---
title: Drata Reviews
meta_title: 'Drata Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 1332 reviews by the users' company size, role or industry
  to find out how Drata works for a business like yours.
aggregate_rating:
  rating_value: 4.7
  review_count: 1332
  scale: '5'
date_modified: '2026-07-20'
parent_category:
  name: Cloud Security
  url: https://www.g2.com/categories/cloud-security
---

# Drata Reviews
**Vendor:** Drata  
**Category:** [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance)  
**Average Rating:** 4.7/5.0  
**Total Reviews:** 1,332
## About Drata
Founded in 2020 and headquartered in San Francisco, California, Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Born from experience in mission-critical aerospace work and the painful reality of manual security audits, Drata was created to turn trust into an always-on state instead of a point-in-time exercise. Today, the Drata Agentic Trust Management Platform helps more than 8,500 organizations worldwide build continuous trust across the cloud and prove their posture to customers, partners, and auditors. Drata unifies governance, risk, compliance, and assurance so security and GRC teams can manage everything in one place. Drata's core capabilities include Automated Governance to streamline policy management, control monitoring, evidence collection, and access reviews; Integrated Risk Management to centralize internal and third-party risk with real-time visibility and ownership; Continuous Compliance to automate evidence collection and control testing across frameworks; and Accelerated Security Assurance to show your security posture in real time and shorten review cycles while supporting faster, more confident sales and vendor decisions. Together, these capabilities deliver Continuous Real-Time Trust, Enterprise-Grade Flexibility, and Agentic AI Productivity. Drata continuously monitors controls, flags risks immediately, and makes always-current proof easy to share so you're demonstrating effective security every day—not just at audit time. The platform scales across multiple frameworks and connects to hundreds of tools to fit complex environments, and AI-driven automation helps assess vendors, collect evidence, and draft questionnaire responses—eliminating repetitive manual work, reducing operational overhead, and turning assurance into a strategic business enabler for modern, trust-driven organizations.



## Drata Pros & Cons
**What users like:**

- Users commend the **exceptional customer support** from Drata, enhancing their compliance and security management experience. (135 reviews)
- Users value the **intuitive design** of Drata, making setup and integration seamless and efficient for everyone. (115 reviews)
- Users highlight the **automation of compliance monitoring** in Drata, significantly easing reporting processes and enhancing efficiency. (109 reviews)
- Users value the **time-saving automation** of Drata, streamlining compliance tasks and simplifying audits significantly. (96 reviews)
- Users value the **seamless integrations** of Drata, enhancing functionality by connecting various platforms effortlessly. (89 reviews)
- Automation (78 reviews)
- Users find Drata to be **simple to use and set up** , enhancing automation and support for audit processes. (77 reviews)
- Easy Integrations (75 reviews)
- Easy Setup (67 reviews)
- Team Helpfulness (62 reviews)

**What users dislike:**

- Users find Drata's **limited integrations** frustrating, wishing for broader support for third-party tools and self-hosted versions. (43 reviews)
- Users face **integration issues** with Drata, leading to a challenging transition and unexpected manual effort required. (38 reviews)
- Users note that **configuration limitations** and complex transitions hinder a seamless experience with Drata. (35 reviews)
- Users find the **lack of clarity** in Drata's UI can complicate the audit process and task management. (28 reviews)
- Users find the **UX confusing at times** , making it difficult to identify missing tasks and necessary fixes. (22 reviews)
- Limited Customization (20 reviews)
- Policy Management (18 reviews)
- Users find Drata’s services to be **expensive** , especially for startups looking for cost-effective compliance solutions. (15 reviews)
- Lack of Customization (15 reviews)
- Users desire **additional features** for formatting, better user interface, and more integrations for improved functionality. (15 reviews)

## Drata Reviews
  ### 1. Efficient Compliance Management, Needs More Reporting options

**Rating:** 4.0/5.0 stars

**Reviewed by:** Nick C.

**Reviewed Date:** December 15, 2025

**What do you like best about Drata?**

I like Drata's simple login UX which makes onboarding users easy since they just need to go to the login screen and sign in with Google. The reporting feature is decent and allows me to track how many people are yet to install the agent. I also appreciate the ease of installing the agent software. The initial setup was fairly good, with simple integration of Google Workspace and Atlassian, and even though the integration with Hibob (HRIS) took a bit longer, Drata support was helpful in resolving this by providing the necessary third-party integration docs.

**What do you dislike about Drata?**

More reporting options would be useful. More granularity with filters is needed; for example, I can filter by non-compliant devices, but I can't filter by a single non-compliant device-related item like a screen lock. Also, scheduled and saved reports are a must, which is missing currently. The initial setup with certain integrations like HiBob (HRIS) took a little longer because the guide we followed ended up missing a few steps. Eventually, Drata support helped by finding the third-party integration docs and forwarding them to me.

**What problems is Drata solving and how is that benefiting you?**

Drata identifies security gaps, helps us start policies, and simplifies user onboarding with Google sign-in. Reporting shows agent installation status, and the agent is easy to install.

  ### 2. Great Features but Mediocre UX

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.)

**Reviewed Date:** March 18, 2025

**What do you like best about Drata?**

Drata has a big range of features and covers a lot of usecases for us. Also, the integrations that exist are relatively easy to integrate.

**What do you dislike about Drata?**

There are two downsides to Drata, in my opinion:

1) User Experience
The UX of the product is okay, but it's not great. There are multiple smaller paper-cuts: The UI is overall a bit slow, frequently presenting loading spinners. Controls/Monitors have individual URLs, but unfortunately when shared they get removed. I.e. even if I send a colleague a link to a specific /control/123 they will get redirected to all controls instead of the specific one.

2) Integration Limitations
The default integrations that come with Drata are a bit limited, e.g. we still haven't been able to connect a vulnerability scanner into Drata, as it comes with 14 different options by default and we use none of them. That's always an issue with these integration platforms, but it's not clear to us yet how we could build a manual API integration for this feature.

**What problems is Drata solving and how is that benefiting you?**

Drata helps us track our compliance against a wide range of controls. We are using Drata's automation features to reduce the burden on our employees.

  ### 3. Streamlined PCI Management with Intuitive Ease

**Rating:** 5.0/5.0 stars

**Reviewed by:** Phil P.

**Reviewed Date:** December 11, 2025

**What do you like best about Drata?**

Drata has been incredibly easy to use—simple, intuitive, and very well designed. Their support has been outstanding. We were paired with an onboarding specialist who stayed with us for nine months during our first year and guided us all the way through completing our audit.  Setting up Drata was straightforward, and the automated monitoring features worked well with just a bit of tuning for our environment. The workflows make it easy to manage controls, maneuver through the platform, and upload evidence. Overall, Drata has helped us stay extremely organized and efficient with our PCI compliance program.

**What do you dislike about Drata?**

One area that could be improved is the level of detail provided within the control environment. Drata goes one or two layers deep, but for more complex compliance programs, it would be helpful if the platform went further into the nitty-gritty details.  Another area is around certain automated monitoring features that rely on specific applications. Expanding support to a broader range of third-party tools would make the monitoring even more flexible and effective.

**What problems is Drata solving and how is that benefiting you?**

Drata helps us manage the entire PCI process end to end. It keeps us organized operationally, from daily compliance tasks all the way through the audit cycle. The platform centralizes everything we need, streamlines evidence collection, and makes the audit process significantly more efficient. Overall, Drata removes a lot of manual effort and gives us structure and visibility, which saves time and reduces audit stress.

  ### 4. A seamless and reliable compliance automation platform, supported with an incredible CSM.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Keith B. | Interim IT and Security Lead, Mid-Market (51-1000 emp.)

**Reviewed Date:** September 25, 2025

**What do you like best about Drata?**

As a relatively small organisation, Drata has truly been a game-changer for us. Without a large compliance team, we have still been able to make steady progress toward our compliance goals, thanks to the platform. Working alongside a responsive auditing partner, we found the initial implementation straightforward and easy to get started with. The automation features for evidence collection and continuous monitoring have saved us countless hours of manual effort. We rely on Drata daily to ensure that any issues are promptly reported to the appropriate team and resolved quickly. We also value how smoothly it integrates with our core tools, such as AWS, Microsoft 365, and Intune, and how it offers clear dashboards and guided workflows that make preparing for audits much less stressful.

**What do you dislike about Drata?**

The only real negative we’ve experienced is that support can sometimes be slower than we would like to respond. However, this has been more than mitigated by our highly responsive Customer Success Manager, who has consistently gone above and beyond to keep us moving forward. Overall, this balance has meant issues never become blockers. I wouldn't hesitate to recommend Drata to any organization.

**What problems is Drata solving and how is that benefiting you?**

Drata is helping us overcome the challenges of managing compliance as a relatively small organisation without a large dedicated compliance team. It automates evidence collection, tracks controls continuously, and integrates directly with our core systems, which removes the need for endless spreadsheets and manual checklists. This saves us significant time, reduces human error, and gives us real-time visibility into our compliance posture. The biggest benefit is confidence—we can focus on growing the business while knowing we’re always audit-ready and aligned with frameworks like SOC 2 and ISO 27001.

