Overview
Product Information on Drata
What is Drata?
Drata Pricing
Overall experience with Drata
“Easy-To-Use Compliance Platform With Robust Security Features But Few Custom Options”
“Solid, stable product with constant improvement, but not perfect.”
About Company
Company Description
Drata is a cyber GRC platform that enables businesses of all sizes to maintain compliance efficiently, proactively monitor risks, and stay audit-ready. Its mission is to serve as the trust layer for its customers, with a commitment to modernizing GRC through AI-driven automation. Drata assists thousands of businesses globally to manage compliance for frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and various custom frameworks. This is achieved through constant, automated control monitoring and evidence collection. With its global team based in San Diego, California, Drata resolves the main business problem of streamlining regulatory compliance processes.
Company Details
Do You Manage Peer Insights at Drata?
Access Vendor Portal to update and manage your profile.
Key Insights
A Snapshot of What Matters - Based on Validated User Reviews
Reviewer Insights for: Drata
Drata Likes & Dislikes
User-friendly interface and robust features have made it easy to maintain security and compliance.
I like that the product is organized appropriately for what it does. The UI is clean and easy to navigate. Engaging support is very simple and can be done right from the main UI. I also like the fact that they are constantly making updates to incrementally improve the functionality of the product.
The most impressive aspect is its automation of compliance processes, which significantly reduces the manual effort required for maintaining certifications.
Customization is not extensive, which I do not find as a drawback at this time. I can see this causing potential issues in the future with more unique workflows. Some modules that have a need for risk management or specific trust center control sets may find it a challenge to incorporate into the platforms field of use.
The documentation for the product leaves much to be desired. I have found that the documentation makes assumptions about the user's GRC knowledge or knowledge of the product itself. The documentation lacks depth and detail, but is nevertheless still functional overall. Some things with the UI are unnecessarily clunky for 2025; specifically when working in an Audit and viewing controls. When you filter the controls you want to look at to a specific list, then click to look at the details of a specific control, when you return to the list, 9 times out of 10, your filter has been removed. This creates the need for constantly filtering the list. I also don't care for the fact that, as far as I can tell, the product does not support creating Risk Assessments. It will allow you to document and manage your risks, but can't be used to perform a risk assessment. This seems like a miss to me. I also find the lack of continuity when it comes to security reviews between prospective vendors and current vendors to be slightly annoying. Regardless of whether the vendor is a potential or confirmed option, the available review types within the product should be the same. My org specifically treats reviews of prospective vendors the same as current vendors and would prefer our product to have the option to treat them the same as well.
Notable downside of Drata is its complex setup process which can be time consuming.
Top Drata Alternatives
Peer Discussions
Drata Reviews and Ratings
- INFRASTRUCTURE ARCHITECT<50M USDHealthcare and BiotechReview Source
Solid, stable product with constant improvement, but not perfect.
Solid product with a reliable account representative and easy to use support model. - Benefits Consulting Analyst<50M USDHealthcare and BiotechReview Source
Easy-To-Use Compliance Platform With Robust Security Features But Few Custom Options
Efficient automation compliance platform that is user-friendly and seems to sustain very good posture. I have not run into any issues in my limited (approx. 3 months) months of usage. It is a great compliance platform that may fall short in extra options towards customization, but this adds to the value since I do not need to take time out of my busy schedule to rebuild. - Senior Associate10B+ USDInsurance (except health)Review Source
Automating Compliance Processes: Drata's Revolutionary Approach
Drata steamlines compliance and security management with its user-friendly platform, automating many of the tasks associated with maintaining certifications. It simplifies the audit process and offers comprehensive insights into compliance status. However the initial setup may require a learning curve. - IT Associate50M-1B USDTelecommunicationReview Source
Achieving ISO 27001 Alignment Through Innovative Product
Great product, helping our company align with the ISO 27001 security framework. The support via the chat is outstanding and responsive. - IT MANAGER50M-1B USDInsurance (except health)Review Source
Automated insights for compliance
Very productive tool to pull in data and also to improve the standpoint for compliance and governance.