---
title: Drata Reviews
meta_title: 'Drata Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 1334 reviews by the users' company size, role or industry
  to find out how Drata works for a business like yours.
aggregate_rating:
  rating_value: 4.7
  review_count: 1334
  scale: '5'
date_modified: '2026-08-05'
parent_category:
  name: Cloud Security
  url: https://www.g2.com/categories/cloud-security
---

# Drata Reviews
**Vendor:** Drata  
**Category:** [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance)  
**Average Rating:** 4.7/5.0  
**Total Reviews:** 1,334
## About Drata
Founded in 2020 and headquartered in San Francisco, California, Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Born from experience in mission-critical aerospace work and the painful reality of manual security audits, Drata was created to turn trust into an always-on state instead of a point-in-time exercise. Today, the Drata Agentic Trust Management Platform helps more than 8,500 organizations worldwide build continuous trust across the cloud and prove their posture to customers, partners, and auditors. Drata unifies governance, risk, compliance, and assurance so security and GRC teams can manage everything in one place. Drata&#39;s core capabilities include Automated Governance to streamline policy management, control monitoring, evidence collection, and access reviews; Integrated Risk Management to centralize internal and third-party risk with real-time visibility and ownership; Continuous Compliance to automate evidence collection and control testing across frameworks; and Accelerated Security Assurance to show your security posture in real time and shorten review cycles while supporting faster, more confident sales and vendor decisions. Together, these capabilities deliver Continuous Real-Time Trust, Enterprise-Grade Flexibility, and Agentic AI Productivity. Drata continuously monitors controls, flags risks immediately, and makes always-current proof easy to share so you&#39;re demonstrating effective security every day—not just at audit time. The platform scales across multiple frameworks and connects to hundreds of tools to fit complex environments, and AI-driven automation helps assess vendors, collect evidence, and draft questionnaire responses—eliminating repetitive manual work, reducing operational overhead, and turning assurance into a strategic business enabler for modern, trust-driven organizations.



## Drata Pros & Cons
**What users like:**

- Users commend the **exceptional customer support** from Drata, enhancing their compliance and security management experience. (135 reviews)
- Users value the **intuitive design** of Drata, making setup and integration seamless and efficient for everyone. (115 reviews)
- Users highlight the **automation of compliance monitoring** in Drata, significantly easing reporting processes and enhancing efficiency. (109 reviews)
- Users value the **time-saving automation** of Drata, streamlining compliance tasks and simplifying audits significantly. (96 reviews)
- Users value the **seamless integrations** of Drata, enhancing functionality by connecting various platforms effortlessly. (89 reviews)
- Automation (78 reviews)
- Users find Drata to be **simple to use and set up** , enhancing automation and support for audit processes. (77 reviews)
- Easy Integrations (75 reviews)
- Easy Setup (67 reviews)
- Team Helpfulness (62 reviews)

**What users dislike:**

- Users find Drata&#39;s **limited integrations** frustrating, wishing for broader support for third-party tools and self-hosted versions. (43 reviews)
- Users face **integration issues** with Drata, leading to a challenging transition and unexpected manual effort required. (38 reviews)
- Users note that **configuration limitations** and complex transitions hinder a seamless experience with Drata. (35 reviews)
- Users find the **lack of clarity** in Drata&#39;s UI can complicate the audit process and task management. (28 reviews)
- Users find the **UX confusing at times** , making it difficult to identify missing tasks and necessary fixes. (22 reviews)
- Limited Customization (20 reviews)
- Policy Management (18 reviews)
- Users find Drata’s services to be **expensive** , especially for startups looking for cost-effective compliance solutions. (15 reviews)
- Lack of Customization (15 reviews)
- Users desire **additional features** for formatting, better user interface, and more integrations for improved functionality. (15 reviews)

## Drata Reviews
  ### 1. An Amazing Experience!!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** May 14, 2024

**What do you like best about Drata?**

I have been thoroughly impressed with Drata. The dashboard and modules provided are clear and concise which creates a clear learning experience and offers precise insights into our progress towards achieving security compliance. The customer service provided by Drata has exceeded my expectations. As someone who started the SOC2 compliance journey with very little knowledge of security protocols, I was lucky to have an outstanding Customer Success Manager guiding me through every step. Elizabeth John's expertise were evident in her explanation of each process during our meetings, allowing me to grasp concepts gradually. She has been instrumental in assisting me at every step.  I cannot emphasize enough how invaluable her support has been. I recommend Drata to anyone looking for comprehensive security compliance solutions!

**What do you dislike about Drata?**

I cannot express any negatives about my experience with Drata.

**What problems is Drata solving and how is that benefiting you?**

As a startup operating in the cloud environment, ensuring security is extremely important to our success.  Navigating security protocol  standards can be confusing, especially for a cloud startup with very limited resources. Drata's platform offers clear guidance, streamlining the process of achieving  SOC 2 compliance.  As we scale our operations, maintaining visibility and control over our security posture becomes increasingly challenging. Drata's dashboard provides real-time overview into our security posture, identifying vulnerabilities and ensuring that we remain proactive in mitigating risks.  Drata's Trust Center enable us to  instill confidence in our customers and enhance our credibility.  Drata has been an invaluable partner in our journey towards building a secure and compliant platform.