  ### 5. Drata Streamlined Our Policy and Vendor Management for Audit Readiness

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** February 19, 2026

**What do you like best about Drata?**

We’ve had an incredibly positive experience with Drata. Implementing their platform has been a game-changer for our organization, especially when it comes to getting our policies, procedures, and vendor management processes structured and audit-ready.

Before Drata, many of our compliance-related documents lived in different places, and maintaining consistency across policies was time-consuming. Drata gave us a centralized, intuitive system to build, organize, and maintain our policies and procedures. The pre-built templates and automated reminders helped ensure nothing fell through the cracks, and version control made updates seamless. What used to take weeks of coordination is now streamlined into a clear, trackable workflow.

Vendor management has also improved dramatically. Drata’s vendor tracking and risk management features give us a single source of truth for all third-party relationships. We can easily monitor due diligence documentation, review timelines, and risk classifications without relying on scattered spreadsheets. This has not only strengthened our compliance posture but also given leadership better visibility into vendor risk.

**What do you dislike about Drata?**

Overall, our experience with Drata has been very positive, particularly around vendor management, and policy management. However, one area where we’ve felt some limitations is client management.

**What problems is Drata solving and how is that benefiting you?**

On the policy and procedure side, Drata provides a centralized, structured system that makes it easy to create, organize, update, and track documentation. The built-in templates and automated workflows ensure that policies are not only well-documented but also consistently reviewed and acknowledged by the appropriate team members. Instead of chasing approvals or wondering whether a policy is current, we now have clear visibility into ownership, version control, and review cycles.

When it comes to vendor management, Drata gives us a single source of truth for all third-party relationships. We can track due diligence documentation, risk assessments, contract renewals, and ongoing monitoring requirements in one place. Automated reminders and continuous monitoring help ensure that no vendor falls through the cracks, significantly reducing risk and manual administrative effort.

**Official Response from Lizzie Higgins:**

> Thank you so much for the feedback! Its incredible to hear that Drata has been so instrumental in improving your vendor management and policy programs. We love that you're able to see everything in a single source of truth, and know that all the right reviews, acknowledgements, and due diligence is getting completed by the right team at the right time. 

Keep up the great work, and please feel free to reach out anytime (lizziehiggins@drata.com) if you need additional support when it comes to client management. Your partnership is deeply valued, and our teams are here for you. Thanks again! 

  ### 6. Clean, Intuitive, and Packed with the Key Features We Need

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** February 20, 2026

**What do you like best about Drata?**

It's easy to use - clean, well-structured, and intuitive. It has all the key features we need without a lot of unnecessary junk to get in the way.

**What do you dislike about Drata?**

I have few complaints about Drata. I do yearn to use it more heavily for our audit management needs, as well as expediting our security questionnaire processes. However, I see this as my own limitations in capacity to invest in understanding and building out those modules to make better use of the components that are already available.

**Recommendations to others considering Drata:**

Think in terms of your user workflows and how those people will perform their jobs on a day-to-day basis. For me, the usability is a huge selling point, on top of having the full suite of necessary components (policy management, continuous monitoring, risk assessments, etc.)

**What problems is Drata solving and how is that benefiting you?**

Drata manages the majority of our GRC needs. It supports tracking vendor records, policies, and audit-related processes.

**Official Response from Lizzie Higgins:**

> We're thrilled to hear that you find Drata intuitive to use and that we are providing key features for your program, without adding noise. We are also so happy that Drata is enabling many of your GRC workflows, and are excited to partner with you as you explore other areas of the platform, embed Drata more deeply within your org, and maximize the value of Drata as we build trust together.  

  ### 7. Comprehensive Compliance Tools with Real-Time Monitoring

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jason F. | Director of Information Security, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 11, 2025

**What do you like best about Drata?**

Drata has so many tools to help with policy creation and real-time compliance monitoring. It's more that just a GRC tool, it provides live data when policy, process, and assets fall out of compliance so you can quickly reign them back in.

**What do you dislike about Drata?**

There have been issues with rolling out new features. Support responsiveness has slowed lately, especially after the introduction of the chatbot.

**What problems is Drata solving and how is that benefiting you?**

We are able to monitor all aspects of our internal and cloud infrastructure to ensure our employees are applying what we state in our internal policy. They also keep us up to date on any new changes to the frameworks we implement.

  ### 8. An amazing ISMS solution that meets our needs

**Rating:** 5.0/5.0 stars

**Reviewed by:** Ben  B. | Compliance and Information Security Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** November 29, 2024

**What do you like best about Drata?**

Drata provides a clear dashboard view of the frameworks we work towards, clear connections to controls, the capabilities of ownership and maintenance of our ISMS and risk management.
The supplier management section is also super helpful!
Implementation was easy and using the connections and integrations we were set up and running within two weeks. 
The ability to be part of the roadmap and feedback to Drata using customer support really makes you feel part of a family.
When I log on to our system, Drata is one of the first applications I open and it stays with me all day.

**What do you dislike about Drata?**

The downside of Drata for me personally, is that it is that efficient, the moment any part of ISMS falls out of review I see the percentage score drop and this messes with my OCD!

**What problems is Drata solving and how is that benefiting you?**

Single source of truth for our ISMS - this means all evidence is streamlined into one excellent platform. 
This is making meetings easier and management of our ISMS and risk management much more time-efficient.
Real-time overview of current information security stance.

  ### 9. Audit-Ready Dashboard and Automation Save Us Time

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.)

**Reviewed Date:** November 13, 2025

**What do you like best about Drata?**

It's always audit-ready: I can literally look at the dashboard and see our real-time compliance status for SOC 2 or ISO 27001. If a control fails, I get an alert immediately, not six months later during a review.

Massive time savings: It has seriously automated 90% of the manual evidence collection. I no longer spend days or weeks before an audit compiling screenshots and documentation.

The Audit Hub is a game-changer: When the auditor shows up, everything they need is centralized in one place. Communication and evidence requests are streamlined, which makes the entire audit process so much smoother and faster.

**What do you dislike about Drata?**

Limited Niche Integrations: We use a few niche tools, and Drata either doesn't have an integration for them or the pre-built connection is very limited in the evidence it can pull. This forces us back to the manual process for those specific controls, which defeats the whole purpose of the automation.

Lack of Flexibility in Control Mapping: For standard frameworks (like SOC 2), it's great. But if your organization has unique workflows, internal policies, or needs a less common framework, customizing or mapping your controls to fit those needs can be rigid and challenging. It can feel like it's a "my way or the highway" platform.

**What problems is Drata solving and how is that benefiting you?**

The problem Drata solves is a huge one: It replaces the manual, fragmented, and panic-driven traditional approach to compliance (GRC) with a continuous, automated, and proactive system.

Before Drata, preparing for an audit (like SOC 2 or ISO 27001) was a company-wide crisis. It involved:

Manual Evidence Collection: Running reports from our cloud provider, HR system, ticketing system, and endpoint management tool.

Point-in-Time Compliance: Knowing we were compliant only on the day we pulled the evidence. As soon as a setting was changed, we were blind again.

Human Error and High Effort: Endless spreadsheets, copy-pasting, and chasing people for screenshots—all time that my security and engineering teams could have spent on actual security work

  ### 10. Drata - one of my favourite systems to use :)

**Rating:** 5.0/5.0 stars

**Reviewed by:** Helen O. | Operations Manager, Small-Business (50 or fewer emp.)

**Reviewed Date:** January 14, 2025

**What do you like best about Drata?**

Intuitive - you don't need to read a manual
Was easy to implement
New features added 
Great Customer Support during initial set up

**What do you dislike about Drata?**

In the audit section there are a few tweaks that need to be made however I have no doubt the Drata team are on this

**What problems is Drata solving and how is that benefiting you?**

SOC 2 audit.  Will use it for ISO 27001 and ISO 42001 going forward

  ### 11. Digitizes Compliance, Easy Setup, But Pricey Globally

**Rating:** 4.5/5.0 stars

**Reviewed by:** Susan M. | CISO, Mid-Market (51-1000 emp.)

**Reviewed Date:** November 26, 2025

**What do you like best about Drata?**

I love how Drata has transformed the way I handle compliance by digitizing everything, eliminating the hassle of maintaining spreadsheets. The detailed and descriptive nature of Drata is incredibly helpful; it's well-labeled and grouped, which simplifies the setup process and makes it easier to ensure compliance. The initial setup was very easy, and I appreciate how it integrates seamlessly with other tools I use, such as Jumpcloud, AWS, GitHub, and Jira. The comprehensive nature of Drata makes my compliance tasks more manageable and efficient, offering a user-friendly experience that truly stands out.

**What do you dislike about Drata?**

The cost of using Drata is a concern for me. While the cost might be justified, the annual fee of $30,000 may not be affordable in countries other than the US.

