• ASSET LIST
  • CONSENT MAP
  • RISK REPORT
  • HUMAN REVIEW

How to query data inventory with your AI

Connect OneTrust to your AI client once. After that, you can use natural language to interrogate your data map and find sensitive data locations.

Ask AI about this page

Short answer

How can I find sensitive data in my OneTrust inventory using AI?

Your AI uses the OneTrust MCP to pull your asset list and consent purposes. You can then ask it to cross-reference these to pinpoint exactly which databases or systems are processing sensitive information. You'll get a filtered view of your data landscape without manual searching.

Where your findings land.

Data inventory insights

The AI processes your OneTrust data to produce these specific outputs.

ASSET LIST

Cleaned asset inventory

The AI pulls your full list of assets. You get a clear view of every system currently tracked in your data map.

CONSENT MAP

Purpose alignment

The AI checks how data is being used against your defined consent purposes. This shows if data usage matches your legal basis.

RISK REPORT

Sensitive data hotspots

The AI identifies specific databases or systems that hold sensitive personal data. This highlights where your highest privacy risks live.

HUMAN REVIEW

Manual verification needed

The AI flags discrepancies or missing data points. You decide if the identified risks require immediate remediation or policy changes.

The workflow

What your AI does when the request arrives.

The AI acts as a bridge between your chat interface and your OneTrust environment.

  1. Fetch assets

    The AI pulls the current list of all assets recorded in your OneTrust inventory.

    onetrust_list_assets

  2. Retrieve purposes

    The AI pulls the specific consent purposes you have defined for data processing.

    onetrust_list_consent_purposes

  3. Cross-reference data

    The AI compares asset attributes against your consent purposes to find sensitive data flows.

    onetrust_list_assetsonetrust_list_consent_purposes

  4. Summarize findings

    The AI presents a plain English summary of which systems are processing sensitive data.

    onetrust_list_assets

Try it

Copy these to start.

Use these prompts to begin your investigation.

Starting points

These are basic starters. Swap out the system names or data types to match your specific environment.

OneTrust Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_QyXYX8Uk9tWgyP2uTUFoAEIPmCJb73Dix0eWInrc/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — OneTrust capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "onetrust-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_QyXYX8Uk9tWgyP2uTUFoAEIPmCJb73Dix0eWInrc/mcp"
    }
  }
}
Copy into chat04

  • Which systems in my OneTrust inventory are processing sensitive customer email addresses?

  • List all assets that are currently tied to marketing consent purposes.

  • Find any databases in my data map that handle health information.

  • Show me a list of assets that don't have a defined consent purpose assigned.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect OneTrust once, then ask.

You only need to link your account once. Your credentials stay encrypted, and you can immediately start asking questions in your preferred AI client.

Connect OneTrust to your AI

FAQ

How this task behaves

  • 01

    Can the AI change my OneTrust settings?

    No. The AI can only read your asset and consent data. It cannot modify, delete, or create any records in OneTrust.

  • 02

    Does the AI see all my OneTrust data?

    The AI only sees the data it needs to answer your specific question, using the asset and consent tools provided.

  • 03

    Can I use this to automate data deletion?

    No. This MCP is for querying and identifying data. Deletion or modification must be done manually by a human in OneTrust.

  • 04

    How does the AI know which data is sensitive?

    The AI looks at the attributes and metadata attached to the assets in your OneTrust inventory to identify sensitive fields.

  • 05

    What happens if an asset is missing consent info?

    The AI will report that the asset has no associated consent purpose based on the data it retrieves.

  • More questions about OneTrust? See everything the OneTrust Connector can do

Connect OneTrust to Claude, Cursor, ChatGPT & more