  ### 2. A super easy process, from procurement to implementation

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Biotechnology | Enterprise (> 1000 emp.)

**Reviewed Date:** September 22, 2025

**What do you like best about Drata?**

The platform is intuitive with minimal onboarding training required for Admins. The solution operates well out of the box and the Safebase team (shoutout to Crystal and Antonio) are communicative and highly available to help.

**What do you dislike about Drata?**

Some platform behaviors and information are not fully customizable.

**What problems is Drata solving and how is that benefiting you?**

Putting compliance information in the hands of the customer is what safebase solves. We are able to answer questions more easily with the content on our trust center and hopefully will see fewer questionnaires submitted.

  ### 3. A helpful and reliable security management platform

**Rating:** 5.0/5.0 stars

**Reviewed by:** Guangyu L. | Chief Operating Officer, Small-Business (50 or fewer emp.)

**Reviewed Date:** November 26, 2024

**What do you like best about Drata?**

I would say the structure of the platform is excellent, providing clear guidance for a company to manage its security issues comprehensively. Initially, we were not familiar with the security area, especially regarding how to periodically address security issues under the SOC2 and GDPR frameworks. Our customer success manager, Elizabeth John, is very nice and gentle. She has provided me with a wealth of instructions patiently and efficiently. I would recommend Drata to anyone needing to address security regulations.

**What do you dislike about Drata?**

Drata is well-suited for those who really need to meet security regulations. Startups should carefully evaluate whether they have sufficient resources to commit, as once you begin implementing security regulations, it's not easy to stop and you should also expect a long-term commitment. Therefore, if you have a significant number of customers requiring this, it's advisable to proceed. Otherwise, carefully consider your starting point.

**What problems is Drata solving and how is that benefiting you?**

Drata helps us meet the regulations of SOC2 and GDPR.

  ### 4. A system that greatly simplified the complicated SOC2 and PCI process.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Steven D. | VP of MIS, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 05, 2025

**What do you like best about Drata?**

We tried doing SOC2 compliance on our own, and it was a complicated mess and very confusing. Drata provides a well-defined structure to follow. We simply checked off each item gradually until our score was 100%. When the auditors came in, they had minimal questions.

**What do you dislike about Drata?**

The downside is very minimal. When a compliance test fails, the instructions for resolution could be better.

**What problems is Drata solving and how is that benefiting you?**

Drata has simplified the SOC2 and PCI compliance process.

  ### 5. Used Drata to Achieve SOC 2 Certification

**Rating:** 5.0/5.0 stars

**Reviewed by:** Christopher T. | Cyber Security Analyst, Mid-Market (51-1000 emp.)

**Reviewed Date:** January 28, 2025

**What do you like best about Drata?**

Drata really helped us prepare for our SOC 2 audit, providing a starting framework to work from, continuous monitoring of various controls through integrations, and personal assistance from our customer success manager, Elizabeth. We've since decided to attempt to centralize our compliance processes and efforts within Drata, as the platform  is naturally suited to this task.

**What do you dislike about Drata?**

Drata is still growing and changing regularly, so expect changes to your process and the occasional idiosyncracy/bug.

**What problems is Drata solving and how is that benefiting you?**

Drata allows us to continuously monitor the functionality of our controls, as well as the status of evidence and policy tied to those controls. This has allowed us to prepare for and successfully complete our SOC 2 audits within a relatively short period of time.

  ### 6. Complete and Organized Solution

**Rating:** 5.0/5.0 stars

**Reviewed by:** Christopher G. | CTO, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 03, 2025

**What do you like best about Drata?**

It is built to help you get compliance done. You rarely feel uncertain about what to do next, and the support is great.

**What do you dislike about Drata?**

Nothing honestly. When I find gaps they close them quickly

**What problems is Drata solving and how is that benefiting you?**

Security compliance and demonstrating that to our clients

  ### 7. Incredible Customer Service Experience

**Rating:** 5.0/5.0 stars

**Reviewed by:** Renan S. | Privacy PMO &amp; Corporate Lawyer, Enterprise (> 1000 emp.)

**Reviewed Date:** July 31, 2025

**What do you like best about Drata?**

The Customer Base experience is amazing, they are always willing to help and walk beside you during the whole implementation and post implementation process. Also, it's very easy to integrate with other softwares. Kudos to Amanda Haniff and her great job!

**What do you dislike about Drata?**

They don't have localization for all languages

**What problems is Drata solving and how is that benefiting you?**

SafeBase helped us to better demonstrate our privacy, security and compliance practices to customers and prospects.