**What problems is Drata solving and how is that benefiting you?**

I use Drata to digitize compliance processes, eliminating the hassle of spreadsheets. Its detailed and organized nature simplifies setup and compliance opt-ins.

  ### 12. Comprehensive Controls and Integrations That Simplify Auditing

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 28, 2026

**What do you like best about Drata?**

Comprehensive controls and lots of integrations to simplify auditing, evidence gathering.

**What do you dislike about Drata?**

The built in policy editor is a bit limited and doe snot make it easy to add corporate branding.

**What problems is Drata solving and how is that benefiting you?**

We’re a small team with limited resources, and Darata has helped us accelerate our compliance program without needing to invest in additional headcount.

**Official Response from Lizzie Higgins:**

> It's great to hear that Drata has helped your small team accelerate your compliance program without requiring additional headcount. We're committed to providing solutions that make compliance more manageable for businesses of all sizes. We also appreciate your feedback on policy collaboration and will surface to the right product team internally. Keep up the great work, and keep the feedback coming. Thanks again! 

  ### 13. Effortless Compliance Automation with Seamless Integrations

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** November 11, 2025

**What do you like best about Drata?**

Drata has taken what used to be a complex, manual process and turned it into a seamless, automated workflow. The integrations with HR systems, cloud providers, and security tools (like Google Workspace, AWS, and Jira) make evidence collection nearly effortless. I particularly love the continuous monitoring feature — it gives real-time visibility into control status and alerts when something falls out of compliance.

The user interface is clean and intuitive, making it easy for both technical and non-technical stakeholders to navigate. The risk assessment and policy management modules are also well-structured, helping us align with auditors’ expectations without juggling multiple spreadsheets.

**What do you dislike about Drata?**

While the platform covers most use cases perfectly, some integrations (like HR background checks and certain people-data syncs) occasionally require reauthentication or manual validation. Their support team, however, is responsive and proactive in resolving such issues.

**What problems is Drata solving and how is that benefiting you?**

Drata has significantly reduced the burden of manual compliance work. Previously, tracking evidence, managing policies, and keeping controls up to date was a tedious process, often spread across multiple tools. With Drata, all of these tasks are now centralized and automated, from monitoring controls to collecting evidence.

The reminders and real-time alerts make it much easier to keep up with compliance responsibilities, and the automation helps minimize errors and overlooked items. Overall, Drata keeps us organized, boosts our confidence, and ensures we are always prepared for audits without the usual stress.

  ### 14. Intuitive Compliance Platform with Excellent Support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Mark M. | Managing Partner, Small-Business (50 or fewer emp.)

**Reviewed Date:** February 16, 2026

**What do you like best about Drata?**

I like that Drata is intuitive and serves as a central repository for connecting platforms and collecting audit-ready information. The platform is easy to set up, which is really helpful for someone like me who doesn't know what I’m doing. Also, the team is good and helpful, which I find really useful. I also have many tools integrated into Drata.

**What do you dislike about Drata?**

An audit is a heavy lift, maybe a little more hands-on offerings?

**What problems is Drata solving and how is that benefiting you?**

I use Drata as a central repository for connecting platforms and collecting audit-ready information. The intuitive platform helps me when I'm unsure, and the supportive team is really useful.

**Official Response from Lizzie Higgins:**

> Hi Mark, 

Thanks so much for the feedback here! We're so glad to hear that Drata is helping you to centralize all your platforms and information to be audit-ready and that our team is able to support with helpful guidance along the way. Keep up the great work! 

  ### 15. Effortless Compliance Management and Auditing

**Rating:** 5.0/5.0 stars

**Reviewed by:** Kevin J.

**Reviewed Date:** January 16, 2026

**What do you like best about Drata?**

I think one of Drata's key strengths is its ability to perform framework mapping across compliance frameworks, which greatly reduces redundant work and duplicate work. I also appreciate its monitoring capabilities. Drata provides timely system updates on governance risk and compliance processes, making them more efficient and significantly less burdensome.

**What do you dislike about Drata?**

I would like to be able to manipulate their dashboards a little better, just so I could cater it specifically to what our company needs to see, especially for generating reports to leadership.

**What problems is Drata solving and how is that benefiting you?**

Drata automates our compliance status for risk management and auditing, gives us a clear view of our security posture, identifies real-time risks, and excels in framework mapping across compliance frameworks, reducing redundant work.

**Official Response from Lizzie Higgins:**

> Hi Kevin, Thank you for sharing your positive feedback about Drata! We're thrilled to hear that you find our framework mapping and monitoring capabilities so valuable for streamlining compliance processes and getting a clear view of your security posture. Our team also appreciates your suggestion regarding dashboard customization and report generation. Your feedback is crucial in helping us continue to build more value into your Drata experience and we thank you for your partnership!

  ### 16. Slick, Easy-to-Use Experience Across Mac App and Web

**Rating:** 3.0/5.0 stars

**Reviewed by:** Verified User in Staffing and Recruiting | Small-Business (50 or fewer emp.)

**Reviewed Date:** April 29, 2026

**What do you like best about Drata?**

Drata is easy to use, and the user experience is pretty slick in terms of the downloaded app for Mac and the web browser version as well

**What do you dislike about Drata?**

What I didn't like about Rata sometimes the multi factor authentication email doesn't arrive on time. That's really frustrating because you keep on waiting.

**What problems is Drata solving and how is that benefiting you?**

It is helping me stay compliant as far as security is concerned

**Official Response from Lizzie Higgins:**

> Thanks so much for the honest feedback! We're delighted that you're enjoying the UI/UX of the platform and that its helping you stay compliant and prioritize security. It sounds like you've experienced some login issues - of course you can work with support@drata.com to resolve any open issues, but please feel free to reach out directly to myself (lizziehiggins@drata.com) or your account team if you're seeing anything recurring so we can escalate appropriately and get to the bottom of any root causes. Thanks again for the continued partnership! 

  ### 17. Safebase Product Review

**Rating:** 4.5/5.0 stars

**Reviewed by:** Pradeep K. | Sr Risk and Compliance Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 18, 2025

**What do you like best about Drata?**

The ease of securely sharing documentation—with audit trails and granular access controls for different sets of users—has significantly streamlined our process. It eliminated the need for back-and-forth emails, while offering clear visibility into key metrics such as number of views and downloads. I would recommend this solution without hesitation; it's a true value-add for any organization. The trust, support, and partnership we’ve experienced ensure that product-related queries are addressed quickly and effectively. I truly appreciate this strong, customer-centric culture.

**What do you dislike about Drata?**

There are always certain thoughts that come into play and we wanted them as feature, especially when it comes to prioritizing them. However, what seems to be good in the context of Safebase—is a clear mechanism or option to mark these as feature requests is available although it takes time (high-priority) items that require immediate attention

**What problems is Drata solving and how is that benefiting you?**

Lack of Centralized Trust Information:
Solves the problem of scattered documentation by providing a single, centralized trust center.

Inefficient Customer Trust Communication:
Provides a transparent and automated way to share security posture, reducing back-and-forth emails.

Time Delays in Sales Cycles Due to Security Approvals:
Speeds up the sales process by proactively addressing customer security concerns upfront.

No Visibility into Who Accessed Security Docs:
Tracks who viewed or downloaded which documents, improving oversight and auditability.

  ### 18. Transforms Compliance with Seamless Automation

**Rating:** 4.0/5.0 stars

**Reviewed by:** Rahul S.

**Reviewed Date:** December 18, 2025

**What do you like best about Drata?**

I really appreciate how Drata transforms compliance from a stressful, manual process into a seamless, automated system that runs in the background, keeping me continuously audit-ready without slowing down my business. I find it most powerful when paired with other tools in our compliance and security stack due to its wide integration, eliminating the need to manually bridge gaps. I also find the initial setup straightforward thanks to its guided onboarding and Quick Start process.

**What do you dislike about Drata?**

The main areas where Drata could improve are around customization, integration depth, and cost. I love its automation but often find limitations when workflows get complex.

**What problems is Drata solving and how is that benefiting you?**

Drata solves compliance issues by automating evidence collection, continuous monitoring, and policy management. It replaces manual, error-prone processes, keeping me audit-ready without slowing down my business.

  ### 19. Outstanding Support and Partnership Make Compliance a Breeze

**Rating:** 5.0/5.0 stars

**Reviewed by:** Kim W. | Compliance Analyst, Mid-Market (51-1000 emp.)

**Reviewed Date:** November 05, 2025

**What do you like best about Drata?**

The partnership and support we've received from our Drata team have been exceptional. Sierra Alvarez, our Customer Success Manager, and Christina from support have both consistently gone above and beyond to help me organize our SOC 2 controls and prepare for the audit. Their prompt responses and expertise made what could have been a complicated process much more manageable, and Sierra's collaborative approach has truly helped me stay on track and sane throughout.

