--- title: Drata Reviews meta_title: 'Drata Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 1333 reviews by the users' company size, role or industry to find out how Drata works for a business like yours. aggregate_rating: rating_value: 4.7 review_count: 1333 scale: '5' date_modified: '2026-07-23' parent_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- # Drata Reviews **Vendor:** Drata **Category:** [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance) **Average Rating:** 4.7/5.0 **Total Reviews:** 1,333 ## About Drata Founded in 2020 and headquartered in San Francisco, California, Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Born from experience in mission-critical aerospace work and the painful reality of manual security audits, Drata was created to turn trust into an always-on state instead of a point-in-time exercise. Today, the Drata Agentic Trust Management Platform helps more than 8,500 organizations worldwide build continuous trust across the cloud and prove their posture to customers, partners, and auditors. Drata unifies governance, risk, compliance, and assurance so security and GRC teams can manage everything in one place. Drata's core capabilities include Automated Governance to streamline policy management, control monitoring, evidence collection, and access reviews; Integrated Risk Management to centralize internal and third-party risk with real-time visibility and ownership; Continuous Compliance to automate evidence collection and control testing across frameworks; and Accelerated Security Assurance to show your security posture in real time and shorten review cycles while supporting faster, more confident sales and vendor decisions. Together, these capabilities deliver Continuous Real-Time Trust, Enterprise-Grade Flexibility, and Agentic AI Productivity. Drata continuously monitors controls, flags risks immediately, and makes always-current proof easy to share so you're demonstrating effective security every day—not just at audit time. The platform scales across multiple frameworks and connects to hundreds of tools to fit complex environments, and AI-driven automation helps assess vendors, collect evidence, and draft questionnaire responses—eliminating repetitive manual work, reducing operational overhead, and turning assurance into a strategic business enabler for modern, trust-driven organizations. ## Drata Pros & Cons **What users like:** - Users commend the **exceptional customer support** from Drata, enhancing their compliance and security management experience. (135 reviews) - Users value the **intuitive design** of Drata, making setup and integration seamless and efficient for everyone. (115 reviews) - Users highlight the **automation of compliance monitoring** in Drata, significantly easing reporting processes and enhancing efficiency. (109 reviews) - Users value the **time-saving automation** of Drata, streamlining compliance tasks and simplifying audits significantly. (96 reviews) - Users value the **seamless integrations** of Drata, enhancing functionality by connecting various platforms effortlessly. (89 reviews) - Automation (78 reviews) - Users find Drata to be **simple to use and set up** , enhancing automation and support for audit processes. (77 reviews) - Easy Integrations (75 reviews) - Easy Setup (67 reviews) - Team Helpfulness (62 reviews) **What users dislike:** - Users find Drata's **limited integrations** frustrating, wishing for broader support for third-party tools and self-hosted versions. (43 reviews) - Users face **integration issues** with Drata, leading to a challenging transition and unexpected manual effort required. (38 reviews) - Users note that **configuration limitations** and complex transitions hinder a seamless experience with Drata. (35 reviews) - Users find the **lack of clarity** in Drata's UI can complicate the audit process and task management. (28 reviews) - Users find the **UX confusing at times** , making it difficult to identify missing tasks and necessary fixes. (22 reviews) - Limited Customization (20 reviews) - Policy Management (18 reviews) - Users find Drata’s services to be **expensive** , especially for startups looking for cost-effective compliance solutions. (15 reviews) - Lack of Customization (15 reviews) - Users desire **additional features** for formatting, better user interface, and more integrations for improved functionality. (15 reviews) ## Drata Reviews ### 1. Robust Security with User-Centric Support **Rating:** 5.0/5.0 stars **Reviewed by:** Courtney G. **Reviewed Date:** December 29, 2025 **What do you like best about Drata?** What I like most about Drata is its user-centric format, and when we need help, tech support is fast and reliable. The initial setup of Drata for our team was very easy. We had a resource from Drata available if we needed it, but it was very self-explanatory and user-centric. **What do you dislike about Drata?** Sometimes logging on can be a challenge. Recently, a few of us had issues with our logins, but we did get that resolved. **What problems is Drata solving and how is that benefiting you?** I use Drata for data security, ensuring everything is safe and there's no data leaks. ### 2. Very User-Friendly Platform with Great Support and Sales Staff **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Sports | Mid-Market (51-1000 emp.) **Reviewed Date:** June 19, 2026 **What do you like best about Drata?** Very user-friendly platform with a great support and sales staff. **What do you dislike about Drata?** Nothing to dislike thus far. Im new to the product and its been great. **What problems is Drata solving and how is that benefiting you?** The biggest problem solver ive witnessed is leveraging their AIQA to assist with questionaires. **Official Response from Lizzie Higgins:** > Thank you for the feedback! We're thrilled to hear that you're enjoying your experience with Drata so far and that AIQA is helping with your questionnaires. Please keep the feedback coming, and we'll pass along the kudos to our support and sales team! ### 3. Fantastic platform and even better CSM! **Rating:** 5.0/5.0 stars **Reviewed by:** Jim G. | CIO, Mid-Market (51-1000 emp.) **Reviewed Date:** July 09, 2025 **What do you like best about Drata?** We really like the fact that it has several views on the controls, we also like that it is helping us get through SOC2 and ISO at the same time. It was easy to rollout - everyone was good to go with one walk through (I found doing a 1x1 with Exec was easiest) **What do you dislike about Drata?** When you leave a page, nothing is saved so you have to save your settings that you had already put in SOC/ISO(compliance) , readiness, etc. Super annoying. If you hit the back button on the browser, it will take you there, but if you have opened a lot of items - it takes forever **What problems is Drata solving and how is that benefiting you?** Help us get to SOC2 and ISO compliance. The templates in the Policies were fantastic! Really saved us a lot of time ### 4. Great Features and Extraordinary Customer Support **Rating:** 4.5/5.0 stars **Reviewed by:** Serdar T. | Internal IT support Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** May 28, 2025 **What do you like best about Drata?** I really appreciated the video tutorials – even with a strong tech background, I found them helpful in understanding various Drata functions. https://help.drata.com/en/collections/9595024-welcome-to-drata . So the documentation is great and I really care about it. Also, Drata taught almost everything. this is really great. For example, there is an available sercurity awareness trainings and we can just enable it. The content is rich and enough **What do you dislike about Drata?** as far as I understand and read, one of Drata’s main goals is to automate controls, but unfortunately, our Background Check and MDM solutions are not currently supported or listed among the available integrations. I would have expected broader vendor support. Yes, Drata offers Drata agent. this is good and we can also provide That said, I’ve already submitted requests to enable integrations for our existing solutions. **What problems is Drata solving and how is that benefiting you?** There are many requirements for passing audits, and Drata helps consolidate everything into one centralized platform. You can manage users, assign and track security training, configure automated controls, and monitor compliance—all in one place. Without Drata, these processes become fragmented and difficult to manage. Additionally, we benefit from free customer support, which allows us to ask questions and get timely assistance when needed. ### 5. A weight off our mind **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Mental Health Care | Small-Business (50 or fewer emp.) **Reviewed Date:** August 12, 2025 **What do you like best about Drata?** As a small engineering team we needed a compliance solution that gave us confidence in what we were doing, pointers for what to do next, and help at every stage with documentation. Drata reached that benchmark and surpassed it. The customer support experience was particularly excellent. Sending in a ticket by email and seeing it immediately update in application and get resolved almost immediately felt like a premium, bespoke service on top of the already excellent automation of the Drata platform. An inspiration for us as a great relief to feel so supported. **What do you dislike about Drata?** Pushing guidance into an initial onboarding isn't ideal for us. We want to get some tasks done immediately, and then come back to explore the other things later. In some cases we were a little puzzled when exploring e.g., the risk assessments page as to how to proceed. **What problems is Drata solving and how is that benefiting you?