# OneTrust
URL: https://docs.clearly-ai.com/docs/integrations/governance/onetrust
Description: Connect Clearly AI to OneTrust assets and assessments.
Connect OneTrust so Clearly AI can read OneTrust assets as Project sources and publish Review answers into OneTrust assessments.

## What the integration does [#what-the-integration-does]

Clearly AI can:

* Search and read OneTrust assets.
* Read OneTrust asset fields, linked entities, primary assessments, assessment questions, responses, risks, and attachments.
* Create OneTrust assets.
* List OneTrust assessment templates.
* Create a OneTrust assessment from a Clearly AI Review and attach it to a OneTrust asset.
* Import a OneTrust assessment template generated from a Clearly AI review template.

<Note>
  Create OAuth 2.0 client credentials in OneTrust **Global Settings**. Grant only the scopes Clearly AI needs, such as `INVENTORY_READ`, `INVENTORY_WRITE`, `ASSESSMENT`, `ASSESSMENT_READ`, `ATTACHMENT_READ`, `INTEGRATIONS`, and `USER`. If your setup uses respondent search or asset creation, OneTrust may also require scopes such as `SCIM` for SCIM user lookup and `ORGANIZATION` for external organization lookup.
</Note>

## Connect OneTrust [#connect-onetrust]

1. In Clearly AI, open **Organization settings**, select **Integrations**, then click **Set up** on the OneTrust card.
2. In **Instance URL**, enter your OneTrust URL.
3. Under **Authentication**, enter the **Client ID** and **Client Secret**.
4. Check **I understand** under the shared-credential notice, then click **Add workspace credential**. Clearly AI tests the credential and enables the integration only when the test passes.

Clearly AI requests a token from:

```text
https://<your-onetrust-instance>/api/access/v1/oauth/token
```

OneTrust expects the `client_credentials` grant type for this token request.

## Add a OneTrust asset as a source [#add-a-onetrust-asset-as-a-source]

1. Open a Project.
2. Open **Manage Sources** and click **Search Integrations**.
3. Select **OneTrust**.
4. Search for the asset by name.
5. Select the asset and save the source.

Clearly AI fetches the asset fields and linked entities, then discovers primary assessments attached to the asset. Assessment sources include questions, responses, risks, and attachments when OneTrust returns attachment download information.

If an asset has multiple primary assessments, Clearly AI can include each discovered assessment as source context. Check **Manage Sources** to see the OneTrust asset and assessment sources that were added to the Project.

## Export a Review to OneTrust [#export-a-review-to-onetrust]

Use this when a completed Clearly AI Review should become a OneTrust assessment.

Before exporting, make sure the selected OneTrust template matches the Clearly AI review template. The safest path is to use a OneTrust template generated from the same Clearly AI review template.

<Note>
  If the OneTrust template and Clearly AI review template do not match, the export can fail or leave answers unmatched. Clearly AI matches Review answers to OneTrust questions by question text and reports how many answers were matched or unmatched after export.
</Note>

1. Open the completed Review.
2. Click **Export to OneTrust**.
3. Select a OneTrust template.
4. Select the respondent.
5. Select an existing asset, or choose **Create new asset**.
6. Click **Publish to OneTrust**.

Clearly AI creates a OneTrust assessment named `{Review Template name} - {Project name}`, attaches it to the selected asset, and submits Review answers to matching OneTrust questions. If you choose **Create new asset**, Clearly AI creates the OneTrust asset first, then creates the assessment on that new asset.

The respondent must be a OneTrust user with an email address matching the selected Clearly AI user.

If the expected template is missing, contact Clearly AI support. OneTrust's template import API creates templates in Draft status, so publication may require a manual review step in OneTrust.

## Export boundaries [#export-boundaries]

The OneTrust export creates an assessment and submits matched Review answers. It is not a general OneTrust asset-metadata sync.

The export does not update arbitrary OneTrust asset fields such as launch date, lead volume, data subject locations, processing activities, ROPA fields, or owner assignments. If you need that information captured by the export, include it as questions in the selected assessment template.

## Use OneTrust in Workflows [#use-onetrust-in-workflows]

OneTrust Workflow support includes:

* **Filter: Project Has OneTrust Asset Source**: continues only when the Project has a OneTrust asset source. If no OneTrust asset source is present, the workflow branch stops.
* **Attach Review to OneTrust Asset**: creates a OneTrust assessment from a Clearly AI Review, using the selected OneTrust asset, OneTrust template, and respondent.

## FAQs [#faqs]

<Accordions>
  <Accordion title="Why does the connection test fail?">
    Confirm the instance URL is correct and the client credentials can obtain a OneTrust access token using the `client_credentials` grant type.
  </Accordion>

  <Accordion title="Why don't assets appear?">
    Confirm the OneTrust credentials include inventory read access and can list inventory assets in OneTrust.
  </Accordion>

  <Accordion title="Why do several assessments appear for one asset?">
    Clearly AI discovers primary assessments attached to the OneTrust asset. If the asset has multiple primary assessments, they can be added as separate Project sources.
  </Accordion>

  <Accordion title="Why are some answers unmatched after export?">
    The Clearly AI review template and OneTrust template questions do not fully align, or a selected answer does not match the options on the OneTrust question. Use a OneTrust template generated from the same Clearly AI review template when possible.
  </Accordion>

  <Accordion title="Why is the template missing from the export modal?">
    Confirm the template is published and visible to the integration credentials. If the template was imported from Clearly AI, it may still be in Draft status in OneTrust.
  </Accordion>

  <Accordion title="Why does respondent lookup fail?">
    The selected Clearly AI user must also exist as a OneTrust user with the same email address. If user search is unavailable, confirm the OneTrust credentials can call the SCIM user APIs.
  </Accordion>

  <Accordion title="Why is the wrong asset selected by default?">
    If the Project already has a OneTrust asset source, Clearly AI uses that asset as the default export target. Choose a different asset in the export modal if needed.
  </Accordion>

  <Accordion title="Will export update OneTrust asset metadata?">
    No. Export creates a OneTrust assessment and submits matched Review answers. If you need asset metadata captured by the export, include it as questions in the selected OneTrust assessment template.
  </Accordion>
</Accordions>

## Related [#related]

* [Reviews](https://docs.clearly-ai.com/docs/reviews)
* [Workflows](https://docs.clearly-ai.com/docs/workflows)
* [Integrations](https://docs.clearly-ai.com/docs/integrations)