**What do you dislike about Drata?**

The SOC 2 control mapping and evidence alignment process seems tedious and time consuming,   the platform is powerful, but it could benefit from more streamlned control mapping and control reassignments.

**What problems is Drata solving and how is that benefiting you?**

Drata is streamlining and automating many aspects of our SOC 2 framework, which helps minimize the risk of human error and provides QuikQ with greater confidence that our controls stay compliant and ready for audits. This will also save us a significant amount of time.

  ### 20. Robust Compliance Tool with a Steep Learning Curve

**Rating:** 4.5/5.0 stars

**Reviewed by:** Amanda S.

**Reviewed Date:** October 31, 2025

**What do you like best about Drata?**

I find Drata extremely useful for complete document organization, alerts, compliance, and security across the board. The alert system stands out for its ability to integrate with tools like Slack and Linear, which enhances my workflow seamlessly. I also appreciate the templates for policies and recommendations that Drata makes; they provide valuable guidance and save me time in setting up our compliance processes. What truly sets Drata apart is the extraordinarily helpful support from Alex Hamilton and Tina, who are patient and knowledgeable, assisting me in learning how to optimize and best use Drata. As I become more familiar with the system, I'm increasingly able to leverage its full potential, which is a significant factor in my decision to continue using and considering repurchasing Drata. The combination of these features and the excellent customer support makes Drata an invaluable tool for me and my organization.

**What do you dislike about Drata?**

{"I find the initial setup of Drata very difficult, and I felt a lack of sufficient onboarding support.","I'm also frustrated by the extensive knowledge required to effectively use Drata. I wish there were more accessible and responsive chat support, similar to the experience I have with Gusto, to quickly answer questions.","I believe Drata would benefit from having chat support available 24/7 to address issues and learning curves more efficiently."}

**What problems is Drata solving and how is that benefiting you?**

Drata organizes documents, provides alerts, aids compliance and security. It integrates well with our tools and offers policy templates and recommendations, enhancing our compliance efficiency.

  ### 21. Effortless Compliance, User-Friendly Interface

**Rating:** 4.5/5.0 stars

**Reviewed by:** Lei C.

**Reviewed Date:** January 09, 2026

**What do you like best about Drata?**

I find Drata to be a really effective tool for company compliance, and I don't see any reason to use another or change it. It's overall very easy to navigate, and the interface is not complicated, which is good for those using it for the first time.

**What do you dislike about Drata?**

I wish there was an option where we didn't have to manually provide evidence if there's already a connection with our HR platform. The sync with Rippling isn't too much of an issue, but it could be improved.

**What problems is Drata solving and how is that benefiting you?**

Drata is an effective tool for company compliance. I find it easy to navigate, with a simple interface suitable for first-time users, making it unnecessary to switch to another tool.

**Official Response from Lizzie Higgins:**

> Hello Lei! Thank you for sharing your positive experience with Drata. We're pleased to hear that you find it easy to navigate and user-friendly. We understand your feedback about HR evidence and the sync with Rippling, and will surface to the correct product teams. We look forward to the continued partnership, and would love for you to keep the feedback coming! Thanks again :) 

  ### 22. Simplifies SOC 2 Compliance with Ease

**Rating:** 4.5/5.0 stars

**Reviewed by:** Baron S. | Director of Software Architecture

**Reviewed Date:** December 11, 2025

**What do you like best about Drata?**

I like that Drata is easy to use and has great customer service. The evidence library is the feature we use the most, as it plays a big part in our SOC 2 compliance efforts, and it integrates with other features well. Drata itself was very easy to set up and continues to be easy to use, even though there was a learning curve because we were new to SOC 2 compliance.

**What do you dislike about Drata?**

It seems that the automated testing is what gives us the most problems. At least once a year, there's kind of a significant problem with the automated testing that requires interaction with their support team.

**What problems is Drata solving and how is that benefiting you?**

I use Drata to navigate the complexities of SOC 2 compliance, like implementing controls, creating policies, doing automated testing, and managing risks.

  ### 23. The Document and Security solution for companies that just want it done and done right.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Dan V. | Head of Security and Business Systems, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 13, 2025

**What do you like best about Drata?**

Drata makes creating policies and following frameworks easy and straight forward.  Security is necessary at all companies now and so many companies are trying to re-invent the wheel.  Why?  Drata gives you what you need to pass your audits and do it right, without trying to re-invent what security is.  Its a one stop shop for security professionals to keep their companies in the green in all senses of the word.  We will continue to use Drata and it will enable us to grow without worrying about if we are doing it right.  We know we are because we use Drata.

**What do you dislike about Drata?**

I wish there were even easier way to fill out the templates for the policies.  Allow more boxes to fill in the "stuff" that matters to your company.

**What problems is Drata solving and how is that benefiting you?**

We are a small shop and we don't have extra money for all the bells and whistles that other companies want to sell you.  However, that didnt' matter with Drata, we are able to monitor our users devices for security and compliance, while also doing User access reviews, and sending out our vendor surveys so we can stay in complaince.  All from a single pane of glass.

  ### 24. Easy-to-Use Interface That Simplifies Ecosystem Configuration

**Rating:** 5.0/5.0 stars

**Reviewed by:** Gabriel Hernando F. | Data Analyst, Small-Business (50 or fewer emp.)

**Reviewed Date:** April 30, 2026

**What do you like best about Drata?**

The easiness of the interface, and how everything is align so you can configure you entire ecosystem with such ease

**What do you dislike about Drata?**

That the inventory section could make some improvements so i can track hardware on real time

**What problems is Drata solving and how is that benefiting you?**

Is a platform that allows you to certify on any standard that you desire for your company (HIPPA, SOC, ISO 27001, etc)

**Official Response from Lizzie Higgins:**

> Hi Gabriel - Thanks so much for the feedback! We're so glad to hear that you're finding Drata's UI easy to use and that its helping your team to simplify your GRC ecosystem configurations. We'll also be sure to keep your feedback about the asset inventory in mind as we continue to enhance the platform. Thank you for the continued partnership! 

  ### 25. Helpful and responsive

**Rating:** 4.5/5.0 stars

**Reviewed by:** Joellene B. | Sr. GRC Analyst, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 06, 2025

**What do you like best about Drata?**

SafeBase continues to be one of my favorite platforms to use on a daily basis. Its suite of tools—AIQA, the Knowledge Base, and the Security Portal—provides significant value to our customers and our internal teams alike. On top of that, the support from the SafeBase team has always been exceptional.

Crystal Culver, our Customer Success contact, has been instrumental in our success with the platform. She is consistently helpful, highly responsive, and always in the loop on internal updates—whether it's new features, tools, or upgrades to existing tools. I particularly appreciate her efforts in getting us early access to beta programs that are relevant to our needs. Her proactive communication and expertise make it seem like we are the most important customer in SafeBase's book of business.

**What do you dislike about Drata?**

I wouldn't call it a dislike; however, it would be helpful to have a way to send documents within the portal to a customer contact as PDF's that are watermarked for their specific company when there is apprehension to logging into a portal.

**What problems is Drata solving and how is that benefiting you?**

SafeBase has been instrumental in centralizing the documentation that our customers and prospects frequently request during contract negotiations and renewals. The Knowledge Base feature streamlines our workflow by storing and surfacing responses to commonly asked questions, significantly reducing the time spent on repetitive tasks. As a small team, we’ve found the AIQA tool especially valuable—it continues to evolve and has meaningfully accelerated the completion of our security questionnaires from start to finish.

  ### 26. Broken UI/UX and Unexplained Platform Changes

**Rating:** 1.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** April 13, 2026

**What do you like best about Drata?**

The recent improvement in vendor management and risk management module and the addition of evidence library,

**What do you dislike about Drata?**

The UI, UX is very broken, everytime you exit a page you will end up in an unintuitive place. Integrations are still limited compared to other products. So many unexpected things happen in the platform, data and settings changes, without the customer service providing the proper explanation.

**What problems is Drata solving and how is that benefiting you?**

Compliance.

**Official Response from Ashley Hyman:**

> I want to thank you for your review. While we are disappointed to hear your feedback, all feedback is valuable. I would love to connect with you to learn more and then work with our product team to dig into what you are seeing. We did role out a new UI that you have the ability to opt into, and I want to ensure you are taking advantage of that update.
Please email at ashley@drata.com . Looking forward to hearing from you!

Thank you so much!
Ashley Hyman 
VP of Customer Experience 

  ### 27. Drata Made SOC 2 Type 2 Simple with Easy Setup and Strong Integrations

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jeremy M. | Director of IT, Mid-Market (51-1000 emp.)

**Reviewed Date:** February 19, 2026

**What do you like best about Drata?**

Drata simplified the process of attaining the SOC 2 Type 2 and works well with integrations.   Easy to use, easy implementation, Good Support, its used every day, and has good features.