  ### 8. Great overall experience with Drata

**Rating:** 5.0/5.0 stars

**Reviewed by:** mhusband@proactive.md H. | Senior IT Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 03, 2025

**What do you like best about Drata?**

Ease of use and automation. Ease of implementation. Customer support is very responsive and timely with follow up.

**What do you dislike about Drata?**

Some manual entry required depending more on business practices and limitations with applications.

**What problems is Drata solving and how is that benefiting you?**

Creates automation experience around execution of multiple compliance frameworks.

  ### 9. Great Platform for Enabling Constant Compliance

**Rating:** 4.5/5.0 stars

**Reviewed by:** Robert B. | Cloud Operations and Compliance Consultant, Mid-Market (51-1000 emp.)

**Reviewed Date:** November 21, 2024

**What do you like best about Drata?**

Drata enables "continuous compliance." This has shown itself to be very helpful in practice. When working on SOC2 at prior companies we would often find issues and gaps during the Audit or as we generated populations for the audit. Drata's constant checks for compliance allows us to show auditors a track record of continual work on our compliance journey and allows us to find and fix gaps and deviations without being already in the room in front of an auditor.

I also have had great experience with their customer support and their AI chatbot. The chatbot is able to understand our internal policies and procedures and generate adhoc answers to audit questions that pull from our actual policies. Customer support has also been able to go the extra mile to diagnose indepth issues with how their platform was interpreting our cloud setup and provide pointers on how to adjust our Azure settings to make them more secure.

**What do you dislike about Drata?**

Drata sometimes can feel like a game of "whack-a-mole." The graphs show a track record overtime per control and as a company grows it will get harder and harder to show "constant" compliance. Invariably some user is always going to be late on their training or an engineer will create an improper resource in the cloud and cause a permanant blemish on the record over time. I'm not sure how to make it work but being able to show constant forward progress would be more advantatageous versus showing all the red marks where we failed for a day.

**What problems is Drata solving and how is that benefiting you?**

Drata gives us a single pane of glass view of our security posture across all the tooling that we use accross the enterprise. Without Drata it would be impossible to go through the dozen pieces of our environment and ensure that our teams are following the policies and procedures that the company requires. Drata removes the embarrassment of having to find those defecits with the auditors in the room.

  ### 10. Drata makes compliance possible in the chaos of running a business...

**Rating:** 5.0/5.0 stars

**Reviewed by:** Chris L. | CTO, Small-Business (50 or fewer emp.)

**Reviewed Date:** April 04, 2025

**What do you like best about Drata?**

As someone who used to do compliance manually, I love how Drata uses our vendors and systems to automate much of the data collection and organization of evidence.  The support is always available for questions, and the dashboard and onboarding steps simplify implementation.  They walk you through the steps with questions, and once you select your auditor, they know Drata as well and can help tie up any loose ends before starting an audit.

**What do you dislike about Drata?**

There is no downside.  They have integrations with all of our cloud, development and IDP systems.

**What problems is Drata solving and how is that benefiting you?**

Drata collects the majotity of evidence needed for our SOC 2 and HIPAA and for the manual evidence, has reminders and places to store the manual evidence when it is collected.

  ### 11. Excellent Drata Support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 31, 2025

**What do you like best about Drata?**

A feature I like is Drata's support system. It is user-friendly and I can easily submit an inquiry. It's easy to go from the chat bot straight to chatting with a live support person if the bot cannot help. The support folks have been great, always friendly, professional, and willing to help me out.

**What do you dislike about Drata?**

The only downside I've experienced is the recent slowdown in support response times.  While the quality of support remains good, there are sometimes delays in getting answers - which can sometimes be a little bit frustrating, especially when I'm working on a tight deadline.  However, it's still better than other platforms I've used. Overall, I really like Drata but I'd like to see those response times improve.

**What problems is Drata solving and how is that benefiting you?**

Drata helps to simplify compliance management and saves time.  The platform's dashboard, policy center, and evidence library, makes it easy to track our progress and easily communicate/demonstrate compliance to our auditors.  It's an great tool with great features.

  ### 12. One stop shop for compliance

**Rating:** 4.5/5.0 stars

**Reviewed by:** Erikas M. | Information Security Officer, Small-Business (50 or fewer emp.)

**Reviewed Date:** November 19, 2024

**What do you like best about Drata?**

I think the most useful things about drata are its intergrations and its structure, you can link so many systems and use it as not just a one time thing during audit season, but you can use it to continously track and monitor compliance and allow your company to maintain a strong security posture. Its also incredibly easy to use especially if you are a company without concrete policies set or you need to sharpen up existing ones.

**What do you dislike about Drata?**

The drata agent which helps monitor device compliance for your users sometimes struggles to pick up certain types of software, but that can be solved with a couple of screenshots and a few button presses

**What problems is Drata solving and how is that benefiting you?**

Drata is helping us solve our issue of not having a full picture of our security, it allows us to see and monitor employees and make sure they have acknowledged everything they need to, it lets us perform vendor reviews, it lets us handle risk management without being split between 5 different products. It makes audits easier because all the evidence is in one place and you can organise yourself accordingly, you're no longer hunting for that one random document for 10 minutes. It also provides the framework and structure needed to pursure other standards and frameworks, it gives confidence of being able to successfully pass an audit.