** Helping us complete HIPAA compliance as a small team and automating the monitoring of compliance going forwards. ### 6. Good Control Mapping Across Different Frameworks **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Services | Small-Business (50 or fewer emp.) **Reviewed Date:** February 02, 2026 **What do you like best about Drata?** Good control mapping across different frameworks. Drata is easy to use and makes it simpler to manage certifications. **What do you dislike about Drata?** Drata doesn’t support a Quality Management System. As a result, organizations with an ISO 9001 certificate can’t use the Drata Policy Management System as a single, central point for managing their policies. **What problems is Drata solving and how is that benefiting you?** It helps us stay SOC 2, ISO 27001, and HIPAA certified with minimal effort. **Official Response from Lizzie Higgins:** > Thank you so much for the feedback! We truly appreciate hearing that our control mapping is helping you minimize the effort it takes to manage your program across different frameworks. We have also raised your thoughts on a QMS system for ISO 9001 policies to the product team as well. Thank you again, and keep up the great work! ### 7. Great CSM and platform experience **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** August 29, 2025 **What do you like best about Drata?** Responsiveness of customer success manager. **What do you dislike about Drata?** Some things can only be configured by contacting the CSM. Switching from another compliance platform to Drata is far less seamless than the marketing suggests. * Drata has more (or different) automatic tests than our old compliance platform and therefore infrastructure changes had to be done. * Some stuff like log retention is hard coded in automated tests and cannot be changed. Currently this value is 356 days. We have everything setup with 90 days for SOC 2 compliance and this now makes our transition harder. **What problems is Drata solving and how is that benefiting you?** Where possible we centralize our security insights in Drata, this gives us a nearly 100% insight in one place. We also use it for compliance monitoring and SOC 2 audits. Drata also bought safe base which we are also using right now for trust center + security questionnaire filling support. ### 8. Proactive Trust Center, Fast AIQA—Needs Better Multi-Org Support **Rating:** 4.5/5.0 stars **Reviewed by:** Asad M. | Security Compliance Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** October 30, 2025 **What do you like best about Drata?** Safebase not only allows us to proactively address customer questions by providing relevant information from the Trust Center and the AIQA feature helps us rapidly turn around questionnaires we get rather than manually addressing all the questions. **What do you dislike about Drata?** Safebase lacks the ability for multi-organizational support for larger enterprises and needs to remediate the issue of being able support larger organizations with subsidiaries under one umbrella. **What problems is Drata solving and how is that benefiting you?** reducing friction during customer security reviews ### 9. Simplicity and Design Win with SafeBase **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User | Enterprise (> 1000 emp.) **Reviewed Date:** May 29, 2026 **What do you like best about Drata?** I like the simplicity of SafeBase. I also appreciate the design and the support by David. The initial setup was very smooth. Everything works well. **What do you dislike about Drata?** I like everything **What problems is Drata solving and how is that benefiting you?** It helps make us legit in front of customers. **Official Response from Lizzie Higgins:** > We're thrilled to hear that you appreciate the platform's simplicity, design, and support provided by the team. We're committed to providing a smooth setup and reliable functionality for our customers so you can continue to build trust with yours. Keep up the great work! ### 10. Ben Chau one on one training **Rating:** 5.0/5.0 stars **Reviewed by:** mayra B. | Security Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** August 01, 2025 **What do you like best about Drata?** What I like most about drata is the user support is great. Ben really took his time to ensure I was confident after walking out of the training. He held 2 sessions, one hour each. He was willing to answer any and all my questions as we worked together on drata. He is very knowledgeable and taught me knew things about drata that I hadn't yet known about. Ben is no longer our rep but he made it very clear he was always willing to help if Nick was ever out of office or if we had any questions. **What do you dislike about Drata?** To be honest I have nothing bad to say about Drata. Ben such a great job explaining everything that there is noting I would change. He was great! **What problems is Drata solving and how is that benefiting you?** Drata is preparing our company to be SOC 2 Type II compliant and helping our company better manage our controls. ### 11. Compliance Team is Amazing **Rating:** 5.0/5.0 stars **Reviewed by:** Nick D. | Director of Cybersecurity and IT, Small-Business (50 or fewer emp.) **Reviewed Date:** May 30, 2025 **What do you like best about Drata?** The best part of Drata is the customer support. Seraphina has been incredibly helpful—clear, responsive, and always thoughtful in her guidance. During our audit, she provided practical advice that helped us move forward with confidence. Combined with Drata’s intuitive interface and ease of use, the platform makes managing compliance far less daunting. It’s more than just a tool—it’s a true compliance ally. **What do you dislike about Drata?** I really do not have anything I dislike about the platform. **What problems is Drata solving and how is that benefiting you?** Drata is solving the problem of fragmented and manual compliance workflows. It brings everything into one place—evidence collection, control tracking, vendor management—and automates what used to be a time-consuming process. The intuitive interface makes it easy to stay on top of tasks, and the integrations cut down on duplicate effort. It’s saving us time, reducing audit prep stress, and helping us maintain a stronger security posture year-round. ### 12. Great product and best support **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** April 04, 2025 **What do you like best about Drata?** Drata has provided a great platform to begin our ISO-27001 journey. There are so many aspects of this certification and Drata has simplified it in many ways. We had so many questions regarding the policies, etc. and Drata has helped us enormously. **What do you dislike about Drata?** The tool has some limitations- and one of the most annoying is the inability to store my list/filter settings in the controls, personnel, etc. We have so many people that for it to show only 20 items at a time is a waste of my time. Also, when I go to the controls, I sort by policy number, not alphabetical and I have to reset that *every* time I use the app. **What problems is Drata solving and how is that benefiting you?** It's a one-stop for us to write the policies, have personnel acknowledge those, has security awareness training, and maps tasks/evidence to the policies via controls. This makes is so much easier to work through the requirements for ISO-27001. On top of it, it's very easy to see where we are missing something. ### 13. ChatBot to Live Support Person **Rating:** 4.0/5.0 stars **Reviewed by:** CJ H. | COO, Small-Business (50 or fewer emp.) **Reviewed Date:** August 07, 2025 **What do you like best about Drata?** Its really prescriptive, easy to follow. The Quick Start feature really gets you down the path without having to create your own detailed plan. Its intuitive - requires very little training and easy to pick up where you left off, even after a long time away. I also have also had some really great experiences with live customer support. Terrious did a great job of addressing my issue today, allowing me to keep to scheduled tasking for this week. Also Kelsey was super attentive while we were getting started. **What do you dislike about Drata?** I have not been deep enough in the product as of yet. The only thing I can say is as we are getting into policies, it would be great if you could differentiate between technical policy setup vs policy documentation, and have templates for the policy documentation we need to create. **What problems is Drata solving and how is that benefiting you?** ISO 27001 compliance ### 14. Strong Framework Structure and Seamless Connections **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** March 18, 2026 **What do you like best about Drata?** Framework structure and connections with different sources for tests. **What do you dislike about Drata?** Generic policy templates. Not many connectors available in comparison with other tools. **What problems is Drata solving and how is that benefiting you?** Compliance roadmap. Fast deployment. Governance, audit readiness and view from customers. **Official Response from Lizzie Higgins:** > Thanks so much for the feedback! We're glad to hear that you appreciate Drata's framework structure and seamless connections. Its wonderful that Drata is enabling your team to move quickly without sacrificing trust and governance. Thank you for sharing your thoughts, and helping us to continually improve the platform! ### 15. Drata and SOC2 **Rating:** 5.0/5.0 stars **Reviewed by:** Sheldon W. | Director, Information Technology, Mid-Market (51-1000 emp.) **Reviewed Date:** October 02, 2025 **What do you like best about Drata?