**What do you dislike about Drata?**

I wish it had more integrations as we have many

**What problems is Drata solving and how is that benefiting you?**

Drata helped us manage and attaining our SOC 2 Type 2

**Official Response from Lizzie Higgins:**

> Thank you very much for the feedback! We love to hear that your team is using Drata daily to simplify your SOC 2 program. We are also so happy that the set up, integrations, and support were easy for you to use! 

  ### 28. DRATA’s Easy Interface and Rapid Updates with Lots of Features

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** March 08, 2026

**What do you like best about Drata?**

The Interface and ease of use are two key things for me within DRATA along with the loads of features that are available. However, there is another aspect to it, which is the upgrades that are moved to the platform are quite quick and to the business needs.

**What do you dislike about Drata?**

having access to more frameworks could be an option. limitation of connection that can be created if there are more than 2 apps used under same category.

**What problems is Drata solving and how is that benefiting you?**

GRC and automation around it.

**Official Response from Lizzie Higgins:**

> Thank you for the feedback! We're so glad to hear that you find the interface easy to use and appreciate the rapid updates and added features. Our team is constantly working to deliver more value as you build and maintain trust in your organization. 

  ### 29. Be aware of their sales people,- Platform, Resources, and Documentation Are OK

**Rating:** 2.0/5.0 stars

**Reviewed by:** Verified User in Printing | Small-Business (50 or fewer emp.)

**Reviewed Date:** February 09, 2026

**What do you like best about Drata?**

The platform, resources, and documentation are ok.

**What do you dislike about Drata?**

Be aware of their salespeople who overpromise and underdeliver (they promised us a letter signed by their CSM director that we could show to our prospects, saying that we have started the process of getting a certification). Their sales handover to the CSM was horrible. A lot of confusion, multiple contacts, and very little clarity.

They are not "holding your hand" through the process as they sell it out to be. They are also not for startups as they brand themselves to be.

**What problems is Drata solving and how is that benefiting you?**

Is 27001 preparation

**Official Response from Ashley Hyman:**

> HI There,
First of all, I really appreciate your feedback here. And I apologize your experience has been less than optimal thus far. I'd love to connect with you directly to review your feedback in detail. Please email me at ashley@drata.com. 
We do provide a letter of assertion you can provide to your customers stating you've started using the platform to meet your compliance goals. I can help you to get that in place as well.
We looking forward to connecting with you so we can ensure your experience moving forward is improved.
Thanks so much!
Ashley Hyman
VP of Customer Experience

  ### 30. Outstanding Experience with This Software

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Logistics and Supply Chain | Small-Business (50 or fewer emp.)

**Reviewed Date:** December 03, 2025

**What do you like best about Drata?**

Tracking and monitoring the controls and requirements to accomplish the targeted frameworks

**What do you dislike about Drata?**

It takes some time to see the changes reflected in the application

**What problems is Drata solving and how is that benefiting you?**

Tracking and monitoring the controls and requirements to accomplish the targeted frameworks

  ### 31. Convenient Training and Compliance Management

**Rating:** 4.5/5.0 stars

**Reviewed by:** John J.

**Reviewed Date:** November 19, 2025

**What do you like best about Drata?**

I primarily use Drata for training, which is extremely convenient for me. I really appreciate how it helps me stay on top of compliance, especially given how busy we are. The setup process was straightforward and easy when I initially installed it, which was a pleasant surprise. Additionally, Drata appears to effectively manage important functions like antivirus and hard drive encryption, which adds to its value. Overall, it operates better than I had initially expected, and I'm quite satisfied with its performance, as reflected in my high likelihood of recommending it to others.

**What do you dislike about Drata?**

Nothing comes to mind right now. I've only been using it for about a year.

**What problems is Drata solving and how is that benefiting you?**

I use Drata for managing compliance training, which helps me stay on top of requirements and is convenient for my busy schedule.

  ### 32. Streamlining customer security requests

**Rating:** 5.0/5.0 stars

**Reviewed by:** Zack B. | Director, Customer Security Assurance, Enterprise (> 1000 emp.)

**Reviewed Date:** July 23, 2025

**What do you like best about Drata?**

When we were evaluating companies in this space, we had two goals: improve our Trust Center experience, and find a provider that had a reliable AI capability for questionnaire support. Since becoming a SafeBase customer, they have done both for us tremendously! Our customer experience has improve greatly by using their Trust Center technology, and our team is completing more questionnaires, more quickly with the help of their AI questionnaire assist. It also helps our employees that are not security experts find reliable information that they can pass onto their customers. Mary Wiley is our wondering CSM and is always helping us improve!

**What do you dislike about Drata?**

They are VERY excited about new AI features when I feel they can still make improvements on the fundamentals of the product. I understand the need to innovate and provide customers with exciting capabilities, but I wish they'd work on perfecting key areas such as multi-product support, document management, and other areas that could use improvement still.

**What problems is Drata solving and how is that benefiting you?**

Streamlining customer requests and questionnaire assistance

  ### 33. Prompt Support, Effortless Access

**Rating:** 5.0/5.0 stars

**Reviewed by:** Saraiah Z. | Small-Business (50 or fewer emp.)

**Reviewed Date:** March 02, 2026

**What do you like best about Drata?**

I like how quickly Drata responded and how polite they were. It was also easy to contact customer support since the button was right at the top, and they responded immediately. Additionally, the initial setup of Drata was very easy for me.

**What do you dislike about Drata?**

Nothing I can think of

**What problems is Drata solving and how is that benefiting you?**

Drata solved my email authorization issue and allowed me to access my account easily. The customer service was quick, helpful, and polite, making it easy to contact support when needed.

**Official Response from Lizzie Higgins:**

> Thank you so much for the feedback! We're delighted to hear that your set up experience was easy, and that the support process was helpful, quick, and kind when you needed it. 

  ### 34. Cost-effective solution

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Translation and Localization | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 16, 2025

**What do you like best about Drata?**

Ease of use, ease of implementation, ease of integration, Number of features, customer support.

**What do you dislike about Drata?**

Support for on premise solutions and limitations on custom integration.

**What problems is Drata solving and how is that benefiting you?**

GRC Tool used to help our company achieve SOC2 compliance.

  ### 35. Simple to set up and use - greatly sped up accreditation timelines

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.)

**Reviewed Date:** October 31, 2025

**What do you like best about Drata?**

Simple to use and get set up with the different connections to automate some of the controls. Good policy templates that passed our audit. Drata agent was simple to install across our devices and helped with the automation as well.

Advice on each control evidence was extremely useful to speed up evidence gathering.

Good recommendation for audit partner in the UK who specialised in earlier stage companies.

Support seems very good, even at the lower price tiers.

**What do you dislike about Drata?**

There were a couple of additional policies that I would have liked some guidance on or basic examples of. The balance of integration audit partners is heavily to the US (to be expected) but would like some more options for UK / EU based providers in the future.

**What problems is Drata solving and how is that benefiting you?**

Limited resources as an early stage company needing to demonstrate compliance quickly

  ### 36. Drata's smooth experience

**Rating:** 5.0/5.0 stars

**Reviewed by:** Omar H. | Cyber Security Engineer, Small-Business (50 or fewer emp.)

**Reviewed Date:** July 17, 2025

**What do you like best about Drata?**

Drata is very easy and intuitive to use, it saves a lot of intensive manual work, and we use if very frequently. The support is very responsive and fast, one of the best support teams we have dealt with. The implementation phase was also easy in terms of setting up the connections, integrations, and just kicking off the process. Drata supports a wide range of integrations too!

**What do you dislike about Drata?**

Maybe one downside which is really specific is that there is no support for asset-based risk assessment, which is totally fine since there is a scenario-based risk assessment section that is well documented and supported and contains many features.

**What problems is Drata solving and how is that benefiting you?**

Drata is helping us with getting certified in SOC2, ISO27001, and GDPR. It's helping us with policy writing, control mapping, framework understanding, risk assessment, asset inventory, vendor management, awesome integrations, and automated monitoring of controls as well as giving us a dashboard to measure our progress.

  ### 37. All Our Compliance Requirements in One Place

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 28, 2026

**What do you like best about Drata?**

Its keep all of our compliance requirements in one place

**What do you dislike about Drata?**

Would like it to have more integration ability

**What problems is Drata solving and how is that benefiting you?**

It helps us to stay on track for our SOC II audits and compliance

**Official Response from Lizzie Higgins:**

> We're pleased to hear that Drata is helping you stay on track for your SOC 2 audits and compliance. We appreciate your feedback about integrations, and would love to hear if you have any specifically in mind. You can reach out to our support team anytime with feature requests or ideas. Keep up the great work! 

  ### 38. Effortless Security Documentation and Client Trust

**Rating:** 5.0/5.0 stars

**Reviewed by:** Alejandro Z. | Intake Specialist, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 09, 2025

**What do you like best about Drata?**

I like how SafeBase makes it easy to manage and share security documentation with customers. The platform is very organized, transparent, and user-friendly, which helps streamline security reviews and builds trust with clients.