  ### 13. The most comprehensive GRC tool on the market

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Manufacturing | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 31, 2025

**What do you like best about Drata?**

Drata has Significantly reduced the time it takes to organize and gather our compliance data. The integrations with multiple other tools and services that we use make it so easy to have almost everything we need in single location when it's time to complete an audit.

**What do you dislike about Drata?**

Drata is working very hard to keep up with platform ideas requests from thier customers and there are a few integrations and additional features that we have suggested they implement. Hopefully we see those in the future!

**What problems is Drata solving and how is that benefiting you?**

We were having a problem keeping all of our security and compliance data organized and structured for multiple different frameworks. There are also a lot of documents, evidence, and testing that has to be completed on a regular basis. Drata helps us to keep all that data organized and automated some of our testing. It also helps to ensure that users and workstations stay compliant and alert us when there are compliance issues.

  ### 14. Straightforward tool - organize everything needed

**Rating:** 4.5/5.0 stars

**Reviewed by:** Jackson B. | Senior Security Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** November 21, 2024

**What do you like best about Drata?**

Drata successfully automates internal control verification for audit initially and ongoing. It nearly does the job of a full time junior level GRC focused employee. Certainly makes my life easier - I use it at least every week. Also, you can re-scan on demand after you fix something, which is more than other tools I've used in the past can say. It's simple to implement on your cloud resources. Customer support is responsive and helpful from the initial engagement onward.

**What do you dislike about Drata?**

Sometimes the error messages on why a given control is failing could be more explanatory. The platform takes about a week to learn to navigate but works well once you know how. It doesn't integrate with the most common ADP implementation but hopefully that will change soon.

**What problems is Drata solving and how is that benefiting you?**

Gain initial SOC 2 compliance. We wouldn't be able to even come close this year were it not for Drata.

  ### 15. Drata has been a game-changer for our SOC 2 journey.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.)

**Reviewed Date:** January 30, 2025

**What do you like best about Drata?**

Automated evidence collection and the ability to not only see the path to full compliance - but also to get a better sense for the level of effort needed to get there.   Drata made a painful process much more manageable and accelerated the time to full SOC 2 compliance.

**What do you dislike about Drata?**

Need notification enhancements please.     In particular, beyond weekly emails, we need real-time, pro-active notifications (like Slack, Teams, SMS, etc) for controls that are about to "go red" (like a quarterly report that needs to be refreshed in the evidence library or a policy that needs to be renewed soon) - including the option to be notified about controls onwed by others.    Also, when a control fails, we need to be able to send violation alerts hourly or at least daily to not just the control owner, but also to a team.

**What problems is Drata solving and how is that benefiting you?**

Our small team doesn't have the bandwidth to manually collect all the evidence of controls to achieve/maintain compliance and the monitoring helps us maintain visibility of our security controls.

  ### 16. Finally Found a Platform That Makes Compliance Feel Manageable!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** January 28, 2025

**What do you like best about Drata?**

Instead of drowning in spreadsheets and endless checklists, I found myself with a clear roadmap of exactly what we needed. It's like having a knowledgeable compliance partner who breaks everything down into bite-sized pieces. The way it automatically gathers evidence and keeps track of our progress has saved me countless hours of chasing down documents and pestering team members for updates. The support team is responsive and knowledgeable about compliance requirements. When you run into questions during setup or about specific controls, they're there to help guide you through the process.

**What do you dislike about Drata?**

The initial setup can be a bit overwhelming - there are so many integrations and settings to configure that it took us some time to get everything properly connected.

**What problems is Drata solving and how is that benefiting you?**

The platform solves the challenge of continuous compliance monitoring. Rather than scrambling to gather evidence during audit time, Drata automatically collects and updates evidence in real-time. This means we're always audit-ready, reducing the stress and rush typically associated with certification preparations. The direct benefit to me is peace of mind - knowing that we're consistently meeting our compliance requirements and having clear visibility into our certification progress at any given time.

  ### 17. Drata is an excellent compliance platform

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** March 05, 2025

**What do you like best about Drata?**

Drata is really handy for things like 27001 compliance as it walks you through the process initially, and then monitors your platforms to ensure ongoing compliance. You get notifications of things like controls that are not ready and it's generally pretty straightforward to dig down to find what's causing it, and then fix it.
The support staff at Drata are very helpful and always prompt to respond and were able to answer a number of complicated compliance questions for us as we went through the process.

**What do you dislike about Drata?**

The main downside of Drata is that you have a continuous insight into your compliance status so you know immediately if you're not passing - nothing gets the chance to get swept under the rug.

**What problems is Drata solving and how is that benefiting you?**

Drata helps ensure that we are up-to-date with our security stance.