** I found the platform straightforward to use, with a high level of integration that made my experience smooth. The support teams were outstanding, always ready to help. Additionally, the AI provided valuable assistance with policy matters. **What do you dislike about Drata?** A few of the policy templates lacked clarity regarding versioning, and the process of importing policies felt awkward and cumbersome. **What problems is Drata solving and how is that benefiting you?** We first engaged a consultant to determine the cost of having an external firm provide us with SOC2 compliance. However, the proposals we received were too expensive for our company. Fortunately, we found that working with Drata allowed us to achieve our goals at a much lower cost. ### 16. Peace of mid for keep compliant **Rating:** 5.0/5.0 stars **Reviewed by:** Aaron M. | Head of IT projects, Computer Software, Small-Business (50 or fewer emp.) **Reviewed Date:** May 20, 2025 **What do you like best about Drata?** It did not take us long to figure out how Drata worked and set up for our organisation. For anything we could not figure out they responded very fast to keep us on track. It was very easy to integrate with our other services and you will be surprised how many other tools they can collect date from. the initial setup takes quite a while but once you are complete you only need to login once a day for a few minuets to check you are compliment and fix and issue that have happened. **What do you dislike about Drata?** So far not really had any downsides. When we have not understood something the team has very fast worked it out with us. **What problems is Drata solving and how is that benefiting you?** Drata is solving the issues of making sure you continually monitor and get evidence for all compliance needs through out the year. ### 17. Solid product, helpful support **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** December 14, 2023 **What do you like best about Drata?** - Most important integrations are available and easy to setup - Drata Agent as lightweight MDM solution - Simple UI which gets the job done - REST API to build custom workflows - OOTB policy templates with guidance - Customer support is friendly, helpful and usually quick to respond - Trust page **What do you dislike about Drata?** - While SOC 2 is well documented in the help center, ISO 27001 is not always mentioned as well. - More integrations that could be helpful **What problems is Drata solving and how is that benefiting you?** Drata is helping us building and improving processes around compliance and security. It has helped us preparing us for ISO 27001:2022. ### 18. Good for Vendor Management, Needs Better Integration **Rating:** 4.0/5.0 stars **Reviewed by:** Bryan H. **Reviewed Date:** December 11, 2025 **What do you like best about Drata?** I like using Drata for vendor management and security reviews. The security review feature helps us in selecting vendors, which is quite valuable. Overall, Drata is good. **What do you dislike about Drata?** I'm experiencing issues with Drata, specifically the chat feature which keeps throwing unexpected errors, making the survey process not valuable. The integration with Zip and Azure needs improvement. **What problems is Drata solving and how is that benefiting you?** I use Drata for vendor management and compliance, especially through its Security review, which helps us in selecting vendors. ### 19. Effortless Automation and Integrations with Robust Features **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** November 20, 2025 **What do you like best about Drata?** Ease of use. Automated NDA. Integrations. Number of features. **What do you dislike about Drata?** If only it could manage our Security Questionnaires that we receive from customers fully. **What problems is Drata solving and how is that benefiting you?** SafeBase gives us one place to store and share all of our security documentation, which has really cut down on the constant back-and-forth during security reviews. With automated NDA gating, controlled document access, and easy sharing, it saves our security, sales, and legal teams a lot of time that used to be spent answering the same requests over and over. ### 20. A Reliable Partner in Trust and Transparency **Rating:** 5.0/5.0 stars **Reviewed by:** Mariana R. | GRC analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** July 04, 2025 **What do you like best about Drata?** The best part of the experience was definitely the customer support. I was assisted by Crystal Culver and Daisy Hernandez, and they were outstanding! Extremely kind, attentive, always clarified my questions, and were flexible when needed. Their support was excellent, and I would recommend the service to anyone based on that alone. The platform is intuitive and flexible. I also really appreciated the self-serve approach. Everything is well documented and easy to follow, which means I can find what I need and take action without confusion or constantly needing assistance. It integrates well with other tools commonly used in the industry, which makes our workflow smoother. The response time when opening support tickets was also fast and efficient. **What do you dislike about Drata?** When working with the Trust Center, I felt the customization of the cards could be more flexible and user-friendly. It’s a minor issue, but improving that aspect would enhance the experience even more. **What problems is Drata solving and how is that benefiting you?** SafeBase is helping us centralize and manage our security documentation in a way that’s both efficient and customer-friendly. Instead of juggling multiple requests and sharing documents manually, we now have a single, organized hub where everything lives, our policies, certifications, and audit reports are all up to date and accessible. This not only saves us time internally, especially when responding to security questionnaires, but also helps us present a much more mature and trustworthy posture to our customers and prospects. The Trust Center acts like a living proof point of our compliance and commitment to security. It’s taken a process that used to be scattered and reactive and turned it into something structured, proactive, and easy to maintain. Overall, SafeBase is cutting down on the back-and-forth, improving transparency, and making our security program more scalable. **Official Response from Caroline Maier:** > Thank you Mariana for your thoughtful review! We're especially grateful that you highlighted our support team members Crystal Culver and Daisy Hernandez. They exemplify the care and commitment we aim to bring to every customer interaction, and it's wonderful to hear their attentiveness and flexibility made such a positive impact on your experience. We're also thrilled that the platform's intuitive, self-serve design and integrations are helping streamline your workflows. Empowering users to take action with confidence—without unnecessary friction—is one of our core goals, and it's great to know the documentation and support experience backed that up. Thank you again for your kind words and recommendation. We're excited to keep building alongside you and supporting your continued success. —The SafeBase Team ### 21. Best Support and deep IT Ecosystem **Rating:** 4.5/5.0 stars **Reviewed by:** Mohammed Anwar S. | Product Specialist, Small-Business (50 or fewer emp.) **Reviewed Date:** May 20, 2025 **What do you like best about Drata?** Drata stands out not only for its advanced SOC2 process automation, which is more manageable and easy to start using their templates and third party connections which automatically bring the signals and provide you a overview of your compliance, but also for providing excellent assistance. Their Onboarding team also provides a clear explanation of what to expect and how to navigate their portal effectively. **What do you dislike about Drata?** We've been using Drata for a couple of months now and haven't run into any problems we don't like. Another point will like to mention be sure of what you get in standard offer. Sometime Add-ons which you later encounter you need them can be expensive. **What problems is Drata solving and how is that benefiting you?** Drata helps us to integrate our IT infrastructure seemingly into their portal providing you a super convenience to track and monitor your compliance progress. ### 22. Exceptional Support Makes Compliance Seamless **Rating:** 5.0/5.0 stars **Reviewed by:** Eugene A. | Solutions Architect, Small-Business (50 or fewer emp.) **Reviewed Date:** February 15, 2025 **What do you like best about Drata?** While Drata excels at streamlining compliance automation—simplifying everything from SOC 2 to ISO 27001—it's their support team that truly enhances the user experience. The team's readiness to assist, combined with their deep understanding of compliance challenges, has made a significant difference in our ability to maintain and improve our governance frameworks. This level of support is what sets Drata apart in the crowded field of GRC platforms. **What do you dislike about Drata?** We have been using Drata for several years now and are happy to say we haven't found anything to dislike **What problems is Drata solving and how is that benefiting you?