investors value OneTrust's moat as intact or discounted.

Key numbers

~29.7% market share, 2x nearest rival (2026)
$500M+ ARR, positive free cash flow (2025-12)
14,000+ customers, 75% of Fortune 100 (2025-05)

Named risks

Pending private equity buyout uncertainty could result in equity haircut or ownership disruption. Severity: high
New CEO John Heyman (since Feb 2026) untested on strategy execution and pricing backlash. Severity: medium
Q2 2026 $10k pricing floor and killed Pro tier driving SMB/mid-market churn to AI-native rivals. Severity: medium
Core privacy workflows (DSAR, assessments) increasingly commoditized by agentic AI from rivals. Severity: medium
Small March 2026 layoff of 100-120 staff may presage further restructuring tied to PE process. Severity: low

Rivals, as read in July 2026

Rival	Direction	Evidence
Vanta	gaining on	Markets explicitly as OneTrust alternative, taking SMB share after 2026-Q2 $10k pricing floor
Drata	gaining on	Competes for SOC 2/ISO 27001 budget, marketed as OneTrust alternative as of 2026-05
TrustArc/Arc	contesting	Relaunched as Arc in Dec 2025 with AI layer, self-styled '#1 OneTrust competitor' 2026-03
Securiti AI	contesting	Acquired by Veeam for $1.73B, deal expected to close Q4 2025
Osano	gaining on	Acquired Wirewheel and positioned to absorb SMB customers post pricing-floor hike, 2026

Questions people ask

Is OneTrust profitable in 2026?: OneTrust said in May 2024 it expected to surpass $500M in ARR that year while maintaining positive free cash flow. Third-party estimates put 2025 revenue near $550M, up from about $500M in 2024, suggesting continued positive cash generation into 2026.
Who owns OneTrust?: OneTrust is privately held and venture/growth-equity backed, last valued around $4.5B-$5.1B depending on source. As of November 2025 it was reportedly in active talks to sell to private equity in a deal potentially exceeding $10 billion, though no deal had closed as of early 2026.
Is OneTrust laying off workers in 2026?: OneTrust cut about 100-120 employees in March 2026 as part of 'operational optimization,' following a much larger cut of roughly 950 employees (25% of staff) in June 2022. Headcount as of 2025-2026 sits around 2,300-2,600, roughly flat.
Could AI replace OneTrust's software?: OneTrust's core workflows like DSAR fulfillment and privacy assessments are exactly what agentic AI automates, and rivals like Vanta and TrustArc's Arc ship similar AI agents. OneTrust is racing to own that automation itself via its own 'privacy and risk agents,' launched through 2025.
Who is OneTrust's biggest competitor?: Vanta and Drata explicitly market as OneTrust alternatives and are taking SMB/mid-market share, especially after OneTrust raised its pricing floor to $10,000/year in Q2 2026. TrustArc, relaunched as 'Arc' in December 2025 with an AI layer, also directly competes.
What is OneTrust's market share in privacy software?: Independent industry analysis credited OneTrust with roughly 29.7% market share in privacy management software as of 2026, more than double its nearest competitor, per Contrary Research citing IDC data.

Timeline

2026-03Raised pricing floor to $10,000/year minimum, sunset OneTrust Pro tier, rebranded as AI-Ready Governance Platform
2026-03Reduced workforce by roughly 100-120 employees in operational optimization
2026-02Founder CEO Kabir Barday stepped down; John Heyman became CEO
2025-11Named Visionary in Gartner's inaugural Magic Quadrant for AI Governance Platforms
2025-11Reported in active talks to sell to private equity in deal potentially exceeding $10 billion
2025-11Detailed Privacy Breach Response Agent built with Microsoft Security Copilot
2025-05Appointed Digvijay Lamba (ex-Alteryx) as CTO
2024-12Divested Ethics & Compliance business (Convercent) to EQS Group
2023-07Raised $150M at $4.5B valuation, a down round from $5.3B in 2021
2022-06Laid off approximately 950 employees, 25% of workforce

Revision history

21 July 2026

First assessed. Protection under test. The text above is fixed as of this date and is not edited afterwards.

In the same band

Sangfor Technologies Beijing Topsec Technology SecureMetric