Fast Facts


Customer Name

Everis

Size

Enterprise

Industry

  • Consulting and IT Services

Region

  • AMER
  • EMEA

Key Regulations

  • GDPR

Products

  • PIA & DPIA Automation
  • Data Mapping Automation
Download PDF

Everis Operationalizes GDPR Compliance with OneTrust


Founded in Spain, Everis is a global consulting and outsourcing company, operating mainly in America and Europe, with more than 25,000 employees and operations in all sectors. In 2014 Everis joined the NTT group, one of the largest IT services companies in the world. In addition, they are great allies of OneTrust, having a strong partner relationship since 2018. 

Everis is aware of the importance of privacy and the increasing demands of society with respect to it. Advances in regulations, since the entry into force of the previous Spanish Data Protection Law (LOPD) and the arrival of the GDPR and LGPD, have made privacy one of their priorities. Corporate DPO at Everis, Alejandro Sanchez highlighted their need for a tool that could centralize their program management across the wider group: “We needed a tool that would allow us to have inventories and traces of all the processes, tools, suppliers of all the companies in the group. Without a tool like OneTrust the effort was titanic, said Alejandro. 

“At Everis we are committed to our employees and the different groups with which we interact, clients, suppliers, partners, etc., to establish high standards for the protection of people’s privacy,” said Alejandro. 

Cybersecurity Director at Everis, Sara Rivera observed that when trying to implement the GDPR, the administrative cost of some of the required tasks were quite high. “Exercises of rights, creation of records of treatment activities, management of cookies, etc. these are tasks that in large and medium-sized companies require a very high management cost, in which, in addition, the use of means that do not lend themselves to collaboration, sometimes lead to dispersion or errors, said Sara. 

At Everis we are committed to our employees and the different groups with which we interact, clients, suppliers, partners, etc., to establish high standards for the protection of people's privacy.

Alejandro Sanchez
Corporate DPO

Another of the main challenges they recognized was the difficulty of having a comprehensive view of privacy risks in relation to the IT field and other frameworks. 

Operationalizing the GDPR with OneTrust

Everis knows OneTrust solutions well, having partnered with them on many client integrations. “In addition, OneTrust is the tool used by other companies in the NTT Data group to manage GDPR and this generates internal synergies for us,” said Alejandro. 

In reference to why they work with OneTrust, Sara added: “On the one hand because of the market position it has in terms of dedicated privacy management software, on the other because of its ease and agility of use in comparison with other competitors within the sector. 

Everis uses OneTrust’s Data Mapping and Assessment Automation modules since, given the high number of processes handled in the group, it would be unsustainable to manage manually. However, thanks to OneTrust automation they have managed to address it.  

On the one hand because of the market position it has in terms of dedicated privacy management software, on the other because of its ease and agility of use in comparison with other competitors within the sector.

Sara Rivera
Cybersecurity Director

Other elements that were important for Everis were to involve all functional areas in responsibility for privacy, giving access to the functional areas and improving the management of information collection and maintenance, improves the awareness across the company that privacy is everyone’s responsibility. 

Looking to the Future with OneTrust

The innovative and consistent roadmap of OneTrust solutions interests Everis, they see how the platform continues to grow in terms of GRC and third-party risk management and develops new tools such as Data Discovery and Athena AI. Everis continue to find great value in OneTrust’s tools both for their clients and for their own company, as they aim to further improve the efficiency of the privacy program. 

Everis does not lose sight of the changes in the regulatory landscape and closely follows the evolution of regulations in Latin America, such as the application of the LGPD, as well as the rest of the countries that are also updating their regulations and that will be a key focus in the coming months and years. Thanks to the flexibility and regulatory intelligence of the OneTrust platform, Everis will continue to collaborate with OneTrust to meet the needs of their customers in these markets. 

Onetrust All Rights Reserved