** Drata's continuous compliance monitoring and streamlined processes significantly benefit our company by keeping our systems consistently aligned with security standards and simplifying compliance. This not only ensures we are always audit-ready but also allows us to focus on our core operations without the burden of complex compliance tasks. ### 23. Drata has streamlined our compliance process with great support and onboarding. **Rating:** 4.5/5.0 stars **Reviewed by:** Shireen T. | AI Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** May 22, 2025 **What do you like best about Drata?** Drata has been a valuable tool in simplifying our compliance and security processes. The onboarding experience was smooth, and their customer support has been consistently responsive and helpful. The overall experience has been positive, and I would definitely recommend Drata to others looking to streamline their compliance efforts. **What do you dislike about Drata?** While most integrations work well, a few didn’t fully meet our expectations. **What problems is Drata solving and how is that benefiting you?** Drata is helping me automate and manage our security compliance processes, which used to be really manual and time-consuming. It's made it much easier to stay audit-ready, track controls, and collect evidence without constantly chasing down documentation. The continuous monitoring gives me peace of mind, and it's definitely saved our team a lot of time and effort. It’s also helped us build credibility with customers by showing we take security seriously ### 24. Outstanding Support and Policy Management Platform **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.) **Reviewed Date:** December 12, 2025 **What do you like best about Drata?** This platform is excellent for monitoring and creating your policies, but what truly stands out is the helpfulness of their professionals. **What do you dislike about Drata?** During the startup phase, you are likely to experience an overwhelming amount of information. The sheer volume can make the process feel far from intuitive. **What problems is Drata solving and how is that benefiting you?** The platform ensures that I have all the necessary controls and the correct policies in place for our SOC2 and ISO27001 compliance. ### 25. Good but implementation heavy, needs more features for mature capabilities **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.) **Reviewed Date:** June 25, 2025 **What do you like best about Drata?** The interface is clear and straightforward, easy to navigate, has a lot of options to cover different areas of GRC. When fully implemented, it can be very useful. Convenient - A lot of auditors are familiar with Drata and can integrate their audits into Drata, both internal and external. The support teams are responsive. **What do you dislike about Drata?** Lack of customization, which limits capabilities. Implementation is more complex than was estimated. The implementation team could benefit from prioritizing the features of Drata that give the most value to each organization, instead of basically going through a checklist of Drata features that may not save the org any time/effort. The audit hub is very basic at this point and doesn't give much visibility into the progress of an audit. I will also include that, if you have a repository of past evidence in your auditor's portal, you will not have that when you go through an audit in Drata. Some of our users have complained that it felt like going through our first audit, when they were unsure what evidence is needed for each control. **What problems is Drata solving and how is that benefiting you?** Control documentation and evidence collection ### 26. Exceptional Compliance Support & Automation **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.) **Reviewed Date:** June 24, 2025 **What do you like best about Drata?** Drata has been a game-changer for our compliance program. From seamless evidence collection to real-time monitoring of control effectiveness, it’s given us back hours each week. Integrations with Jira, AWS, and other tooling mean everything just “talks” to Drata without extra effort. Their dedicated compliance support team has been outstanding, providing tailored guidance, swift responses, and deep expertise at every turn. You also get a glimpse into what's coming and can submit suggestions for features in the portal. **What do you dislike about Drata?** Its built-in control templates aren’t always flexible enough for fully bespoke workflows, and integrations with niche or legacy systems can require manual workarounds. **What problems is Drata solving and how is that benefiting you?** Drata addresses the headache of scattered, manual evidence gathering by automatically pulling configuration snapshots, user access logs, and policy attestations from your tech stack; it eliminates the risk of compliance drift by continuously monitoring control health and flagging deviations in real time; and it streamlines audit preparation by organizing all artifacts and mapping them directly to relevant PCI DSS requirements. As a result, we spend far less time chasing down screenshots or spreadsheet entries, gain clear visibility into our compliance posture at any moment, and enter audits with confidence—knowing that our controls are both documented and functioning as intended. ### 27. Effortless Compliance with Drata's Intuitive Features **Rating:** 4.5/5.0 stars **Reviewed by:** Timothy C. **Reviewed Date:** August 20, 2025 **What do you like best about Drata?** I appreciate Drata's simplicity in guiding us through the compliance process, making it easy to set up and maintain. Its real-time synchronization ensures our operations stay up-to-date. I'm impressed by the policy templates and the useful integrations, particularly the connectors for different types of vulnerability scanners, which keep everything connected seamlessly. **What do you dislike about Drata?** While I find the integrations and connectors in Drata great, I wish they were even more simplified. I believe there could be more development work done to enhance the system, potentially incorporating AI to guide users through the process with greater ease. **What problems is Drata solving and how is that benefiting you?** I use Drata to achieve SOC 2 compliance easily, benefiting my company and clients, with real-time integration and useful policy templates ensuring seamless compliance maintenance. ### 28. A Game-Changer for SOC 2, CCPA, and Third-Party Risk Management **Rating:** 5.0/5.0 stars **Reviewed by:** Sulaiman J. | Director of Information Security & IT, Mid-Market (51-1000 emp.) **Reviewed Date:** March 18, 2025 **What do you like best about Drata?** As the Information Security & IT Director at YCharts, I'm responsible for our SOC 2 and CCPA compliance, along with managing our third-party risk. Drata has been a fantastic partner in automating and streamlining these efforts. Drata's real-time monitoring, seamless integrations, and intuitive dashboard has made our SOC 2 compliance effortless. Drata continuously tracks our security posture, evidence, and policies. While the Drata platform and technology is greater, the real differentiator has been our Customer Success Manager, Elizebeth. Her wealth of knowledge and expertise in SOC 2 compliance has been invaluable, wheather we need guidance on compliance updates, or details on current controls. **What do you dislike about Drata?** One area I think Drata could improve is by improving and increasing it's integrations with other Security and IT tools. **What problems is Drata solving and how is that benefiting you?** As YCharts grew we knew that becoming SOC 2 and or ISO 27001 compliance was essential for building our customer trust. When we started compliance journey and was in search for a solution that could provide expert guidance to help us navigate compliance, Drata was the answer. ### 29. Clarity and support that has helped us grow **Rating:** 5.0/5.0 stars **Reviewed by:** Dan L. | Head of R&D, Small-Business (50 or fewer emp.) **Reviewed Date:** March 27, 2025 **What do you like best about Drata?** Take what you will from that fact that I've enjoyed learning about and implementing these data privacy and security frameworks, but I attribute a lot of that enjoyment to the value we've gotten from working with Drata. They've been an essential partner in our startup’s growth, streamlining our GRC and compliance efforts with clarity, transparency, and exceptional support. Their platform makes it easy to navigate complex requirements, the Compliance Accelerator program has been a major asset in helping us quickly align with industry standards, and the integration with SafeBase’s Trust Center has elevated how we can communicate our security posture—clean, modern, and confidence-inspiring for both prospective partners and customers. Their documentation is extensive and accessible, the onboarding and implementation process was quick and clear, and their support team has always been responsive and genuinely helpful. **What do you dislike about Drata?** I don't think there's anything I actively dislike. The help guides could probably be structured more clearly with subheadings/highlights, some of the large tables could be better formatted for either dynamic resizing or pop-out windows, and the help docs overall could use a bit more branded visual flair or character, but that's pretty minor all things considered. **What problems is Drata solving and how is that benefiting you?** Demonstrating our security posture, helping us meet modern GRC requirements quickly, and supporting our ability to grow our business and customer base. ### 30. Compliance Made Easy with Drata **Rating:** 5.0/5.0 stars **Reviewed by:** Victor M. | Risk and Compliance Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** March 25, 2025 **What do you like best about Drata?