Case Study: GOL Airlines cuts vendor approvals from 30 days to under 5 with OneTrust
Key results
The challenge
GOL, a major Brazilian airline, managed privacy and third-party governance manually using spreadsheets and disconnected systems. This fragmented approach could not scale across the thousands of data flows, vendors, partners, and systems involved in its operations.
The solution
GOL deployed OneTrust across privacy automation, third-party risk management, data mapping automation, data subject request automation, governance risk and compliance, and AI governance. Connecting its data sources let the team automate compliance workflows and gain visibility into where personal data was stored.
“Before OneTrust, we took almost 30 days to approve or deny a vendor. Now, it takes between zero and five days.”
GGuilhermePrivacy Coordinator, GOL Airlines
The results, in context
After connecting its databases, GOL discovered nearly seven billion customer IDs in storage. Vendor approvals fell from almost 30 days to as little as 0-5 days, data subject requests dropped from 14-15 days to minutes, and executive reporting that once took two to three weeks was reduced to a few minutes.