Drata Reviews & Product Details

For us, the services offered by Drata, namely the pre-built framework and the suggestions for controls and policies, were ideal for rebuilding our ISMS according to ISO27001. The integration with MS365 and the automated check to see if all employees have confirmed the policies are also very helpful in daily work. If there are questions, the help page is already very comprehensive, and if it can't be resolved with that, the support quickly assists and also takes improvement suggestions (which are indeed implemented). The price is reasonable for the extensive service you receive. Review collected by and hosted on G2.com.

The audit area for the auditor is only limitedly usable if one links to JIRA tickets as evidence, because the permissions to open them are missing. Review collected by and hosted on G2.com.

The new functionality around the trust center is amazing, the ability to streamline the security verification process with our customers is incredibly time-consuming cutting in half by the process with Drata if not more. Review collected by and hosted on G2.com.

Sometimes the user experience is a little cumbersome in order to review many policies. It requires many clicks, but that is a one time problem so I'm not too concerned... Review collected by and hosted on G2.com.

Drata was the first platform we used to allow for the SOC 2 attestation. They worked closely with us and guided us to set up and continue the process. We are just going into our second year and we are looking forward to the continued guidance. So the best this about Drata is their process and guidance. Review collected by and hosted on G2.com.

Pressure to get things done, just kidding I cannot remember anything that we disliked Review collected by and hosted on G2.com.

I really like how Drata has everything clearly designated on a single dashboard, making it easy to see what needs to be done. I can drill down into individual items without any hassle. The prioritization features, particularly the per-user filtering with priorities for evidence renewal, help focus me on the tasks I need to do immediately, which is crucial when handling the large amount of information for SOC 2 audits. It simplifies my workflow by letting me concentrate on what I need to provide right away. Review collected by and hosted on G2.com.

It's not always clear what some of the evidence being asked for actually is and what is required, so a lot of assumptions have to be made. Also, there was some initial learning curve during setup, though I wasn't directly involved. Review collected by and hosted on G2.com.

Drata was an excellent tool for helping us successfully complete our SOC 2 audit, and it made a process that can feel pretty intimidating surprisingly manageable.

UI was simple and easy to work with, integrationg services was a snap, performance was excellent, I guess pricing is reasonable, support was great, especially the team at Agency. Never used the AI intelligence, it might be under the covers. Review collected by and hosted on G2.com.

Drata was an excellent tool for helping us successfully complete our SOC 2 audit, and it made a process that can feel pretty intimidating surprisingly manageable. Review collected by and hosted on G2.com.

What I like best about Drata is how easy it is to use. The platform is intuitive, straightforward to navigate, and makes managing compliance much simpler. I feel we’re getting good value for what we’re paying. The time saved through automation and having our compliance activities centralized makes the pricing worthwhile. It reduces the manual effort involved in managing compliance and helps us stay organized and audit-ready. Review collected by and hosted on G2.com.

Sometimes I find it difficult to navigate between my admin and personal account, as it’s not always clear which account or view I’m currently using. A clearer indication of the active account or role would make the experience easier. Review collected by and hosted on G2.com.

Drata makes compliance work much easier to manage by centralizing controls, automating evidence collection, and giving us a clear view of our audit readiness. Its integrations and continuous monitoring reduce repetitive manual work and help us identify gaps earlier, so preparing for audits is more organized and efficient. Review collected by and hosted on G2.com.

Some workflows and reports could be more flexible and easier to customize for different stakeholders. Alerts can also feel noisy or lack enough context to make the next action immediately clear. More intuitive navigation, better alert tuning, and stronger reporting options would make an already useful platform even better. Review collected by and hosted on G2.com.

I found Drata very easy to use once you got use to the navigation areas, overall application performance was great. It provided great guidance on how to get started and what to do next. It also offers insightful summaries of your current state and highlights the areas of your compliance that need to be addressed over time. It integrated well with our very infrastructure platforms to pull state or inconsistencies in real-time. The support team is very responsive and consistently helpful. While some of the AI capabilities where useful you could see they were looking to extend this capability further in the future. While the initial investment is not cheap the alternative of doing the ISO certification manually would be a nightmare in comparison. Having this system in place and to draw on during the audit process made the overall audit experience much easier. Review collected by and hosted on G2.com.

Learning the navigation and dependencies between sections and elements was a bit of a learning curve. They also went through a UI update during our audit process which created a couple of challenges but they provided a prior UI experience to address those issues. Some of the integration with other systems was a bit of a black box with not much feedback on what may be wrong - support was helpful in this instance. Review collected by and hosted on G2.com.

I find Drata extremely easy to use. It offers a ton of integrations that are beneficial for linking all our systems. The platform provides very easy auditability and a history of changes with automation and alerts. I also appreciate the great support for both audit and technical issues. Drata's ability to facilitate SOC 2 audit readiness by allowing our auditors and vCISO to work in the same place is invaluable. The singular platform for evidence tracking and coordination across multiple teams for SOC 2 audit preparation is a big plus. Additionally, Drata's pricing and the help in finding companies to support our audit efforts were crucial factors in choosing it. Review collected by and hosted on G2.com.

I find the clarity on what I need to do and steps to proceed with Drata could be improved. There should be clearer tutorials and onboarding support. I'm not sure if I could use Drata on my own without support from VCISO, and if you don't have a VCISO, you likely need to spend a lot more time or have a dedicated role for it (which we don't have). Review collected by and hosted on G2.com.

I really like the ease of use of Drata. It compiles a lot of information and helps me be direct and objective. The clarity of the information, the traceability of the data, and the ease of auditing are aspects that make things much easier, as all the documentation is on the platform. Additionally, the setup was an advantage, as Drata kind of guides us as if it were a gamification process, showing how much is left to keep the environment compliant. Review collected by and hosted on G2.com.

Look, I think Drata is continuously improving. There were some things, for example, during the audit. When we receive several audit points, we have to enter message by message. I believe that navigation could be a bit easier there. But I notice that Drata is updating the user experience daily, and maybe this is a point they will improve soon as well. Review collected by and hosted on G2.com.