** Drata's platform is incredibly user-friendly, and their customer support is top-notch. Out of our entire tech stack, only one system required manual input—everything else integrated seamlessly. Whenever we’ve had questions or needed assistance, the support team has been impressively fast and helpful. The platform gives us clear visibility into our compliance posture. **What do you dislike about Drata?** This isn’t specific to Drata, but more of a general limitation across most compliance management systems. It would be great to see more AI-driven features that could automatically map and configure controls based on our environment, reducing the need for manual setup and rule-by-rule customization. The platform is strong, but as compliance becomes more complex, smarter automation would take it to the next level. **What problems is Drata solving and how is that benefiting you?** Before Drata, we were managing our compliance efforts manually in spreadsheets, which was time-consuming and error-prone. Drata centralizes everything, automates evidence collection, and keeps us continuously audit-ready. As a result, we spend far less time on documentation and back-and-forth during audits, allowing us to focus more on actual security improvements and strategy. ### 31. Natural, lightweight, intuitive **Rating:** 5.0/5.0 stars **Reviewed by:** Jean-Francois P. | Architect, Infra Ops and Security, Mid-Market (51-1000 emp.) **Reviewed Date:** March 25, 2025 **What do you like best about Drata?** Drata is an opinionated, lightweight, easy to understand repository for all our compliance information. It does everything we need (and more) which gives us a growth path with the tool, all-the-while aligning us with requirements and making them clear. The automated tests are a bonus, on top of the very clear control management system. Its integration with Slack is fast and efficient, and allows our tech team to keep an eye on control compliance and test status. **What do you dislike about Drata?** I would wish for more native integrations with third-party vendors, since this really where such a tool shines, and more support for self-hosted versions, since we are big proponents of self-hosting. **What problems is Drata solving and how is that benefiting you?** Our previous audits, carried out manually by an external consultancy, lacked a centralised, well-formed and opinionated data collection/repository, which required us (and the external consultant) to hunt for data and required a lot of back-and-forth to come to an agreement as to what is acceptable to be in-scope and not-in-scope without triggering exceptions. There was a lot less upfront clarity, and evidence could not be submitted much in advance, let alone as we go. ### 32. A wonderful tool to help accelerate compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Chris F. | Director, Business Information Systems, Mid-Market (51-1000 emp.) **Reviewed Date:** June 03, 2025 **What do you like best about Drata?** We had an outstanding experience with Drata. The platform was incredibly easy to implement, with intuitive workflows and helpful guidance at every step. Thanks to Drata’s automation and clear compliance roadmap, we moved from onboarding to SOC 2 readiness in record time. Our audit went smoothly and was completed successfully with minimal friction. Drata has been a game-changer for our compliance process - we highly recommended! **What do you dislike about Drata?** While Drata ultimately helped us achieve SOC 2 compliance, there were several challenges along the way. The platform wasn’t as intuitive as we had hoped, and we often found it difficult to understand what was included or required at each step. We relied heavily on support from a third-party implementation partner and our auditor to interpret and navigate the system effectively. Without that external guidance, getting through the process would have been significantly more difficult. We had a few technical issues along the way and their support wasn't always as responsive as we hoped. **What problems is Drata solving and how is that benefiting you?** Automation and organization of our security program to achieve SOC2 ### 33. Structured ISMS and ICS support with strong risk and vendor management **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Program Development | Mid-Market (51-1000 emp.) **Reviewed Date:** April 02, 2026 **What do you like best about Drata?** Structured support in the development of an ISMS and ICS, good risk and vendor management. **What do you dislike about Drata?** Not all areas create documented information, so you are not 100% compliant with ISO27001. **What problems is Drata solving and how is that benefiting you?** Creating a good ISMS structure, Drata supports enormously here! **Official Response from Lizzie Higgins:** > Thanks so much for the feedback! So glad to hear that Drata has been helpful in guiding and structuring your ISMS set up as well as managing your risks and vendors. We'd love to know more about where you'd like to see additional documentation + evidence for ISO 27001. Feel free to send me a note at lizziehiggins@drata.com to chat more about this so we can ensure your feedback gets to the correct team! ### 34. A great compliance tool with real online support people **Rating:** 4.5/5.0 stars **Reviewed by:** Steve H. | Project Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** July 31, 2025 **What do you like best about Drata?** Automations to connect to internal systems and integrations to auditors workflows. The online chat to support people in my time zone is good. **What do you dislike about Drata?** It's a growing company and therefore they are rapidly changing. This can create some small bugs from time to time. Popularity of software can create overload with support resources in non US timezones. **What problems is Drata solving and how is that benefiting you?** Ensures our processes that are compliant are automatically submitted to auditors, saving time and reducing manual work. Ensures that our auditors also use Drata to reduce rework. ### 35. Drata makes SOC2 easy **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.) **Reviewed Date:** September 29, 2025 **What do you like best about Drata?** Our auditor is able to collect evidence directly from Drata and can also create new evidence requests within the platform. This workflow is a significant improvement over my previous experiences, where auditors and I had to use a shared ticketing system and all evidence had to be uploaded manually. **What do you dislike about Drata?** The configuration options for monitors could be more detailed. For instance, I would like the ability to include or exclude specific resources from my AWS scans using regex, but currently, there is no way to achieve this. **What problems is Drata solving and how is that benefiting you?** Streamlining our audit process ### 36. Streamlined SOC 2 Compliance for Startup **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** May 26, 2025 **What do you like best about Drata?** Drata has accelerated and simplified our SOC 2 Type I & II and HIPAA compliance efforts. Onboarding & Policy Management: Drata comes equipped with a library of ready-to-use policy templates that are aligned with major industry standards. This gave us a tremendous head start—eliminating the need to draft policies from scratch or hire external consultants. Drata also automatically maps these policies to the relevant controls across frameworks like SOC 2, ISO 27001, and HIPAA, giving us instant visibility into how our documentation supports our compliance posture. Automation: Drata integrates seamlessly with our Microsoft 365 environment and cloud infrastructure, automatically pulling in the evidence we need. Drata continuously collects and organizes compliance artifacts behind the scenes, saving all the manual effort. Real-Time Monitoring & Intuitive Dashboards: The dashboard is clean, intuitive, and provides actionable insights. If something falls out of compliance—like an unencrypted storage bucket or an employee missing a required security training, Drata will flag this immediately. This constant visibility allows us to stay ahead of issues and maintain a strong compliance posture year-round, rather than scrambling just before an audit. Bottom Line: Drata has saved us weeks of manual work and allowed us to stay compliant without having to grow our compliance team. It’s been a true enabler for our security and compliance operations—and we highly recommend it to any organization looking to scale securely and efficiently. **What do you dislike about Drata?** While our overall experience with Drata has been very positive, we did encounter a bit of back-and-forth during renewals which could have been better managed. **What problems is Drata solving and how is that benefiting you?** SOC 2 and HIPAA compliance ### 37. A Streamlined and Efficient Platform for Sharing Security Posture **Rating:** 5.0/5.0 stars **Reviewed by:** chinenye O. | Senior Compliance Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** July 22, 2025 **What do you like best about Drata?** SafeBase make is easy to share our security and compliance posture in a centralized and streamlined way. It provides a user-friendly experience and streamlines security review. I especially appreciate the excellent customer service. Our Customer Success Manager, Amanda Haniff has been great to work with. She has been very responsive, knowledgeable and proactive in supporting our needs. **What do you dislike about Drata?