[Skip to main content](/content/news/onetrust-achieves-hitrust-risk-based-r2-certification/#main-content/index.html)

OneTrust Named a Visionary in the 2026 Gartner® Magic Quadrant™ for AI Governance Platforms

[Download the report](/content/resources/gartner-magic-quadrant-for-ai-governance-platforms-2026-report/index.html)

On-demand webinar coming soon...

* * *

On-demand webinar coming soon...

## Blog

# OneTrust Achieves HITRUST Risk-based, (r2) Certification

OneTrust secures HITRUST r2 Certification. Learn how we’re helping customers stay secure, compliant, and confident

June 26, 2025

* * *

We’re excited to share that the OneTrust platform has attained the HITRUST Risk-based r2 Certification — one of the most rigorous and widely recognized certifications for information security and privacy.

Earning HITRUST r2 Certification is one step in our ongoing efforts to deliver trusted solutions. This milestone reflects our commitment to helping our customers use data and AI responsibly by ensuring privacy and governance, managing risk, and meeting today’s complex regulatory requirements with confidence.

The certification applies to the OneTrust platform hosted across Microsoft Azure regions globally, including North America, Europe, Asia Pacific, the Middle East, and South America.

“Achievement of a HITRUST r2 Certification is an assurance that OneTrust takes compliance and information risk management seriously.”

\- Vincent Bennekers, Vice President, Quality at HITRUST

## Why HITRUST

The HITRUST r2 Certification is widely considered the gold standard for validating an organization’s security and privacy controls. It combines key regulatory frameworks, including HIPAA, NIST, and ISO, into a single, certifiable framework that supports strong governance and simplifies compliance across industries.

While certification is particularly important in healthcare, its benefits extend to organizations in financial services, insurance, retail, technology, and the public sector — anywhere that the secure handling of sensitive information is a top priority.

To achieve certification, OneTrust completed a third-party validated assessment through the HITRUST Assurance Program. This process included a comprehensive review of our platform’s controls, policies, and procedures, verifying that OneTrust meets the stringent requirements outlined in the HITRUST CSF.

“Without consistency, transparency, and reliability, an information security assessment can’t provide the requisite level of assurances needed to make important business decisions. That’s why we focus on producing the highest quality reports available,” said Vincent Bennekers, Vice President, Quality at HITRUST. “Achievement of a HITRUST r2 Certification is an assurance that OneTrust takes compliance and information risk management seriously.”

“Our customers need confidence that their data is protected and their compliance obligations are supported,” said Adrienne Canter, Senior Director, GRC & Data Protection, OneTrust. “HITRUST r2 Certification reinforces our focus on helping organizations reduce risk, simplify compliance, and build trust at scale.”

"HITRUST r2 Certification reinforces our focus on helping organizations reduce risk, simplify compliance, and build trust at scale."

–Adrienne Canter, Senior Director, GRC & Data Protection, OneTrust

## What This Means for Our Customers

For OneTrust customers, this certification offers meaningful assurance and measurable value:

- OneTrust’s security and privacy controls are independently validated against industry-recognized benchmarks

- The platform supports compliance with HIPAA, NIST, GDPR, and other key regulatory frameworks

- Customers benefit from enhanced risk mitigation and stronger data protection

- Vendor risk management and compliance assessments are simplified

- Healthcare, public sector, and other regulated organizations can rely on a partner that meets industry expectations for high-trust environments

Learn more about the standards OneTrust holds itself to: [onetrust.com/trust](/content/trust/ "https://www.onetrust.com/trust/"/index.html)

* * *