Drata Features

Track usage per company, custom time period, or contract

Track payments received for products that haven't be delivered yet

Recognition rules to accrue revenue on a daily or monthly basis

Monitors data quality and sends alerts based on violations or misuse.

Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.

Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.

Allows users to create, edit, and relinquish user access privileges.

Ensures user access management, data lineage, and data encryption.

Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.

Allows administrators to set policies for security and data governance.

Analyzes data associated with web traffic and site performance to provide vulnerability insights and best practices.

Creates new or streamlines existing workflows to better handle IT support tickets and service.

Allows companies to assess vendors profiles in a centralized catalog

Offers standardized security and privacy framework questionnaire templates

Offers role based access controls to allow only permissioned users to utilize various parts of the software.

Offers built-in or automated vendor risk scoring

Monitors changes in risk and sends notifications, alerts, and reminders for specific actions including: upcoming assessments, profile access requests, etc

Uses AI to alert administrators to changes in risk scoring through continuous monitoring.

Allows users to generate text based on a text prompt.

Condenses long documents or text into a brief summary.

Use AI to generate content in the form of text, images, videos, etc.

Manage the process of evaluating documents or requests submitted for approval

Generates reports to demonstrate AI compliance with local and international frameworks.

Helps AI systems to comply with the regulations.

Maintains detailed logs of activities and changes to AI models.

Evaluates legal, operational and ethical risks posed by AI systems.

Monitors AI models for anomalies continuously.

Automates retraining, version updates and decomissioning when the models are outdated.

Restricts access to AI models and sensitive data to authorized users.

Helps sharing AI models and best practices.

Can analyze patterns and trends in security data to predict potential compliance risks.

Can automate the creation of compliance documentation by quickly generating accurate and comprehensive reports.

Utilizes AI to summarize security questionnaires.

Automate text responses to common security assessment questions.

Can generate reports on policy compliance trends using AI.

Uses AI to automate common workflow tasks such as policy creation, distribution, and updates.

Alter the layout and content of reports

Handles digital content throughout its lifecycle, from creation and storage to distribution and archiving

Manage and track the renewal process for various services, subscriptions, contracts, or licenses

Store, manage, and track all electronic documents in a centralized location

Store, manage and track all forms in a centralized location

Track and manage adherence to policies for any service, product, process, or supplier

Manage and track all disruptions and incidents

Manage the end-to-end lifecycle, from initial setup/development to deployment and maintenance

Create, save, and re-purpose templates for emails, forms, etc.

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Creation, administration, and evaluation of assessments or tests

Group policies by type for easy classification and discovery

Track and manage expiration of various items including products, warranties, licenses, and contracts

Configure existing workflows to meet your organization's needs

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Works across multiple software systems or databases

Improves performance based on feedback and experience

Engages in human-like conversation for task delegation

Anticipates needs and offers suggestions without prompting

Makes informed choices based on available data and objectives

Makes informed choices based on available data and objectives

Track revisions and updates made to files and navigate between different versions

Securely stores data to prevent data loss or breaches

Search and filter data across systems to locate required information by entering keywords or certain criteria

Timed notification for any upcoming task, deadline, appointment, or activity

Observe and track the demand, usage, progress or quality of a system, product, or user

Application programming interface that allows for integration with other systems/databases

Track and document all activities across devices, networks, and other systems

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Set & manage permission levels based on user roles and restrict access to only authorized individuals

Allow users to access multiple services after entering their login credentials once

Train and educate employees on existing and/or new procedures and policies

Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes

A record of all activities within the system, including user access, changes made, etc.

Collect, track and store acknowledgements that policies have been read and understood

Software program that continuously adjusts its behavior based on observed data

AI-based platform which conducts a conversation via auditory or textual methods

Provides a channel for team members to share media files, communicate, and work together

Analyze potential risks across the organization

Online portal through which end users can access the system, manage tasks, or obtain information

Interpret, identify and extract specific data points, pattern and insights from documents

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Set up connections to third-party platforms to improve business processes

Create new policies or alter existing policies

Electronic signing method that validates the authenticity and integrity of a digital document

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

A repository of all past and existing policies

Notifications that are delivered to users as soon as an event occurs

Review and analyze existing information across documents

View and track pertinent metrics to find patterns and gain insights from data

Pre-designed layouts that can be customized to match preferences and requirements

Compliant with HIPAA, which sets standards for sensitive patient data protection

Create, design and manage workflows for repetitive tasks

Securely stores data to prevent data loss or breaches

Set up connections to third-party platforms to improve business processes

Define levels of authorization for access to specific files or systems

Manage user consent requests and documents

Track the management and flow of data throughout the organization

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Application programming interface that allows for integration with other systems/databases

Set & manage permission levels based on user roles and restrict access to only authorized individuals

Create, manage, and track policies and procedures within an organization

Allow users to access multiple services after entering their login credentials once

Process of identifying, evaluating, mitigating, addressing and reporting on potential risks or uncertainties

Search and filter data across systems to locate required information by entering keywords or certain criteria

Create, save, and re-purpose templates for emails, forms, etc.

