OneTrust Adds Real-Time Monitoring And Enforcement To AI Governance Platform

OneTrust has expanded its governance platform with new capabilities designed to monitor and enforce AI policies in real time, moving beyond what the company describes as static, point-in-time compliance workflows.

The update targets data, risk and AI teams that need to govern AI agents, models and datasets as they run in production environments rather than only during periodic audits or assessments.

What is new

The expansion introduces three core capabilities.

The first is AI Agent Detection and Inventory, which continuously discovers and catalogues AI agents, models and datasets across an organisation’s environment. The system captures ownership, purpose, integrations, data access, lineage and lifecycle changes to maintain a centralised record.

The second is an AI Policy Manager and Policy Library. Organisations can start with prebuilt policies aligned to standards such as the NIST AI Risk Management Framework and the EU AI Act, or define their own. The tool then monitors compliance across models and agents on an ongoing basis.

The third is AI Guardrail Enforcement, which inspects AI systems including generative AI, traditional machine learning models and agents to check guardrail configurations and detect violations. When risks are identified, the system can automatically enforce protections, such as blocking or limiting personal data exposure.

The shift from static to continuous governance

DV Lamba, Chief Product and Technology Officer at OneTrust, framed the update as a response to the growing gap between how quickly AI systems are deployed and how governance is typically applied.

“As AI becomes more embedded across the enterprise, organisations need governance that keeps pace,” Lamba explained. “With these new capabilities, OneTrust advances AI governance from point-in-time compliance to continuous, run-time control across key data and AI platforms.”

“This helps organisations innovate with confidence, move faster, reduce risk and maintain trust as AI scales,” he added.

The underlying argument is that traditional governance approaches, which rely on assessments conducted at fixed intervals, are not well suited to AI systems that evolve continuously in production. As organisations deploy more AI agents and automate more decisions, the window between a governance review and an actual risk event can widen considerably.

Platform integrations

OneTrust noted that AI development is increasingly happening across cloud platforms and no-code agent tooling, making it harder for governance teams to maintain visibility.

To address this, the platform integrates with AI development environments and cloud services including Amazon Bedrock, Amazon SageMaker, Azure Foundry, Azure OpenAI, Databricks Unity Catalog and Google Vertex.

These integrations are intended to give governance teams a way to monitor AI systems where they are actually built and deployed rather than relying on manual reporting from development teams.

How customers are using the platform

OneTrust pointed to several organisations already using its platform for AI governance.

Blackbaud, a provider of software for the social impact sector, uses OneTrust to align its AI practices with the NIST AI Risk Management Framework. The integration with data platforms such as Databricks allows the company to accelerate stakeholder reviews and embed oversight across the AI lifecycle.

Kuehne + Nagel, the transport and logistics firm, uses the platform to manage enterprise-wide AI governance. Employees submit AI use cases through a centralised intake process, with risk assessed and classified in line with the EU AI Act. Governance is embedded into procurement, development and production workflows.

Lumen Technologies uses OneTrust’s automation and centralised controls to scale its privacy operations, accelerate regulatory compliance and reduce risk exposure.

The broader context

The update arrives as regulators in multiple jurisdictions push forward with AI-specific legislation and frameworks. The EU AI Act is already driving compliance activity across organisations operating in Europe, while the NIST AI RMF has become a common reference point in the United States and among multinational firms.

For governance vendors like OneTrust, the commercial opportunity lies in bridging the gap between these regulatory frameworks and the operational reality of AI systems running across complex, multi-cloud environments. The challenge will be proving that real-time governance can scale without creating friction that slows the AI development pipelines it is meant to oversee.

Last Updated on March 24, 2026 by Nick Ross