Osano makes data privacy software that helps organisations meet privacy laws without building a large in-house privacy team. Its platform gives privacy, legal and marketing teams “one system of record” for what personal data the business holds, who can access it and what customers have agreed to.
It is built for companies that operate across many jurisdictions, supporting compliance with more than 95 privacy laws in over 50 countries, including GDPR and CPRA/CCPA.
At A Glance
| Vendor | Osano |
|---|---|
| Category | Privacy & Decentralised Identity |
| Deployment | SaaS privacy platform |
| Agentic AI | AI Assistant with cited answers, AI-suggested cookie categories |
| Certifications | Certified B Corporation, SOC 2 |
| Customers | Lattice, FICO, Fender, AMC Theatres, New Relic |
| Founded | 2018 |
| Market classification | Privacy & Decentralised Identity |
What Osano Does
Privacy compliance touches many parts of a business: the cookie banner on every website, the forms where customers set preferences, the requests people send asking what data is held about them, and the record of which systems and vendors process personal data. Handled separately, each of these ends up in its own tool or spreadsheet. Osano links these tasks so that work in one area feeds the others. A data map built once drives the record of processing, speeds up subject access requests and informs vendor risk reviews and impact assessments.
Products
Cookie Consent
Cookie Consent gives website owners consent banners that adapt to the visitor’s jurisdiction, so the right rules apply in each country. It supports Google Consent Mode v2 for advertising consent and uses AI to suggest how cookies should be categorised.
Unified Consent & Preference Hub
The Preference Hub solves the problem of consent scattered across different channels. It collects consent and preferences from multiple touchpoints, including those that have nothing to do with cookies, such as marketing preferences, and keeps them in one place.
Subject Rights Management
Subject Rights Management handles data subject access requests (DSARs) through centralised, automated workflows. Because it draws on Data Mapping, finding a person’s data across systems during a request can be automated rather than chased by email.
Data Mapping
Data Mapping finds and documents where personal and sensitive data lives across the business, a task that is often kept in spreadsheets.
- An interactive map of data stores, data flows and access, with zoom and drill-down
- Classification of personal data “across structured and unstructured sources”
- Scoring of each system by how likely it is to hold sensitive data, vendor access and compliance risk
- Automatic generation of a record of processing activities (RoPA)
- Import from spreadsheets or from an existing data mapping tool
Vendor Privacy Risk Management
Vendor Privacy Risk Management helps privacy teams judge the third parties they share data with. Workflows are backed by privacy scores for more than 11,000 companies, and a Vendor Discovery feature finds vendors that are already in use.
Assessments
Assessments provides pre-built templates based on ISO and NIST, or custom templates, for privacy assessments and DPIAs, and automates the back-and-forth with data owners.
Compliance Check And TrustHub
Compliance Check reviews a website for Global Privacy Control (GPC) signals, dark patterns and enforcement risk. TrustHub publishes an organisation’s trust and privacy information in one place, and Privacy Templates give teams starting points for policies and notices.
AI Assistant
The Osano AI Assistant offers “instant, cited answers to privacy questions, with a human expert one click away.” Users ask a question and get an answer that cites the law it relies on, with the option to hand the question to a person on the privacy team. Answers are grounded in what each regulation requires, and the privacy team tracks changes in the law.
How It Works
Osano is delivered as a SaaS platform. Services sit alongside the software, including a GDPR Representative for the EU and UK, regulatory guidance, access to the Osano privacy team and audit defence support.
Discovery. Data Mapping connects to single sign-on and other umbrella sources to find the data stores in use, and a library of pre-built connectors auto-discovers further systems. Proprietary systems connect through a RESTful API. Discovered systems feed one interactive map, which RoPA generation, vendor risk workflows, DPIAs and subject rights requests then draw on.
Company Background
| Founded | October 2018, by Arlo Gilbert and Scott Hertel. |
|---|---|
| Headquarters | Austin, Texas. |
| Leadership | Bobby Jaffari, CEO. |
| Funding | $25 million Series B led by Baird Capital, announced on 10 August 2023. |
| Acquisitions | WireWheel, a privacy programme management vendor focused on large enterprises, acquired in December 2023. |
| Scale | More than 40,000 websites run Osano, serving a reported 2 billion consents a month. |
| Corporate status | Certified B Corporation and Public Benefit Corporation. |
Note: This overview is compiled from Osano’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.