  ### 18. Drata and the GRC Journey

**Rating:** 5.0/5.0 stars

**Reviewed by:** Dominic  P. | IT Risk Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** June 12, 2024

**What do you like best about Drata?**

Since implementing DRATA I have seen a reduction in audit burden on valuable resource within the company  which has lead to increased productivity. DRATA has offered a simple one stop management tool for simplifying governance management.

At Softcat we have utilised the custom framework module heavily enabling us to have everything on one place for oversight and management.

**What do you dislike about Drata?**

The risk management module still has some way to go to reach the level of maturity required for large enterprise.

**What problems is Drata solving and how is that benefiting you?**

DRATA has enabled the primnciple of evidence once comply many which has reduced the time required for evidence collection. In addition it has also coalesced the audit experience for staff and external auditors.

  ### 19. Review For Drata

**Rating:** 5.0/5.0 stars

**Reviewed by:** Aasim A. | IT Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** July 03, 2025

**What do you like best about Drata?**

The Ease of use , the interface  is user friendly and the support team is the best

**What do you dislike about Drata?**

I did not find anything which I not like in Drata

**What problems is Drata solving and how is that benefiting you?**

All of our compliance issue

  ### 20. Great product, Even Better Team

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 22, 2025

**What do you like best about Drata?**

The automation, so nice to be able to keep track of all evidence within one platform and be able to assign owners, set expiration dates and integrate with a multitude of our internal tools. The support staff is even better, always willing to answer questions and answering back within 4 hours.

**What do you dislike about Drata?**

I wish it had more customization with the monitors it does have as not all organizations have the same configurations and it would be easier to create the connections yourself with the tools within our cloud based host.

**What problems is Drata solving and how is that benefiting you?**

Drata streamlines our compliance process by automating the collection and organization of evidence required for SOC 2 Type II and HIPAA audits, saving us significant time and resources.
It enhances our ability to monitor and maintain continuous compliance, reducing the risk of errors or missed requirements.
With Drata, we have improved transparency and efficiency in demonstrating compliance to auditors and stakeholders, enabling us to focus on core business operations.

  ### 21. Drata is user friendly with great customer service!!!

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** January 28, 2025

**What do you like best about Drata?**

I love that Drata syncs well with our workspace, most users dont even know Drata exists past their onboarding process. It doesn't slow down your computer even though it runs in the background. No need to spend hours implementing it, once its connected to your workspace all your users will automatically be connected!!!
Best part of all - their customer service runs round the clock, shout out to Terrious!!!!

**What do you dislike about Drata?**

TBH, I sometimes have trouble reopening old chats that I by mistake closed...

**What problems is Drata solving and how is that benefiting you?**

We need a reliable and trust worthy platform to get Soc and HIPAA compliance

  ### 22. SafeBase Review

**Rating:** 4.5/5.0 stars

**Reviewed by:** Amit B. | Operations Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 06, 2025

**What do you like best about Drata?**

The platform is intuitive and user-friendly, providing numerous customization options tailored to the company's needs. It also integrates seamlessly with our other platforms, particularly DocuSign.

**What do you dislike about Drata?**

The fact that you don't have to option to re-send an agreement

**What problems is Drata solving and how is that benefiting you?**

A one-stop shop for all our compliance documents, making it easier for our customers and prospects.

  ### 23. Streamlined SOC 2 Audit and Great Customer Support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Shannon  K. | Senior Director of Quality, Compliance and Security, Mid-Market (51-1000 emp.)

**Reviewed Date:** April 30, 2025

**What do you like best about Drata?**

Automates and streamlines day-to-day security compliance efforts with easy implementation and usage. 
Amazing customer support from timely account management, tech support, and policy support. 
Makes the SOC 2 audit easy and stress-free!

**What do you dislike about Drata?**

There is no HITRUST framework yet. But I hear it's coming next quarter.
Some of the automated integrations have been problematic (e.g., github, background checks, and HRIS updates). However, I've seen great improvement and responsive fixes from Drata over time. Quite pleased with the turn-around.

**What problems is Drata solving and how is that benefiting you?**

Automated monitoring rather than manual monitoring. Huge time-savings and cost-savings. 
Real-time alerts while scaling a fast-growing SaaS company. 
Personnel compliance is a breeze now!

  ### 24. Invaluable Compliance Automation

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jared M. | Chief Technology Officer, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 13, 2024

**What do you like best about Drata?**

Drata provides an intuitive platform that simplifies the process for businesses to achieve and maintain certifications like SOC 2, minimizing the time and effort required to stay compliant.

Our compliance and security team uses Drata daily to react to alerts and build out additional controls with monitoring for additional frameworks the company requires.

Drata requires some setup but they provide excellent documentation on the steps required. 

Support has always been helpful and quick.

**What do you dislike about Drata?**

I would like additional integrations for all products and additional options in the integrations I have to simplify the configuration my IT has to perform.

**What problems is Drata solving and how is that benefiting you?**

Drata delivers precise, real-time insights into our compliance status, enabling us to consistently meet security standards. With its automation capabilities, it streamlines the compliance process, saving time and minimizing the potential for errors.