** I don't have any dislike about SafeBase for now. **What problems is Drata solving and how is that benefiting you?** SafeBase is helping us streamline customer review process by providing centralized and secure platform where we can proactively share our security and compliance documentation. This reduces manual effort and back-and-forth typically required when responding to individual customer security questionnaire. As a result, we are saving time, improving efficiency and enhancing customer experience during assessment. ### 38. Helpful customer service and good controls **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** September 10, 2025 **What do you like best about Drata?** Easy to understand how the controls work and how they are mapped onto specific frameworks. Useful to be able to assign specific owners for different people in the business. Quick response from customer support who are helpful and easy to talk to. **What do you dislike about Drata?** It would be useful to have more international frameworks available such as IRAP. I would like to be able to filter for controls that are about to have evidence that expires soon, not just what is currently ready and not ready. **What problems is Drata solving and how is that benefiting you?** Helps us adhere with frameworks, especially in preparing for our ISO27001 audit. ### 39. Beginning your Compliance journey **Rating:** 5.0/5.0 stars **Reviewed by:** Aengus O. | InfoSec Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** October 06, 2025 **What do you like best about Drata?** Drata gives you a great way to begin a Compliance journey if you don't have people to guide you. **What do you dislike about Drata?** Not much, would be nice to see a Wizer integration. **What problems is Drata solving and how is that benefiting you?** It pulls data from all sorts of sources and gives you a central view/alerting structure. ### 40. Best in the industry **Rating:** 5.0/5.0 stars **Reviewed by:** Alex O. | Staff Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** August 20, 2025 **What do you like best about Drata?** Easy to use dashboard system, Support team (particularly Hunter) was very responsive and provided helpful materials when needed. **What do you dislike about Drata?** None that i can think of. Everything has been easy to setup. It'd be nice to see more in-depth errors of why it something may not be working (i.e `hasMFA` would return null but not tell us *why* it would return null (i.e due to wrong permissions)) **What problems is Drata solving and how is that benefiting you?** Achieving SOC 2 compliance demonstrates our commitment to the highest standards of security and data protection. It establishes a strong foundation of trust with our current clients and sets the stage for building lasting confidence with future partners. ### 41. Excellent support and user-friendly interface **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** July 31, 2025 **What do you like best about Drata?** What impressed me the most about Safebase was, without a doubt, the outstanding support and the amazing people behind the platform. Amanda Haniff's team was always there for us during our recurring meetings and consistently went above and beyond to help , even during unexpected hours when we needed assistance. The platform itself is very user-friendly, with an intuitive interface that makes it easy to navigate and interact with. Plus, the tutorials available online are incredibly thorough and made it easy for our team to get up to speed quickly. I highly recommend Safebase to any team looking for a reliable tool backed by a truly supportive team. **What do you dislike about Drata?** Some of the initial setup processes were more complex than expected, and we found ourselves reaching out to support multiple times to confirm we were on the right track. I would have appreciated having more hands-on support during that phase (someone from the team actively helping us test things and making sure everything was working as expected). **What problems is Drata solving and how is that benefiting you?** SafeBase is helping us streamline the security review process by centralizing and organizing our security posture information in a single, easily shareable Trust Center. ### 42. Great for companies negotiating the hazards of SOC 2 **Rating:** 5.0/5.0 stars **Reviewed by:** Steve M. | VP Product/Engineering, Mid-Market (51-1000 emp.) **Reviewed Date:** October 23, 2024 **What do you like best about Drata?** Their tooling is very good and easy to understand. It's also very flexible for not just SOC 2 but also to be able to set a specific set of SOC 2 policies desired, so it's not just one size fits all. What I really like is the trust portal one can create -- this has been a game changer for me as the defacto CISO having to answer and endless stream of security questionairres. I now point them to our trust portal and viola! We also had great customer support throughout our experience with knowledgable people helping when needed. We also liked how easy it is to integrate some of our 3rd party evidence providers right into the platform! Easy! Finally -- the support staff is very good and quick and knowledable! They are a pleasure to deal with if one happens to need help. **What do you dislike about Drata?** If one isn't used to SOC 2 (or other types of similar certifications / requirements) its a bit of a learning curve finding which area in the software to navigate to to perform a task, but its not too bad once you get the hang of it. **What problems is Drata solving and how is that benefiting you?** It maintains one location for all our SOC 2 complince information and an easy place to update / maintain policies and evidence so that the auditors have an easy time at audit time. ### 43. Great Support Team, Great Features, It Just Works **Rating:** 5.0/5.0 stars **Reviewed by:** Samuel K. | Security Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** February 27, 2025 **What do you like best about Drata?** One of the things I appreciate about Drata is that things just work. We are still working on implementing more of the features that the platform has to offer, but currently we are making use of the policy center, the trust center, and vendors and all these features work smoothly. The platform has been incredibly helpful for us preparing for our HITRUST audit by mapping the controls to our policies and for providing evidence to our auditor of risk tracking and mitigation. We like keeping our policies in Confluence, so the integration between Drata and Confluence was seamless to set up and maintain. Additionally, the regular connect meetings we've gotten to do with Greta and now Rob have been some of the best support that we have gotten since I started with my current company a year ago. **What do you dislike about Drata?** The features I mentioned in the section about what I like are the main ones that I actually use currently. Out of these, there's nothing I dislike. **What problems is Drata solving and how is that benefiting you?** Drata solves our problem of storing governance tasks in one place that we can point relevant people to or pull information from. If we need to upload our policies for a HITRUST audit, we can get them all from a simple click in Drata. When we need to review our vendors, we have them all in Drata. ### 44. Awesome Experience **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in E-Learning | Mid-Market (51-1000 emp.) **Reviewed Date:** July 28, 2025 **What do you like best about Drata?** We've had an excellent experience working with Safebase. Their platform is intuitive, reliable, and has streamlined the way we manage and communicate our security posture to customers. What set Safebase apart is Amanda and her team's outstanding customer service during implementation. Their team is knowledgeable, quick to respond, and always ready to provide actionable support. Whether it’s onboarding questions or more advanced customization needs, they’ve worked with members of our project team to ensure success. I highly recommend them. **What do you dislike about Drata?** There is nothing I can think of at this time. **What problems is Drata solving and how is that benefiting you?** We've had an excellent experience working with Safebase. Their platform is intuitive, reliable, and has streamlined the way we manage and communicate our security posture to customers. What sets Safebase apart is their outstanding customer service. Their team is knowledgeable, quick to respond, and always ready to provide actionable support. Whether it’s onboarding questions or more advanced customization needs, they’ve worked with members of our project team to ensure success. Safebase has proven to be a trusted and responsive partner, and we highly recommend them. ### 45. Cut Out the Manual Effort Immediately **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** July 28, 2025 **What do you like best about Drata?** Our organization has a very large footprint, so handling customer due diligence requests has always been met with some sort of friction due to a highly manual process. We set out to make life easier for our teams and for our customers, and SafeBase has provided the platform to do just that. We saw the number of total requests cut down instantly and expect that trend to continue as we seek to expedite our sales cycle. Everyone we've worked with – sales, customer success, technology – have all been easy to work with and extremely knowledgeable. **What do you dislike about Drata?