**What do you dislike about Drata?**

One thing I dislike is that some of the customization options feel limited, especially when tailoring the security portal to specific customer needs. Additionally, a few features could be more intuitive to navigate.

**What problems is Drata solving and how is that benefiting you?**

SafeBase helps streamline the entire security review process by centralizing all security documents, certifications, and questionnaires in one place. This reduces back-and-forth with customers, speeds up security assessments, and saves me time. It also improves transparency and builds trust by giving clients easy access to the information they need.

  ### 39. Very bad dont recomend at all

**Rating:** 0.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** June 10, 2026

**What do you like best about Drata?**

didnt like anything about the company specially the onboarding process we spent so much time on it

**What do you dislike about Drata?**

sale process was a big lie they sell a very short process of onboarding but in fact it was a very long we spent so much resources on it

**What problems is Drata solving and how is that benefiting you?**

sapuse to solve speed up maintenance and control of regulation in practice its make more work

**Official Response from Ashley Hyman:**

> Thank you for sharing this feedback. We’re sorry to hear your onboarding experience felt longer and more resource-intensive than expected. That’s not the experience we aim to provide, and we understand how frustrating that can be. We take this feedback seriously and are continuing to improve both our onboarding process and the expectations we set upfront. 
In an effort to continue learning and improving, I’d welcome the opportunity to connect directly to better understand your experience. Please feel free to reach out to me at ashley@drata.com. Again, we appreciate you taking the time to share your feedback.

Sincerely, 
Ashley Hyman 
VP of Customer Experience 

  ### 40. Powerful compliance automation, but support can be slow

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** September 23, 2025

**What do you like best about Drata?**

Drata makes it much easier to stay on top of compliance tasks that would otherwise take countless hours. The integrations with cloud services and tools pull in evidence automatically, which saves time and reduces manual work. The dashboards and automated workflows give great visibility into what’s on track and what needs attention. Overall, it’s a strong system that helps streamline compliance.

**What do you dislike about Drata?**

While the system is powerful, some areas can be confusing to navigate at first, and documentation isn’t always clear enough to answer every question. When reaching out to support, the response time can feel too long, which slows down momentum when you’re trying to resolve an issue quickly. Faster turnaround on support and more intuitive guidance in the platform would make the experience even better.

**What problems is Drata solving and how is that benefiting you?**

Drata helps us automate and simplify the compliance process, especially for SOC 2. Instead of chasing screenshots, spreadsheets, and reminders, we can rely on integrations to continuously collect the right evidence from our systems. This saves a huge amount of time for our team, reduces the risk of missing something important, and gives us confidence when preparing for audits. It also makes it easier to show partners and customers that we take security and compliance seriously, which builds trust.

  ### 41. Great platform with a ton of features and excellent account management

**Rating:** 5.0/5.0 stars

**Reviewed by:** Alejandro R. | Infrastructure Project Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 09, 2025

**What do you like best about Drata?**

The application truly provides a great template for GRC.  Everything from personnel management, risk management, policy maintenance, framework compliance and access review is a standard feature within the application. It allows organizations to be as involved (or not) as they want.  It also has easy to use integrations to multiple platforms.  
Account management and support are also equally as important.  Drata has both.  Even with my organization's internal resource transition, our customer success manager Ben, was ready to assist with the plethora of questions any new user would have.  He continually provided supplemental information via self-help links, and was quick to respond to questions via  a call or email.  The times that we had to involve support our success manager was involved until a resolution was found.

**What do you dislike about Drata?**

The application is very expansive; it has a ton features.   Greener organizations may find it difficult to understand how all the modules are interrelated.

**What problems is Drata solving and how is that benefiting you?**

Policy maintenance 
SOC2 audit repository and guidelines
Vendor Management
Risk Management
Personnel Compliance Management

  ### 42. Easy to Use Platform with Great Customer Service

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 28, 2026

**What do you like best about Drata?**

Easy to use platform, and good customer service

**What do you dislike about Drata?**

Nothing yet to complain about, happy with their service

**What problems is Drata solving and how is that benefiting you?**

Providing a trust center for our customers- enforces reputation and trust

**Official Response from Lizzie Higgins:**

> We appreciate your kind words about our platform and customer service and we look forward to the continued partnership as we build trust together! 

  ### 43. Great Team Collaboration and Templates That Make Work Easier

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 28, 2026

**What do you like best about Drata?**

I like having a team to work with and templates

**What do you dislike about Drata?**

a steep learning curve  and kind of hard to use

**What problems is Drata solving and how is that benefiting you?**

SOC2 compliance and document acknowledgement

**Official Response from Lizzie Higgins:**

> Thank you for your feedback! We're thrilled that you find the team collaboration and templates helpful. We also appreciate the feedback about the learning curve, and we're here to help. Our team just recently launched a Drata Academy, which you can check out here - https://academy.drata.com/. We look forward to your continued partnership, and if you ever have more ideas about how we can increase the ease of use, feel free to reach out to support any time! 

  ### 44. Efficient Compliance Management, Needs UI Enhancements

**Rating:** 3.5/5.0 stars

**Reviewed by:** Tapan P.

**Reviewed Date:** December 18, 2025

**What do you like best about Drata?**

I appreciate Drata because it eases the management of our SOC2 (Type I) compliance. I like the control and evidence management features, which make it easy to track completed, pending, or in-process controls and tasks with related evidence. Additionally, the integration with our internal tools and applications for control monitoring and automation adds value to our workflow.

**What do you dislike about Drata?**

Need more better user interface and evidence repository management. There's also scope for adding country or region specific cyber security and data privacy laws or rules as notified by respective governments.

**What problems is Drata solving and how is that benefiting you?**

I use Drata for SOC2 compliance, easing compliance management by tracking controls and related evidence efficiently.

  ### 45. Drata - Our Compliance Partner

**Rating:** 5.0/5.0 stars

**Reviewed by:** Dominik G. | Chief Compliance Officer, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 14, 2025

**What do you like best about Drata?**

Drata is proactive, timely, and professional — whenever there’s a problem, help is never far away; the team is friendly and professional, the AI and human help options save valuable time, the well-structured management software is easy to implement and easy to use, I use it daily multiple times, and Drata is the best solution we’ve ever tried.

**What do you dislike about Drata?**

I honestly can’t think of a single thing to dislike about Drata.

**What problems is Drata solving and how is that benefiting you?**

Drata automates the entire compliance process, making audits far less time-consuming and reducing management overhead. Its pre-mapped controls and tests are perfect for inexperienced users and teams just starting out, while its vendor management and review features orchestrate the whole process seamlessly. It keeps us on track with all audit-related tasks, ensuring nothing falls through the cracks.

  ### 46. Smooth Setup, Essential for Compliance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Seren T. | Senior Business Developer

**Reviewed Date:** October 10, 2025

**What do you like best about Drata?**

I appreciate Drata’s setup process, which was quick and clear, with any issues resolved swiftly. I find the integration features particularly beneficial, as it automates many compliance checks. The compliance advisors chatbot is also a great help, providing quick answers when I have questions.

**What do you dislike about Drata?**

Initially, I found it challenging to fully understand how the control framework and evidences were connected, which was confusing. Additionally, there seems to be inconsistency with the compliance adviser's chatbot responses. Sometimes it answers 'yes' to a question, and other times it says 'no' to the same question, which shakes my confidence in its reliability. I would like this function to be updated regularly to ensure it meets my needs accurately.

**What problems is Drata solving and how is that benefiting you?**

Drata helps us understand compliance requirements and makes information upload easy, proving our legitimacy to clients and ensuring data security.

  ### 47. Effortless Setup and Promising Governance Features

**Rating:** 5.0/5.0 stars

**Reviewed by:** John K. | IT Compliance Manager, Enterprise (> 1000 emp.)

**Reviewed Date:** December 17, 2025

**What do you like best about Drata?**

I am enjoying the experience working on transitioning from my prior GRC tool to Drata. Although I have not fully explored all the functionality of Drata, it looks like it will be extremely useful. I'm working with the compliance frameworks, building them out for my environments, setting up vendor risk management surveys, and risk management.

**What do you dislike about Drata?**

I wish Drata had the ability for policies to be visible to any user, not just to those who have acknowledged them. I also wish Drata supported PCI DSS targeted risk assessment.

**What problems is Drata solving and how is that benefiting you?**

Drata replaced my previous GRC tool, which was not sufficient for my needs.

  ### 48. Drata Makes Continuous Audit Readiness Easy with Real-Time Compliance Visibility

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** February 19, 2026

**What do you like best about Drata?**

I like how Drata automates compliance and provides real-time visibility, making audit readiness continuous instead of manual and stressful.

**What do you dislike about Drata?**

Sometimes the UI can feel overwhelming, and certain integrations or customizations require more manual effort than expected.

**What problems is Drata solving and how is that benefiting you?**

Drata helps automate and streamline the SOC 2 compliance process by continuously collecting evidence, monitoring controls, and keeping us audit-ready, which saves time, reduces manual effort, and lowers compliance risk.