  ### 25. Great

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Legal Services | Enterprise (> 1000 emp.)

**Reviewed Date:** September 24, 2025

**What do you like best about Drata?**

Rachel responded quickly to my ticket and helped me resolve my login issue.

**What do you dislike about Drata?**

Everything is great. I have no issues with Drata.

**What problems is Drata solving and how is that benefiting you?**

Login issue with my account.

  ### 26. Easy to use software with a modern interface that simplifies the annoying details of compliance.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Theo P. | Director Of Engineering, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 20, 2025

**What do you like best about Drata?**

Controls related to policy acceptance and training are quick and seamless. Good number of integrations and visualization of status of controls across different standards.

**What do you dislike about Drata?**

Nothing comes to mind. As a user/stakeholder, I find it easy to accomplish the tasks that are required of me.

**What problems is Drata solving and how is that benefiting you?**

Automating and organizing compliance related to SOX controls.

  ### 27. Extremely useful tool in my toolbelt

**Rating:** 5.0/5.0 stars

**Reviewed by:** Tina S. | Chief of Staff, Small-Business (50 or fewer emp.)

**Reviewed Date:** January 14, 2025

**What do you like best about Drata?**

It was very easy to get started with Drata and I use it every day. Pushbutton navigation, the knowledge center is very useful and I like that there are easy to digest videos. I really appreciate that I open up a template or control and they've marked for me what is required for which frameworks. This is super helpful if you are pursuing multiple certifications. Really like how connected everything is and how easy it is to integrate Drata with all of my tools. I also really appreciate the rapid response from their experts and the whole team. We never have to wait for them to get back to us.

**What do you dislike about Drata?**

As a small, startup I wish that Drata had checklists or a roadmap or some means of spoon feeding me what I need to do on the Admin side to operationalize all the controls. The system controls are easy. Connect and go. It's all the other aspecs. Not sure if I'm explaining this right and its entirely possible its a user error.

**What problems is Drata solving and how is that benefiting you?**

I am a small business with limited resources new to compliance. Drata is helping us understand and execute faster and more accurately than we could ever do ourselves.

  ### 28. A great product and exceptional support to boot

**Rating:** 5.0/5.0 stars

**Reviewed by:** Khoa T. | Security and Compliance Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** October 24, 2024

**What do you like best about Drata?**

Drata is a true time saver. We have a small team, so becoming compliant with any framework seemed a daunting task, but Drata's automated tests, policy templates, and system integrations made it incredibly fast and easy to not only organize evidence for an audit but ramp up the maturity of our security program. You can't review the platform without mentioning the exceptional customer support that comes with it. The support we've received from their team (especially Craig) has been nothing but professional and attentive. They not only want us to use the platform at its full potential, but they are a close partner in helping us plan for and achieve compliance with our desired frameworks.

**What do you dislike about Drata?**

While Drata has satisfied all of our needs for reaching compliance, I believe some of their features (like risk assessment) should be more widely accessible perhaps in an open-source format since compliance and security is something that is important for all organizations, not just the ones who can pay for it.

**What problems is Drata solving and how is that benefiting you?**

We have a lot of resources but not an easy way to map their configurations to frameworks. We solved this by integrating our AWS environment so Drata's automated tests tell us immediately if something is not compliant.

We don't have an easy way to do vendor inventory or risk management. We solved this by using these features in Drata and now have a central place to not only track vendors/risk, but assign tasks to executives/employees who need to review them.

We needed a central repository to draft and update policies and have employees acknowledge them. We used Drata's templates to create policies and use it to push them out to employees for acknowledgement.

  ### 29. Easy to use, powerful functionality

**Rating:** 4.5/5.0 stars

**Reviewed by:** Scott J. | CISO, Small-Business (50 or fewer emp.)

**Reviewed Date:** March 19, 2025

**What do you like best about Drata?**

Rollout was relatively easy compared to other platforms I've used over time.  Support is always responsive when issues have come up.  Integrations continue to expand to include more IdPs, vulnerability management tools, etc.

**What do you dislike about Drata?**

Policy center can be clunky to navigate especially during policy renewal time.  The baked-in awareness training is a little rudimentary by modern standards but it checks the box at least which is good.

**What problems is Drata solving and how is that benefiting you?**

Managing multiple framework controls across similar systems on a small team.

  ### 30. Great tool with a great team behind

**Rating:** 5.0/5.0 stars

**Reviewed by:** Alexander P. | Head of Engineering, Mid-Market (51-1000 emp.)

**Reviewed Date:** January 21, 2025

**What do you like best about Drata?**

Very easy-to-use tool with a lot of functionality provided out of the box. On top of this, the team is super supportive and responsive.

**What do you dislike about Drata?**

When following a particular framework, ISO 27001:2022 in our case, it makes it difficult to get a clear overview of controls required within the framework, statement of applicability. So we had to develop a different overview we used for audit purposes to show the controls, whether they are applicable to us or now and how they are implemented (where we linked all relevant Drata controls). So was a bit of a work around.