** This potentially could be a unique problem for our organization, but there are aspects of our trust center that we wish we could customize to fit our global customer base. Certain things like language translation buttons and the ability to further customize fields. Otherwise, the platform has been a huge help for us! **What problems is Drata solving and how is that benefiting you?** The manual effort of responding to customer due diligence requests was a large-scale issue for us. By implementing the trust center, we are able to quickly provide our customers with necessary information, respond to questionnaires quicker, and create a smoother process for all who are involved. ### 46. Strong Product; Amazing Support **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** May 12, 2025 **What do you like best about Drata?** We have been using Drata for slightly more than a year. It has really helped to improve our efficiency in preparing our audits and keeping tabs on our internal compliance. Any implementation or company-specific issues have been relatively minor and relatively painless to fix. A real highlight of our Drata experience has been our CSM sponsorship. I have been lucky enough to work with Elizabeth John. She has been an excellent partner, always willing to go above and beyond to make sure we are able to use Drata to its fullest. Even when we have had personnel transitions on our side, she has helped to make sure knowledge is transferred appropriately, and has both the sense of urgency and calm demeanor of a great leader. She has made our Drata experience even better than the already good experience it would have been anyway, **What do you dislike about Drata?** Sometimes the tool can be hard to navigate. I sometimes find myself lost, but I have mostly been able to orient myself. **What problems is Drata solving and how is that benefiting you?** Drata helps us to make audits seamless. ### 47. Great platform to share cybersecurity compliance with customers **Rating:** 5.0/5.0 stars **Reviewed by:** Andre B. | Global Product Manager - AXIS OS, Enterprise (> 1000 emp.) **Reviewed Date:** July 24, 2025 **What do you like best about Drata?** The simplicity of getting started and filling the trust center with useful information for our customers. It was a cake walk to get started and within two weeks we were basically ready to go live. Our customer success manager Amanda H. and Solution Engineer Antonio was great to work with and helped us spot on along the way. **What do you dislike about Drata?** A bit more flexibility when it comes to language support. We need to support a number of different languages for different regions so that would come in handy moving forward as a feature. **What problems is Drata solving and how is that benefiting you?** It helps our customers and our sales organization getting answers on vendor risk assessments and questions around our products and corporate cybersecurity posture. ### 48. Great app towards being compliant! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** December 02, 2024 **What do you like best about Drata?** 1. Support experience 2. Onboarding 3. Monitoring compliance **What do you dislike about Drata?** Love everything, Can have more features for formatting! **What problems is Drata solving and how is that benefiting you?** Cloud security and cloud compliance ### 49. Great support, improving fast—helps us punch above our weight on compliance **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.) **Reviewed Date:** May 21, 2025 **What do you like best about Drata?** The customer support is top-notch—responsive, human, and genuinely helpful. They’ve also been rolling out thoughtful product updates regularly, which makes a big difference. For a small team managing SOC 2 and HIPAA, Drata gives us structure while still enabling us to move fast. The integrations (especially with Rippling and Google Workspace) save us a lot of manual work. **What do you dislike about Drata?** The UI around controls and policies can be a little confusing at first—it takes a minute to figure out where things live or how to map them to your real workflows. That said, it's been getting better steadily, and the support team always helps us through. **What problems is Drata solving and how is that benefiting you?** Drata helps us maintain ongoing compliance with industry standards while operating as a lean, agile team. It streamlines evidence collection, simplifies policy management, and provides clear visibility into our security posture—making it easier to stay organized and prepared as we scale. ### 50. Streamlined Compliance Made Easy **Rating:** 4.5/5.0 stars **Reviewed by:** Afiq A. | Technical Support Specialist, Mid-Market (51-1000 emp.) **Reviewed Date:** April 06, 2025 **What do you like best about Drata?** Drata makes compliance tracking incredibly simple and efficient. The automated workflows and integrations with tools like Google Workspace, AWS, and Slack save a lot of manual effort. The dashboard is clean and easy to navigate, making it easy to stay on top of tasks and audits. **What do you dislike about Drata?** Some of the integrations require a bit of fine-tuning during the initial setup, and occasional sync delays can happen. A mobile app would also be a great addition for on-the-go access. **What problems is Drata solving and how is that benefiting you?** Drata helps streamline and automate our security compliance processes, reducing the need for manual tracking and documentation. It ensures that we're continuously meeting requirements for frameworks like SOC 2 by integrating with our existing tools and providing real-time monitoring. This saves time, minimizes human error, and keeps us audit-ready at all times. ## Drata Discussions - [Hard Disk Encryption](https://www.g2.com/discussions/hard-disk-encryption) - 1 comment, 2 upvotes - [How are others coping with slower support, chatbot inconsistencies, and login / chat issues?](https://www.g2.com/discussions/how-are-others-coping-with-slower-support-chatbot-inconsistencies-and-login-chat-issues) - 1 comment, 1 upvote - [Has anyone else felt friction between Drata’s control depth and their own compliance approach or frameworks?](https://www.g2.com/discussions/has-anyone-else-felt-friction-between-drata-s-control-depth-and-their-own-compliance-approach-or-frameworks) - 1 comment, 1 upvote - [What’s your workaround when Drata’s integrations and automation do not go deep enough?](https://www.g2.com/discussions/what-s-your-workaround-when-drata-s-integrations-and-automation-do-not-go-deep-enough) - 1 comment, 1 upvote - [How are you all dealing with confusing navigation and policy / control relationships in Drata?](https://www.g2.com/discussions/how-are-you-all-dealing-with-confusing-navigation-and-policy-control-relationships-in-drata) - 1 comment, 1 upvote - [View Drata pricing details and edition comparison](https://www.g2.com/products/drata/reviews?page=3§ion=pricing&secure%5Bexpires_at%5D=2026-07-23+11%3A41%3A53+-0500&secure%5Bsession_id%5D=61f99f45-87b8-46ff-8626-460680c51a35&secure%5Btoken%5D=2b5b28b44b6368c47b8463e185084b7c3d518b6ee411aea34659e8cf3718b16c&format=llm_user) ## Drata Integrations - [1Password](https://www.g2.com/products/1password/reviews) - [360Learning](https://www.g2.com/products/360learning/reviews) - [ADP Workforce Now](https://www.g2.com/products/adp-workforce-now/reviews) - [Agentforce Sales (formerly Salesforce Sales Cloud)](https://www.g2.com/products/agentforce-sales-formerly-salesforce-sales-cloud/reviews) - [Aha!](https://www.g2.com/products/aha/reviews) - [Aikido Security](https://www.g2.com/products/aikido-security/reviews) - [AlexisHR](https://www.g2.com/products/alexishr/reviews) - [Amazon EC2](https://www.g2.com/products/amazon-ec2/reviews) - [Arnica](https://www.g2.com/products/arnica/reviews) - [Asana](https://www.g2.com/products/asana/reviews) - [AWS Cloud9](https://www.g2.com/products/aws-cloud9/reviews) - [AWS CodeCommit](https://www.g2.com/products/aws-codecommit/reviews) - [AWS Fargate](https://www.g2.com/products/aws-fargate/reviews) - [AWS Lambda](https://www.g2.com/products/aws-lambda/reviews) - [AWS Organizations](https://www.g2.com/products/aws-organizations/reviews) - [Azure Portal](https://www.g2.com/products/azure-portal/reviews) - [Azure SQL Database](https://www.g2.com/products/azure-sql-database/reviews) - [BambooHR](https://www.g2.com/products/bamboohr/reviews) - [Basecamp](https://www.g2.com/products/basecamp/reviews) - [Bitbucket](https://www.g2.com/products/bitbucket/reviews) - [Bitwarden](https://www.g2.com/products/bitwarden/reviews) - [Box](https://www.g2.com/products/box/reviews) - [Certn](https://www.g2.com/products/certn/reviews) - [CharlieHR](https://www.g2.com/products/charliehr/reviews) - [ChartHop](https://www.g2.com/products/charthop/reviews) - [Checkr](https://www.g2.com/products/checkr-inc-checkr/reviews) - [Checkr](https://www.g2.com/products/checkr/reviews) - [CircleCI](https://www.g2.com/products/circleci/reviews) - [ClearCompany](https://www.g2.com/products/clearcompany/reviews) - [ClearFeed](https://www.g2.com/products/clearfeed/reviews) - [ClickUp](https://www.g2.com/products/clickup/reviews) - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) - [Confluence](https://www.g2.com/products/confluence/reviews) - [Cornerstone](https://www.g2.com/products/cornerstone-cornerstone/reviews) - [Coursera for Business](https://www.g2.com/products/coursera-for-business/reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - [CrowdStrike Falcon Exposure Management](https://www.g2.com/products/crowdstrike-falcon-exposure-management/reviews) - [CyberArk Workforce Identity](https://www.g2.com/products/cyberark-workforce-identity/reviews) - [Darwinbox](https://www.g2.com/products/darwinbox/reviews) - [Datadog](https://www.g2.com/products/datadog/reviews) - [Dayforce](https://www.g2.com/products/dayforce/reviews) - [Deel