**Official Response from Lizzie Higgins:**

> Thank you so much for the helpful feedback. We're so happy that the real time visibility provided by Drata's continuous monitoring and evidence collection is reducing your compliance risk as well as your stress! 

  ### 49. The value proposition is immediate

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** September 01, 2025

**What do you like best about Drata?**

I use Drata daily in my workflow and coming from legacy GRC platforms, the vision of multi-framework compliance testing is a no-brainer. I cannot count how many times I've said and heard phrases such as "minimize overlap" and "let's not retread ground" throughout my career. Drata is the first platform that's actually made me feel like these were more than platitudes, and more importantly, actually easy to implement! Drata's feature set is lean and targeted. There is no bloat and it cuts straight to the point. 

Drata's integrations streamline and reduce tens of hours of manual evidence collection. When we encounter applications without pre-programmed integration, our support from Drata has been timely and knowledgeable in helping us navigate our options. I think it's valuable to hire former auditors who know the inside as guidance setters.

**What do you dislike about Drata?**

Drada's default policy guidance seems to lean towards more is better. As a former auditor myself, I know that auditors can only judge you based on what you give them so I feel like Drata's approach of covering all corners is not the right strategy when dealing with external auditors.

**What problems is Drata solving and how is that benefiting you?**

Automating PCI-DSS and (eventually) our SOC2 program compliance.

  ### 50. Robust Security with User-Centric Support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Courtney G.

**Reviewed Date:** December 29, 2025

**What do you like best about Drata?**

What I like most about Drata is its user-centric format, and when we need help, tech support is fast and reliable. The initial setup of Drata for our team was very easy. We had a resource from Drata available if we needed it, but it was very self-explanatory and user-centric.

**What do you dislike about Drata?**

Sometimes logging on can be a challenge. Recently, a few of us had issues with our logins, but we did get that resolved.

**What problems is Drata solving and how is that benefiting you?**

I use Drata for data security, ensuring everything is safe and there's no data leaks.


## Drata Discussions
  - [Hard Disk Encryption](https://www.g2.com/discussions/hard-disk-encryption) - 1 comment, 2 upvotes
  - [How are others coping with slower support, chatbot inconsistencies, and login / chat issues?](https://www.g2.com/discussions/how-are-others-coping-with-slower-support-chatbot-inconsistencies-and-login-chat-issues) - 1 comment, 1 upvote
  - [Has anyone else felt friction between Drata’s control depth and their own compliance approach or frameworks?](https://www.g2.com/discussions/has-anyone-else-felt-friction-between-drata-s-control-depth-and-their-own-compliance-approach-or-frameworks) - 1 comment, 1 upvote
  - [What’s your workaround when Drata’s integrations and automation do not go deep enough?](https://www.g2.com/discussions/what-s-your-workaround-when-drata-s-integrations-and-automation-do-not-go-deep-enough) - 1 comment, 1 upvote
  - [How are you all dealing with confusing navigation and policy / control relationships in Drata?](https://www.g2.com/discussions/how-are-you-all-dealing-with-confusing-navigation-and-policy-control-relationships-in-drata) - 1 comment, 1 upvote