**What problems is Drata solving and how is that benefiting you?**

Automated monitoring, risk management, controls management, evidence library.

  ### 31. Drata Trust Center a smart way to share your company security posture

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in E-Learning | Enterprise (> 1000 emp.)

**Reviewed Date:** December 15, 2023

**What do you like best about Drata?**

Apart from the main use of the Drata solution focused on compliance monitoring, the platform also provides an easy way to share with customers your company security posture thanks to the Drata Trust Center. Trust Center enablement is very easy and takes little time, moreover, the integration with Docusign is an added value.

**What do you dislike about Drata?**

The Trust Center should have more customization capabilities, especially for the UX look and feel and the contents that may be published

**What problems is Drata solving and how is that benefiting you?**

Once Drata is properly configured for cloud/security compliance the Trust center can be enabled with few clicks.

  ### 32. Great Compliance Software for Small to Medium Business

**Rating:** 4.5/5.0 stars

**Reviewed by:** Christopher S. | Senior GRC Analyst, Mid-Market (51-1000 emp.)

**Reviewed Date:** December 31, 2024

**What do you like best about Drata?**

- Easy to use and understand. 
- Support staff are quick and communicate well. 
- Product is evolving with its clients.

**What do you dislike about Drata?**

- Because the product is constantly improving, some features feel incomplete

**What problems is Drata solving and how is that benefiting you?**

Drata provides us with a robust "Governance, Risk, and Compliance" toolset which makes internal and external auditing easier for our small team. By consolidating major trust and GRC functions into a single platform for a reasonable cost, it makes aligning with our security requirements and frameworks much more manageable. At a glance, we can review and monitor all the major GRC requirements, such as our alignment with security controls, our Risk Management program, our Vendor Management process, and our Policy management.

  ### 33. Worth considering for sure

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Telecommunications | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 09, 2025

**What do you like best about Drata?**

Seems like once it's fully set up, it' s a good way to manage GRC - auditors seem to like it too.

**What do you dislike about Drata?**

The policy editor is terrible. It's also just quite a lot of set up, a massive project. This is to be expected though given the scale of what it is supposed to be used for.

**What problems is Drata solving and how is that benefiting you?**

We're still setting it up but so far it seems to help keep track of things such as whether MFA is not configured for any of your SSO accounts, etc.

**Official Response from Ashley Hyman:**

> Hi there!
Thank you for taking the time to leave your review. We truly appreciate your feedback.
I'd love the opportunity to dig in with you on how we can improve your experience even further going forward. Reach out to me at ashley@drata.com
Thanks so much!
Ashley Hyman
VP of Customer Experience

  ### 34. Drata fits big organization as well as small, putting GRC and automation at the center with ease

**Rating:** 5.0/5.0 stars

**Reviewed by:** Noam B. | Director of Information Security/CISO, Mid-Market (51-1000 emp.)

**Reviewed Date:** February 13, 2025

**What do you like best about Drata?**

Clear and well designed GUI, dashboards, and sections. Very clear to understand where everything is. New features such as questionnaires section, Trust Center, UAR connections, integrations. Automation of tests. Acqusition of SafeBase. Customer Success and Support are excellent. Budget, in comparison to other platforms. Vendor assessment.

**What do you dislike about Drata?**

Custom tailoring per client, feature requests(roadmap)can sometimes be too generic or basic. Vendor assessment work can be tedious.

**What problems is Drata solving and how is that benefiting you?**

Drata assists greatly in maintinaing our certifications(SOC,ISO, GDPR, etc'). GRC platforms automates evidence collection, monitorign and UAR in addition to vendor assessments, questionnaires answered in audits, etc.

  ### 35. Excellent Platform

**Rating:** 4.5/5.0 stars

**Reviewed by:** Jeremy R. | Sr. Manager, IT, Small-Business (50 or fewer emp.)

**Reviewed Date:** April 30, 2025

**What do you like best about Drata?**

Being able to connect various monitoring solutions (M365, AWS, etc) to automate evidence collection.

**What do you dislike about Drata?**

None that I can think of. It's very straightforward to use, and the people at Drata are extremely helpful.

**What problems is Drata solving and how is that benefiting you?**

Working toward SOC II compliance, Drata helps organize tasks, ingest data from various platforms, and automates the collection of evidence.

  ### 36. Compliance success depends on Customer Success

**Rating:** 4.0/5.0 stars

**Reviewed by:** Juliane W. | Business Operations Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** October 15, 2024

**What do you like best about Drata?**

Drata is constantly evolving and it takes some time to become efficient using it, like no other compliance platform would be. However, it sticks out in two points:
1. Complete documentation and real-time, helpful support powered by AI and humans
2. An outstanding customer success support from Jordan Penn - he provides uncompared Customer Care making sure we use Drata to the fullest and meet our business objectives. He takes the time it needs to explain every bit of it and was available anytime despite time differences. Further, his proactive approach ensured we were all set for compliance of ISO 27001:2022 and SOC 2.

