TrustRadius: an HG Insights company

Drata

Score9.6 out of 10

9 Reviews and Ratings

What is Drata?

Drata is a software designed to help businesses achieve and maintain SOC 2 compliance. The platform provides continuous automated control monitoring, evidence collection, policy creation, and personnel workflow management to support real-time audit readiness throughout the year. By automating many of the processes involved in achieving compliance, Drata frees up organizations to focus on other aspects of their business.

Read more details.

Categories & Use Cases

Videos

Who Buys & Uses Drata

Drata Reviews

What users are saying about Drata.
View all Drata reviews

Drata for the win

Incentivized
Bryon Miller
CISO in Corporate at Zello (51-200 employees)

Use Cases and Deployment Scope

We leverage Drata for multiple aspects of our security and compliance program: Policy management; Automated evidence collection; Manual evidence collection; Vendor management; Enterprise risk assessments; Asset inventory; Evidence reminders, and more.

Pros

  • Automated reminders (reviews, evidence, vendor due diligence, etc.)
  • Control consolidation between multiple frameworks
  • Consolidated platform that manages multiple objectives with just one tool
  • Online community to share lessons learned, ideas, and tips with other Drata users
  • The Trust Center saves us hours of time each week.

Cons

  • I'd like to see an incident response workflow built into the platform

Return on Investment

  • Drata provides outstanding ROI for us. The automation, framework normalization (correlation), and breadth of coverage saves me at least an FTE every year - if not two.

Usability

Alternatives Considered

Apptega, Vanta and OneTrust Data Governance & AI

Drata review.

Incentivized
Verified User
Administrative Assistant in Human Resources (11-50 employees)

Use Cases and Deployment Scope

We use Drata mainly to handle our compliance. It helps companies like us maintain certifications like SOC 2 and ensures they don't get overlooked. It also helps us keep our policies up to date and does background checks for all our staff. It is great; the user interface is easy to use.

Pros

  • SOC 2 certifications.
  • Background checks.
  • Keeps our policies up to date.

Cons

  • I think it has a great user interface, but I recently had trouble uploading our updated policies. It took me a while to navigate and how to upload it but i was eventually able to do it. I would like an easier, more straightforward way to do it next time.

Return on Investment

  • It is definitely worth having it. As I said, its positive impact is that it gives us confidence that it is being monitored and not overlooked.

Usability

Other Software Used

Xero, Wise, PandaDoc