HR](https://www.g2.com/products/deel-hr/reviews) - [Docebo](https://www.g2.com/products/docebo/reviews) - [Docusign](https://www.g2.com/products/docusign/reviews) - [Dropbox](https://www.g2.com/products/dropbox/reviews) - [Duo](https://www.g2.com/products/duo/reviews) - [EasyLlama](https://www.g2.com/products/easyllama/reviews) - [Employment Hero](https://www.g2.com/products/employment-hero/reviews) - [Factorial](https://www.g2.com/products/factorial/reviews) - [Fibery](https://www.g2.com/products/fibery/reviews) - [Freshdesk](https://www.g2.com/products/freshdesk/reviews) - [Freshservice](https://www.g2.com/products/freshservice/reviews) - [Freshteam by Freshworks](https://www.g2.com/products/freshteam-by-freshworks/reviews) - [Front](https://www.g2.com/products/front/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - [Go1](https://www.g2.com/products/go1-go1/reviews) - [GoodHire (a Checkr company)](https://www.g2.com/products/goodhire-a-checkr-company/reviews) - [Google Cloud Run](https://www.g2.com/products/google-cloud-run/reviews) - [Google Workspace](https://www.g2.com/products/google-workspace/reviews) - [Gusto](https://www.g2.com/products/gusto/reviews) - [Harness](https://www.g2.com/products/harness-wealth-harness/reviews) - [Height](https://www.g2.com/products/height/reviews) - [Hexnode UEM](https://www.g2.com/products/hexnode-uem/reviews) - [HiBob HRIS](https://www.g2.com/products/hibob-hris/reviews) - [HireRight](https://www.g2.com/products/hireright/reviews) - [Hive](https://www.g2.com/products/hive-hive-hive/reviews) - [HubSpot Sales Hub](https://www.g2.com/products/hubspot-sales-hub/reviews) - [Humaans](https://www.g2.com/products/humaans/reviews) - [Huntress Managed Security Awareness Training](https://www.g2.com/products/huntress-managed-security-awareness-training/reviews) - [Hyperproof](https://www.g2.com/products/hyperproof/reviews) - [Infosec IQ](https://www.g2.com/products/infosec-iq/reviews) - [Insperity](https://www.g2.com/products/insperity/reviews) - [Intellihr.com](https://www.g2.com/products/intellihr-com/reviews) - [Intruder](https://www.g2.com/products/intruder/reviews) - [Ironclad](https://www.g2.com/products/ironclad/reviews) - [Iru](https://www.g2.com/products/iru/reviews) - [Jamf](https://www.g2.com/products/jamf/reviews) - [Jenkins](https://www.g2.com/products/jenkins/reviews) - [Jira](https://www.g2.com/products/jira/reviews) - [Jira Service Management](https://www.g2.com/products/jira-service-management/reviews) - [Jit](https://www.g2.com/products/jit/reviews) - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews) - [Justworks](https://www.g2.com/products/justworks/reviews) - [Kallidus](https://www.g2.com/products/kallidus/reviews) - [KarmaCheck](https://www.g2.com/products/karmacheck/reviews) - [Keka](https://www.g2.com/products/keka/reviews) - [KnowBe4 Security Awareness Training](https://www.g2.com/products/knowbe4-security-awareness-training/reviews) - [LastPass](https://www.g2.com/products/lastpass/reviews) - [Lattice](https://www.g2.com/products/lattice-lattice/reviews) - [Linear](https://www.g2.com/products/linear/reviews) - [LinkedIn Learning](https://www.g2.com/products/linkedin-linkedin-learning/reviews) - [Lukka](https://www.g2.com/products/lukka/reviews) - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews) - [Microsoft Defender Vulnerability Management](https://www.g2.com/products/microsoft-defender-vulnerability-management/reviews) - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews) - [Microsoft Intune Enterprise Application Management](https://www.g2.com/products/microsoft-intune-enterprise-application-management/reviews) - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews) - [miniOrange Identity & Access Management](https://www.g2.com/products/miniorange-identity-access-management/reviews) - [Namely](https://www.g2.com/products/namely/reviews) - [New Relic](https://www.g2.com/products/new-relic/reviews) - [NinjaOne](https://www.g2.com/products/ninjaone/reviews) - [Notion](https://www.g2.com/products/notion/reviews) - [Objectivity/DB](https://www.g2.com/products/objectivity-db/reviews) - [Officient](https://www.g2.com/products/officient/reviews) - [Okta](https://www.g2.com/products/okta/reviews) - [OneLogin](https://www.g2.com/products/onelogin/reviews) - [Orca](https://www.g2.com/products/cortez-labs-orca/reviews) - [Oyster](https://www.g2.com/products/oyster-oyster/reviews) - [Paychex](https://www.g2.com/products/paychex/reviews) - [Paycor](https://www.g2.com/products/paycor/reviews) - [Paylocity](https://www.g2.com/products/paylocity/reviews) - [PeopleFluent Learning](https://www.g2.com/products/peoplefluent-peoplefluent-learning/reviews) - [Personio](https://www.g2.com/products/personio/reviews) - [Qualys VM](https://www.g2.com/products/qualys-vm/reviews) - [Rapid7 Managed Detection and Response Services](https://www.g2.com/products/rapid7-managed-detection-and-response-services/reviews) - [Rippling](https://www.g2.com/products/rippling/reviews) - [SafeBase](https://www.g2.com/products/safebase/reviews) - [Sage HR](https://www.g2.com/products/sage-hr/reviews) - [Salesforce Heroku](https://www.g2.com/products/salesforce-heroku/reviews) - [SAP SuccessFactors Onboarding](https://www.g2.com/products/sap-successfactors-onboarding/reviews) - [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews) - [SentinelOne Singularity Vulnerability Management](https://www.g2.com/products/sentinelone-singularity-vulnerability-management/reviews) - [ServiceNow Customer Service Management](https://www.g2.com/products/servicenow-customer-service-management/reviews) - [Shortcut](https://www.g2.com/products/shortcut/reviews) - [Slack](https://www.g2.com/products/slack/reviews) - [Slack Connector for Jira](https://www.g2.com/products/slack-connector-for-jira/reviews) - [Snyk](https://www.g2.com/products/snyk/reviews) - [Swif.ai](https://www.g2.com/products/swif-ai/reviews) - [TeamWork](https://www.g2.com/products/teamwork-2025-01-31/reviews) - [Tenable Vulnerability Management](https://www.g2.com/products/tenable-vulnerability-management/reviews) - [Tines](https://www.g2.com/products/tines/reviews) - [Torq](https://www.g2.com/products/torq-ai-torq/reviews) - [Travis CI](https://www.g2.com/products/travis-ci/reviews) - [Tray.ai](https://www.g2.com/products/tray-ai/reviews) - [Trello](https://www.g2.com/products/trello/reviews) - [TriNet](https://www.g2.com/products/trinet/reviews) - [Udemy Business](https://www.g2.com/products/udemy-business/reviews) - [UKG Pro](https://www.g2.com/products/ukg-pro/reviews) - [UKG Ready](https://www.g2.com/products/ukg-ready/reviews) - [Upwind](https://www.g2.com/products/upwind/reviews) - [Vetty](https://www.g2.com/products/vetty/reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - [Wiz Code](https://www.g2.com/products/wiz-code/reviews) - [Workday Learning](https://www.g2.com/products/workday-learning/reviews) - [Workspace ONE](https://www.g2.com/products/workspace-one/reviews) - [Wrike](https://www.g2.com/products/wrike/reviews) - [XFA](https://www.g2.com/products/xfa/reviews) - [Zendesk for Customer Service](https://www.g2.com/products/zendesk-for-customer-service/reviews) - [Zip](https://www.g2.com/products/zip-2025-09-24/reviews) - [Zoho BugTracker](https://www.g2.com/products/zoho-bugtracker/reviews) - [Zoho CRM](https://www.g2.com/products/zoho-crm/reviews) - [Zoho Desk](https://www.g2.com/products/zoho-desk/reviews) - [Zoho People](https://www.g2.com/products/zoho-people/reviews) ## Drata Features **Security** - Compliance Monitoring - Anomoly Detection - Cloud Gap Analytics **Functionality** - Questionnaire Templates - User Access Control **Generative AI** - AI Text Summarization - AI Text Generation **Generative AI** - AI Text Generation - AI Text Summarization **AI Compliance** - Regulatory Reporting - Automated Compliance - Audit Trails **Agentic AI - Vendor Management** - Decision Making **Revenue Recognition** - Usage Tracking - Deferred Revenue - Revenue Accrual **Compliance** - Governance - Data Governance - Sensitive Data Compliance **Risk assessment** - Risk Scoring - Monitoring And Alerts - AI Monitoring **Workflows - Audit Management** - Audit Trail - Recommendations - Collaboration Tools - Integrations - Planning & Scheduling **Risk Management & Monitoring** - AI Risk Management - Real-time Monitoring **Generative AI - Security Compliance** - Predictive Risk - Automated Documentation **Platform AI Features - Policy Management** - Reports - Workflow Management **Security** - Data Security - Data loss Prevention - Security Auditing **Administration** - Policy Enforcement - Auditing - Workflow Management **Documentation - Audit Management** - Templates & Forms - Checklists **AI Lifecycle Management** - Lifecycle Automation **Generative AI - Vendor Security and Privacy Assessment** - Text Summarization - Text Generation **Identity** - SSO **Reporting & Analytics - Audit Management** - Dashboard - Audit Performance - Industry Compliance **Access Control and Security** - Pole-based Access Control (RBAC) **Collaboration and Communication ** - Model Sharing and Reuse **Agentic AI - AI Governance Tools** - Autonomous Task Execution - Multi-step Planning - Cross-system Integration - Adaptive Learning - Natural Language Interaction - Proactive Assistance - Decision Making ## Top Drata Alternatives - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,644 reviews) - [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews) - 4.9/5.0 (1,311 reviews) - [Hyperproof](https://www.g2.com/products/hyperproof/reviews) - 4.5/5.0 (217 reviews)