OneTrust Questionnaire
Connect OneTrust Questionnaire to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Record your OneTrust Questionnaire connection as vendor procurement evidence. Automated collection is not available for this provider yet.
| Category | Vendor Procurement |
| Connect with | API token |
| What a connection produces | Connection record |
Connect with an API token
-
In OneTrust Questionnaire:
- In OneTrust, go to Global Settings › Access Management › Client Credentials.
- On the Client Credentials tab (or the API Keys tab for an OAuth 2.0 API key), create a credential and select only the read scopes your questionnaire module needs.
- Copy the credential and paste it into Safeguard. For client credentials, generate the access token in OneTrust or request one from the POST /v1/oauth/token endpoint.
Where to find the other values:
- Base URL (optional): The OneTrust environment URL where your account is hosted, the address you sign in to: for example app.onetrust.com, app-eu.onetrust.com, app-uk.onetrust.com, app-de.onetrust.com, app-ca.onetrust.com, app-au.onetrust.com, app-apac.onetrust.com, app-jp.onetrust.com or app-in.onetrust.com, or yourcompany.my.onetrust.com for a dedicated instance.
OneTrust Questionnaire's public documentation does not cover every step.
Record-only connector. OneTrust's developer quick start gives the menu path and says scopes must be chosen when creating a client credential or API key, but the scope names for questionnaire or assessment data, button labels, token lifetime and one-time display are in the 'Managing OAuth 2.0 Client Credentials' and 'Managing OAuth 2.0 API Keys' support articles on my.onetrust.com, which were not fetched. The scope list is at developer.onetrust.com/onetrust/reference/oauth-20-scopes (not fetched in this pass).
Source: developer.onetrust.com, developer.onetrust.com, checked 2026-10-07.
-
On Compliance › Connectors, open OneTrust Questionnaire, click Connect, choose API token and fill in:
Field What to enter API token / Personal access token Required. Stored encrypted and never shown again. Base URL (optional) — Account / Org / Workspace (optional) — -
Click Connect with token.
Frameworks
No automated compliance test reads OneTrust Questionnaire yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.
Related
- Vendor Procurement connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks