TrustArc
TrustArc sells privacy compliance software: cookie consent, DSR handling, regulatory research, assessments.
On the record
Checkpoint: India's DPDPA consent-manager registration enforcement begins
The call
TrustArc survives on certification authority and a proprietary regulatory archive while OneTrust outsells it and AI tools quietly absorb the research work both charge for.
TrustArc helps companies manage privacy rules, handle customer data requests, and track cookies on websites. It is hard to replace because it has 28 years of proprietary regulatory knowledge, government-recognized credentials, and locked-in enterprise customers, but AI tools are rapidly automating the core work TrustArc does (like research, document drafting, and cookie sorting), and OneTrust dominates the market with no clear reason why it cannot do the same thing better. The key question is whether TrustArc's new AI research layer stays ahead of commodity AI tools, and whether its new owner Main Capital Partners can grow the business through smart acquisitions before tech giants bundle competing privacy tools into their platforms.
Why
01
AI pressure: Generative AI tools like ChatGPT, Claude, and vertical legal-AI startups (Harvey, Ironclad). LLMs can already draft privacy assessments, triage DSRs, and classify cookies, the exact tasks TrustArc charges for. Could AI do the core job? Only partly.
02
Bigger players: Microsoft Purview, Salesforce, ServiceNow. Platform giants could bundle privacy compliance into suites customers already buy, squeezing standalone vendors like TrustArc. Could a giant copy it? Yes, easily.
03
What protects it. Government-recognized certification authority plus a 50,000+ document regulatory dataset (Nymity Research) that AI models cannot easily replicate.
What would change this call
Main Capital Partners executes bolt-on acquisitions or headcount cuts at TrustArc within 12 months. Would show TrustArc is being run as a PE roll-up asset rather than for independent growth.
Microsoft Purview, Salesforce, or ServiceNow ships a bundled privacy-compliance module. Would show platform giants are commoditizing TrustArc's core workflow-based offering.
OneTrust announces pricing or feature moves aimed at TrustArc's certification/DSR customer base. Would show the incumbent is actively pressuring TrustArc's remaining niche.
Microsoft Purview, Salesforce, or ServiceNow ships a bundled privacy-compliance module. Would show platform giants are commoditizing TrustArc's core workflow-based offering.
OneTrust announces pricing or feature moves aimed at TrustArc's certification/DSR customer base. Would show the incumbent is actively pressuring TrustArc's remaining niche.
Key numbers
- $59.4M estimated ARR, up from $49.4M
- 1,200+ customers across 25+ countries
- Sold to Main Capital Partners, terms undisclosed
Named risks
- OneTrust and platform giants like Microsoft, Salesforce, ServiceNow could bundle equivalent privacy features.
- Core workflows (regulatory research, DSR triage, assessment drafting) are directly AI-commoditizable.
- Main Capital's PE roll-up playbook could squeeze R&D or headcount over 6-12 months.
- Vendor-published AI ROI figures (96%, 93% reductions) are unaudited and could face credibility scrutiny.
- Surging state privacy enforcement raises liability exposure if TrustArc's own consent tools are implicated in customer failures.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| OneTrust | contesting | TrustArc markets itself as #2 OneTrust alternative and runs switcher campaigns, as of Mar 2026 |
| Securiti.ai | gaining on | Securiti.ai acquired by Veeam in 2025, removing it as an independent privacy-tech rival |
| BigID | contesting | Named alongside TrustArc in 2026 buyer's guides for data discovery-heavy privacy tooling |
| Vanta | contesting | Adjacent SOC2/ISO compliance vendor competing for overlapping compliance budget in 2026 |
Questions people ask
- Is TrustArc profitable in 2026?
- TrustArc's own March 2024 press release called 2023 its highest-ever ARR year with ten consecutive quarters of ARR growth and claimed 'historic profitability,' though no dollar figures were disclosed. No newer profitability statement has been published since.
- Who owns TrustArc now?
- Main Capital Partners, a Hague-based private equity firm, acquired TrustArc from Bregal Sagemount on October 20, 2025. Deal terms were undisclosed, and TrustArc's CTO declined to reveal the price when asked by IAPP in May 2026.
- Is OneTrust TrustArc's biggest competitor?
- Yes. TrustArc explicitly markets itself as the number two alternative to category leader OneTrust as of March 2026, actively courting OneTrust switchers, while OneTrust retains a broader GRC and ESG suite and no structural bar to its dominance.
- Could AI replace TrustArc's core product?
- TrustArc's core workflows, regulatory research, DSR triage, assessment drafting, and cookie classification, are the kind of tasks frontier LLMs commoditize. TrustArc responded by launching its Arc AI platform on December 18, 2025, built around a proprietary 50,000-plus item regulatory dataset as a defense.
- How many customers does TrustArc have?
- As of the October 20, 2025 acquisition announcement, TrustArc reported more than 1,200 customers across over 25 countries, with named enterprise logos including HPE, Salesforce, Oracle, Samsung, and Mattel.
- What is TrustArc's Arc AI platform?
- Arc is TrustArc's AI-powered privacy management platform, previewed October 28, 2025 at IAPP PSR and reaching general availability December 18, 2025. It combines an LLM automation layer called Arc Intelligence with Nymity Research, a 50,000-plus item proprietary regulatory database.
Timeline
- 2026-06-30TrustArc shipped default GPC recognition, multilingual DSR intake, and AI law comparison tools
- 2026-06-17TrustArc published 2026 Global Privacy Benchmarks report showing privacy maturity index fell to 53%
- 2026-05-28IAPP reported TrustArc CTO declined to disclose Main Capital acquisition price
- 2026-02-11Disney settled California privacy case for $2.75M over consent failures, cited by TrustArc as enforcement signal
- 2025-12-18TrustArc's Arc AI platform reached general availability with Arc Intelligence and Nymity Research
- 2025-10-28TrustArc previewed Arc platform at IAPP PSR 2025
- 2025-10-20Main Capital Partners acquired TrustArc from Bregal Sagemount, terms undisclosed
- 2024-06TrustArc launched AI Autofill for data mapping, later used 13,500-plus times in 2025
- 2024-03-21TrustArc reported 2023 as its highest-ever ARR year with ten straight quarters of ARR growth
- 2019-07-10Bregal Sagemount took a stake alongside a $70M Series D round
Revision history
21 July 2026
First assessed. Protection under test. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- TrustArc Continues Mission... (2019-07-10)
- Bregal Sagemount Announces Sale of TrustArc to Main Capital Partners (2025-10-20)
- Recent privacy tech vendor acquisitions may signal renewed investor interest (2026-05-28)
- $59.4M Est. ARR, $107M Raised (2024-12-18)
- TrustArc - Overview, News & Similar companies (2026-07-06)
- TrustArc Reports Record Financial Performance (2024-03-21)
- Companies that use Trustarc (2026-07-12)
- Companies using TrustArc in 2026 (2025-08-17)
- TrustArc Accelerates AI Momentum (2025-05-30)
- TrustArc Launches Arc (2025-12-18)
- Q2 2026 Privacy Updates (2026-06-30)
- TrustArc 2026 Global Privacy Benchmarks Report (2026-06-17)