- [View Drata pricing details and edition comparison](https://www.g2.com/products/drata/reviews?page=2&section=pricing&secure%5Bexpires_at%5D=2026-07-21+03%3A13%3A21+-0500&secure%5Bsession_id%5D=cb515d43-b780-44e3-8cbb-03c0ba97211a&secure%5Btoken%5D=d1e35344741d6845670bfa0868b6d6e72babf46f4a72db9f008137b083a2f121&format=llm_user)
## Drata Integrations
  - [1Password](https://www.g2.com/products/1password/reviews)
  - [360Learning](https://www.g2.com/products/360learning/reviews)
  - [ADP Workforce Now](https://www.g2.com/products/adp-workforce-now/reviews)
  - [Agentforce Sales (formerly Salesforce Sales Cloud)](https://www.g2.com/products/agentforce-sales-formerly-salesforce-sales-cloud/reviews)
  - [Aha!](https://www.g2.com/products/aha/reviews)
  - [Aikido Security](https://www.g2.com/products/aikido-security/reviews)
  - [AlexisHR](https://www.g2.com/products/alexishr/reviews)
  - [Amazon EC2](https://www.g2.com/products/amazon-ec2/reviews)
  - [Arnica](https://www.g2.com/products/arnica/reviews)
  - [Asana](https://www.g2.com/products/asana/reviews)
  - [AWS Cloud9](https://www.g2.com/products/aws-cloud9/reviews)
  - [AWS CodeCommit](https://www.g2.com/products/aws-codecommit/reviews)
  - [AWS Fargate](https://www.g2.com/products/aws-fargate/reviews)
  - [AWS Lambda](https://www.g2.com/products/aws-lambda/reviews)
  - [AWS Organizations](https://www.g2.com/products/aws-organizations/reviews)
  - [Azure Portal](https://www.g2.com/products/azure-portal/reviews)
  - [Azure SQL Database](https://www.g2.com/products/azure-sql-database/reviews)
  - [BambooHR](https://www.g2.com/products/bamboohr/reviews)
  - [Basecamp](https://www.g2.com/products/basecamp/reviews)
  - [Bitbucket](https://www.g2.com/products/bitbucket/reviews)
  - [Bitwarden](https://www.g2.com/products/bitwarden/reviews)
  - [Box](https://www.g2.com/products/box/reviews)
  - [Certn](https://www.g2.com/products/certn/reviews)
  - [CharlieHR](https://www.g2.com/products/charliehr/reviews)
  - [ChartHop](https://www.g2.com/products/charthop/reviews)
  - [Checkr](https://www.g2.com/products/checkr-inc-checkr/reviews)
  - [Checkr](https://www.g2.com/products/checkr/reviews)
  - [CircleCI](https://www.g2.com/products/circleci/reviews)
  - [ClearCompany](https://www.g2.com/products/clearcompany/reviews)
  - [ClearFeed](https://www.g2.com/products/clearfeed/reviews)
  - [ClickUp](https://www.g2.com/products/clickup/reviews)
  - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews)
  - [Confluence](https://www.g2.com/products/confluence/reviews)
  - [Cornerstone](https://www.g2.com/products/cornerstone-cornerstone/reviews)
  - [Coursera for Business](https://www.g2.com/products/coursera-for-business/reviews)
  - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews)
  - [CrowdStrike Falcon Exposure Management](https://www.g2.com/products/crowdstrike-falcon-exposure-management/reviews)
  - [CyberArk Workforce Identity](https://www.g2.com/products/cyberark-workforce-identity/reviews)
  - [Darwinbox](https://www.g2.com/products/darwinbox/reviews)
  - [Datadog](https://www.g2.com/products/datadog/reviews)
  - [Dayforce](https://www.g2.com/products/dayforce/reviews)
  - [Deel HR](https://www.g2.com/products/deel-hr/reviews)
  - [Docebo](https://www.g2.com/products/docebo/reviews)
  - [Docusign](https://www.g2.com/products/docusign/reviews)
  - [Dropbox](https://www.g2.com/products/dropbox/reviews)
  - [Duo](https://www.g2.com/products/duo/reviews)
  - [EasyLlama](https://www.g2.com/products/easyllama/reviews)
  - [Employment Hero](https://www.g2.com/products/employment-hero/reviews)
  - [Factorial](https://www.g2.com/products/factorial/reviews)
  - [Fibery](https://www.g2.com/products/fibery/reviews)
  - [Freshdesk](https://www.g2.com/products/freshdesk/reviews)
  - [Freshservice](https://www.g2.com/products/freshservice/reviews)
  - [Freshteam by Freshworks](https://www.g2.com/products/freshteam-by-freshworks/reviews)
  - [Front](https://www.g2.com/products/front/reviews)
  - [GitHub](https://www.g2.com/products/github/reviews)
  - [GitLab](https://www.g2.com/products/gitlab/reviews)
  - [Go1](https://www.g2.com/products/go1-go1/reviews)
  - [GoodHire (a Checkr company)](https://www.g2.com/products/goodhire-a-checkr-company/reviews)
  - [Google Cloud Run](https://www.g2.com/products/google-cloud-run/reviews)
  - [Google Workspace](https://www.g2.com/products/google-workspace/reviews)
  - [Gusto](https://www.g2.com/products/gusto/reviews)
  - [Harness](https://www.g2.com/products/harness-wealth-harness/reviews)
  - [Height](https://www.g2.com/products/height/reviews)
  - [Hexnode UEM](https://www.g2.com/products/hexnode-uem/reviews)
  - [HiBob HRIS](https://www.g2.com/products/hibob-hris/reviews)
  - [HireRight](https://www.g2.com/products/hireright/reviews)
  - [Hive](https://www.g2.com/products/hive-hive-hive/reviews)
  - [HubSpot Sales Hub](https://www.g2.com/products/hubspot-sales-hub/reviews)
  - [Humaans](https://www.g2.com/products/humaans/reviews)
  - [Huntress Managed Security Awareness Training](https://www.g2.com/products/huntress-managed-security-awareness-training/reviews)
  - [Hyperproof](https://www.g2.com/products/hyperproof/reviews)
  - [Infosec IQ](https://www.g2.com/products/infosec-iq/reviews)
  - [Insperity](https://www.g2.com/products/insperity/reviews)
  - [Intellihr.com](https://www.g2.com/products/intellihr-com/reviews)
  - [Intruder](https://www.g2.com/products/intruder/reviews)
  - [Ironclad](https://www.g2.com/products/ironclad/reviews)
  - [Iru](https://www.g2.com/products/iru/reviews)
  - [Jamf](https://www.g2.com/products/jamf/reviews)
  - [Jenkins](https://www.g2.com/products/jenkins/reviews)
  - [Jira](https://www.g2.com/products/jira/reviews)
  - [Jira Service Management](https://www.g2.com/products/jira-service-management/reviews)
  - [Jit](https://www.g2.com/products/jit/reviews)
  - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews)
  - [Justworks](https://www.g2.com/products/justworks/reviews)
  - [Kallidus](https://www.g2.com/products/kallidus/reviews)
  - [KarmaCheck](https://www.g2.com/products/karmacheck/reviews)
  - [Keka](https://www.g2.com/products/keka/reviews)
  - [KnowBe4 Security Awareness Training](https://www.g2.com/products/knowbe4-security-awareness-training/reviews)
  - [LastPass](https://www.g2.com/products/lastpass/reviews)
  - [Lattice](https://www.g2.com/products/lattice-lattice/reviews)
  - [Linear](https://www.g2.com/products/linear/reviews)
  - [LinkedIn Learning](https://www.g2.com/products/linkedin-linkedin-learning/reviews)
  - [Lukka](https://www.g2.com/products/lukka/reviews)
  - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews)
  - [Microsoft Defender Vulnerability Management](https://www.g2.com/products/microsoft-defender-vulnerability-management/reviews)
  - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews)
  - [Microsoft Intune Enterprise Application Management](https://www.g2.com/products/microsoft-intune-enterprise-application-management/reviews)
  - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews)
  - [miniOrange Identity & Access Management](https://www.g2.com/products/miniorange-identity-access-management/reviews)
  - [Namely](https://www.g2.com/products/namely/reviews)
  - [New Relic](https://www.g2.com/products/new-relic/reviews)
  - [NinjaOne](https://www.g2.com/products/ninjaone/reviews)
  - [Notion](https://www.g2.com/products/notion/reviews)
  - [Objectivity/DB](https://www.g2.com/products/objectivity-db/reviews)
  - [Officient](https://www.g2.com/products/officient/reviews)
  - [Okta](https://www.g2.com/products/okta/reviews)
  - [OneLogin](https://www.g2.com/products/onelogin/reviews)
  - [Orca](https://www.g2.com/products/cortez-labs-orca/reviews)
  - [Oyster](https://www.g2.com/products/oyster-oyster/reviews)
  - [Paychex](https://www.g2.com/products/paychex/reviews)
  - [Paycor](https://www.g2.com/products/paycor/reviews)
  - [Paylocity](https://www.g2.com/products/paylocity/reviews)
  - [PeopleFluent Learning](https://www.g2.com/products/peoplefluent-peoplefluent-learning/reviews)
  - [Personio](https://www.g2.com/products/personio/reviews)
  - [Qualys VM](https://www.g2.com/products/qualys-vm/reviews)
  - [Rapid7 Managed Detection and Response Services](https://www.g2.com/products/rapid7-managed-detection-and-response-services/reviews)
  - [Rippling](https://www.g2.com/products/rippling/reviews)
  - [SafeBase](https://www.g2.com/products/safebase/reviews)
  - [Sage HR](https://www.g2.com/products/sage-hr/reviews)
  - [Salesforce Heroku](https://www.g2.com/products/salesforce-heroku/reviews)
  - [SAP SuccessFactors Onboarding](https://www.g2.com/products/sap-successfactors-onboarding/reviews)
  - [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews)
  - [SentinelOne Singularity Vulnerability Management](https://www.g2.com/products/sentinelone-singularity-vulnerability-management/reviews)
  - [ServiceNow Customer Service Management](https://www.g2.com/products/servicenow-customer-service-management/reviews)
  - [Shortcut](https://www.g2.com/products/shortcut/reviews)
  - [Slack](https://www.g2.com/products/slack/reviews)
  - [Slack Connector for Jira](https://www.g2.com/products/slack-connector-for-jira/reviews)
  - [Snyk](https://www.g2.com/products/snyk/reviews)
  - [Swif.ai](https://www.g2.com/products/swif-ai/reviews)
  - [TeamWork](https://www.g2.com/products/teamwork-2025-01-31/reviews)
  - [Tenable Vulnerability Management](https://www.g2.com/products/tenable-vulnerability-management/reviews)
  - [Tines](https://www.g2.com/products/tines/reviews)
  - [Torq](https://www.g2.com/products/torq-ai-torq/reviews)
  - [Travis CI](https://www.g2.com/products/travis-ci/reviews)
  - [Tray.ai](https://www.g2.com/products/tray-ai/reviews)
  - [Trello](https://www.g2.com/products/trello/reviews)
  - [TriNet](https://www.g2.com/products/trinet/reviews)
  - [Udemy Business](https://www.g2.com/products/udemy-business/reviews)
  - [UKG Pro](https://www.g2.com/products/ukg-pro/reviews)
  - [UKG Ready](https://www.g2.com/products/ukg-ready/reviews)
  - [Upwind](https://www.g2.com/products/upwind/reviews)
  - [Vetty](https://www.g2.com/products/vetty/reviews)
  - [Wiz](https://www.g2.com/products/wiz-wiz/reviews)
  - [Wiz Code](https://www.g2.com/products/wiz-code/reviews)
  - [Workday Learning](https://www.g2.com/products/workday-learning/reviews)
  - [Workspace ONE](https://www.g2.com/products/workspace-one/reviews)
  - [Wrike](https://www.g2.com/products/wrike/reviews)
  - [XFA](https://www.g2.com/products/xfa/reviews)
  - [Zendesk for Customer Service](https://www.g2.com/products/zendesk-for-customer-service/reviews)
  - [Zip](https://www.g2.com/products/zip-2025-09-24/reviews)
  - [Zoho BugTracker](https://www.g2.com/products/zoho-bugtracker/reviews)
  - [Zoho CRM](https://www.g2.com/products/zoho-crm/reviews)
  - [Zoho Desk](https://www.g2.com/products/zoho-desk/reviews)
  - [Zoho People](https://www.g2.com/products/zoho-people/reviews)

## Drata Features
**Security**
- Compliance Monitoring
- Anomoly Detection
- Cloud Gap Analytics

**Functionality**
- Questionnaire Templates
- User Access Control

**Generative AI**
- AI Text Summarization
- AI Text Generation

**Generative AI**
- AI Text Generation
- AI Text Summarization

**AI Compliance**
- Regulatory Reporting
- Automated Compliance
- Audit Trails

**Agentic AI - Vendor Management**
- Decision Making

**Revenue Recognition**
- Usage Tracking
- Deferred Revenue
- Revenue Accrual

**Compliance**
- Governance
- Data Governance
- Sensitive Data Compliance

**Risk assessment**
- Risk Scoring
- Monitoring And Alerts
- AI Monitoring

**Workflows - Audit Management**
- Audit Trail
- Recommendations
- Collaboration Tools
- Integrations
- Planning & Scheduling

**Risk Management & Monitoring**
- AI Risk Management
- Real-time Monitoring

**Generative AI - Security Compliance**
- Predictive Risk
- Automated Documentation

**Platform AI Features - Policy Management**
- Reports
- Workflow Management

**Security**
- Data Security
- Data loss Prevention
- Security Auditing

**Administration**
- Policy Enforcement
- Auditing
- Workflow Management

**Documentation - Audit Management**
- Templates & Forms
- Checklists

**AI Lifecycle Management**
- Lifecycle Automation

**Generative AI - Vendor Security and Privacy Assessment**
- Text Summarization
- Text Generation

**Identity**
- SSO

**Reporting & Analytics - Audit Management**
- Dashboard
- Audit Performance
- Industry Compliance

**Access Control and Security**
- Pole-based Access Control (RBAC)

**Collaboration and Communication **
- Model Sharing and Reuse

**Agentic AI - AI Governance Tools**
- Autonomous Task Execution
- Multi-step Planning
- Cross-system Integration
- Adaptive Learning
- Natural Language Interaction
- Proactive Assistance
- Decision Making

## Top Drata Alternatives
  - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,630 reviews)
  - [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews) - 4.9/5.0 (1,311 reviews)
  - [Hyperproof](https://www.g2.com/products/hyperproof/reviews) - 4.5/5.0 (217 reviews)