Manage and support multiple languages

Graphical representation of data

Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks

Observe and track the demand, usage, progress or quality of a system, product, or user

Data impact assessments to identify and mitigate potential data risks

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Identify sensitive or personal information collected from users

Online portal through which end users can access the system, manage tasks, or obtain information

Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes

Import and export data to and from software applications

Initiate collection and analysis of known risks

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Store, manage, and track all electronic documents in a centralized location

Store, process, and transmit cardholder data in compliance with the Payment Card Industry Data Security Standard (PCI DSS)

Manage and track all disruptions and incidents

Collection of processes, policies, and standards to manage the storage & usability of enterprise data

Track and manage adherence to policies for any service, product, process, or supplier

Pre-designed layouts that can be customized to match preferences and requirements

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Use AI to generate content in the form of text, images, videos, etc.

Manage and store data in a database

Create, save, and store files

Alter the layout and content of reports

A set of indicators that tracks the performance of networks, applications, systems, teams, etc.

Analyze potential risks across the organization

Identify and alert about security breaches by third parties

Analyzing computer-generated records called logs to identify the root cause of errors, bugs, security threats, or other risks

Systematic evaluation of the security of a company's overall security system and situation

Collects and aggregates data from various systems within the IT environment

View and track pertinent metrics to find patterns and gain insights from data

Notifying as a warning or reminder of a potential or imminent hazard

Conducting audits to ensure compliance with the Payment Card Industry Data Security Standard (PCI DSS).

Discover patch statuses and vulnerabilities

A chronological record of actions or occurrences within a network, software, or process

Validating the integrity of an operating system, application, and files by monitoring for probable changes, tempering, or fraud.

Automated handling of non-compliant EDI transmissions.

Synchronizing data between two or more devices/systems and automatically updating changes to maintain consistency

Track and report regulatory data to either internal management or external stakeholders

Track and report on everything that happens within the system or network

A record of all activities within the system, including user access, changes made, etc.

At least a username and password is required to access the system

Use AI to generate content in the form of text, images, videos, etc.

Create, manage, and send invoices or bills to customers

Pre-designed layouts that can be customized to match preferences and requirements

Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks

Creation, processing, verification, and execution of invoices till the payment is made

Process of familiarizing new clients, stakeholders or employees with the company, a new location, or a service

Search and filter data across systems to locate required information by entering keywords or certain criteria

Negotiate best prices and choose the right vendor for various purchases

Create and maintain quality vendor data through data validation, maintenance, and audit trails to ensure proper compliance and sourcing

Organize and manage all processes/procedures involved in purchasing goods and/or services

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Store, manage, and track all electronic documents in a centralized location

Plan and coordinate all the resources, costs and time needed to execute assignments

Graphical representation of data

Define levels of authorization for access to specific files or systems

Record of all transactions such as purchases, deposits, withdrawals and transfers within a specific period

Initiate collection and analysis of known risks

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Receive data and information in real time

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Closing out contracts by reviewing contract/project completion, finalizing payments, and ensuring terms and compliance as been achieved

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Online portal through which end users can access the system, manage tasks, or obtain information

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Provides a channel for team members to share media files, communicate, and work together

Application programming interface that allows for integration with other systems/databases

Manage the process of evaluating documents or requests submitted for approval

Process payment to vendor(s) for goods/services received

Set up connections to third-party platforms to improve business processes

A set of indicators that tracks the performance of networks, applications, systems, teams, etc.

Create, send, and track purchase orders and their statuses

Track, store, and access client contracts or licenses

Import and export data to and from software applications

Allow users to access multiple services after entering their login credentials once

Create, design and manage workflows for repetitive tasks

Track and manage adherence to policies for any service, product, process, or supplier

Create, manage and track all task activities and progression

Software program that continuously adjusts its behavior based on observed data

Tools that provide relevant information at specific times to support judgments and courses of action

Provides a channel for team members to share AI models, media files, communicate, and work together

Define levels of authorization for access to specific files or systems

Create, manage and track all task activities and progression

Active monitoring of systems, applications, or networks

Process and analyze human language in text or audio form

Automatically map and compare AI governance policies with actual development and deployment practices

Identify and prioritize AI risks using advanced algorithms, prevent critical vulnerabilities, and mitigate risks when required

Measure AI systems' ethical alignment to ensure compliance, fairness, transparency, and security

A record of all activities within the system, including user access, changes made, etc.

Embed/link applications into third party software so it can be accessed within a third party system

Manage and track all stages of a product lifecycle, from its conception, design, development, and deployment

Anticipates needs and offers suggestions without prompting

Identify and respond to unexpected problems or failures

Manage the process of evaluating documents or requests submitted for approval

Create, manage, and track all task activities and progression

Collect and track employee or stakeholder acknowledgment of policies and procedures

Condenses long documents or text into a brief summary

Use AI to automatically map controls to relevant regulatory requirements and surface overlaps across frameworks

Create, manage, and track policies and procedures within an organization

Monitor and alert users to changes in laws, regulations, and standards that affect compliance obligations

Map internal controls to applicable regulatory frameworks and standards to identify overlaps and coverage gaps

Generate reports on compliance status, activity history, and supporting documentation for internal or external stakeholders

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Initiate collection and analysis of known risks

Store, manage, and track all electronic documents in a centralized location

Track revisions and updates made to files and navigate between different versions

Gather and organize documentation that demonstrates adherence to policies, controls, and regulatory requirements