The key features saving time and ensuring compliance:
- Control and Policy library
- Automation of compliance tasks such as security training, policy signature, onboarding

**What do you dislike about Drata?**

- Automated controls such as hardware compliance are a headache
- Recent Drata control changes require a full rehaul of the scope
- several Customer Success and Account Management changes in a short time

**What problems is Drata solving and how is that benefiting you?**

Customer acquisition

  ### 37. Solid platform but not without some issues.

**Rating:** 3.5/5.0 stars

**Reviewed by:** Pav A. | General Counsel, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 05, 2025

**What do you like best about Drata?**

I think it is generally intuitive at a high level. UI is solid. Seems to have most of the features.

**What do you dislike about Drata?**

Not super intuitive at the more granular level. No integration with some tools.

**What problems is Drata solving and how is that benefiting you?**

Maintaining a record of our documents and folks acknowledging them. Also, providing some visibility into compliance status.

  ### 38. SOC-2 made easy

**Rating:** 5.0/5.0 stars

**Reviewed by:** Kelly A. | CTO, Small-Business (50 or fewer emp.)

**Reviewed Date:** November 18, 2021

**What do you like best about Drata?**

I love how automated it is. Their customer success team is fantastic. As someone who had to figure out our SOC-2 posture frantically, they put me at ease with tools and talent.

**What do you dislike about Drata?**

I can't think of anything that I dislike, honestly.

**What problems is Drata solving and how is that benefiting you?**

We needed to work toward compliance, and we needed to do it quickly. As a small company, I dreaded going into it alone. They helped me understand what was possible speedily and of course, offered the tools and guidance I needed to get up and running quickly. I love showing our clients our policies and that our systems and processes are regularly monitored. They put me in touch with an auditor, too, completing our compliance route.

**Official Response from Ashley Hyman:**

> Kelly, we so appreciate you! Thank you for your review. 

The San Diego startup community is the best!❤️

Thanks,
Ashley Hyman
VP of Customer Success

  ### 39. ISO 27001 compliance made easy with Drata

**Rating:** 5.0/5.0 stars

**Reviewed by:** Olivier d. | Solution Architect &amp; CSM, Small-Business (50 or fewer emp.)

**Reviewed Date:** December 16, 2024

**What do you like best about Drata?**

Getting started is easy with the step by step guide and the online help as well as the assistance from a consultant. The tool is well structured to navigate and the integrations with AWS, Google Workspace, GitHub are awesome. The pre-mapping of the policies and the controls let you focus on your compliance level quickly instead of spending time studying the standards.

**What do you dislike about Drata?**

The work to define and write all the policies is still a big part of the work you need to go through. Even if there are templates, I feel I am still on my own, but I guess that's something you have to do no matter what.

**What problems is Drata solving and how is that benefiting you?**

It supports your organization efficiently to go towards security compliance.

  ### 40. Compliance automation made easy.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Albert C. | Head of Security &amp; Compliance, Computer Software, Small-Business (50 or fewer emp.)

**Reviewed Date:** October 29, 2024

**What do you like best about Drata?**

The implementation service offered was great. 30 days handheld through the process with experienced users. Support is always fast and incredibly helpful. SSO worked really well and it integrated with the majority of our tech stack. Most of my team are able to navigate their way around it easily. For me, its easy to use and has become an unconscious standard practice to use it every day.

**What do you dislike about Drata?**

Quite a bit of the products newer useful features don't support our versioning control i.e. 'compliance as code' and gitlab. 
A lot of newer features released, i.e., risk management and trust centre pro are rather costly addons and during the procurement process, we weren't made aware of this.

**What problems is Drata solving and how is that benefiting you?**

Evidence gathering is largely automated with helpful reminders for the less automated bits. It is a single pain of glass for  our various standards and their controls.

  ### 41. Great platform for managing ISO 27001 & GDPR compliance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** February 24, 2025

**What do you like best about Drata?**

Drata provides a fully comprehensive window into management of relevant frameworks such as ISO 27001 and GDPR. It's a "one stop" for maintaining evidence and best practice to support all relevant controls. The support team are really responsive and it's great to see features being designed and implemented based on customer feedback.

**What do you dislike about Drata?**

There's a few areas that could still use tweaks to be truly powerful but I can see a lot of them are already on the roadmap which is great. Initial set up is a big job but that's to be expected for the amount of automation and monitoring it provides longer term.

**What problems is Drata solving and how is that benefiting you?**

Ongoing monitoring and management of our ISMS for ISO 27001 compliance, and evidence of GDPR compliance.

  ### 42. Makes Compliance easy

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Real Estate | Small-Business (50 or fewer emp.)

**Reviewed Date:** July 17, 2025

**What do you like best about Drata?**

New interface is easy to use and accelerates the compliance journey greatly. customer Support is there and provides expert compliance knowledge for many frameworks.

**What do you dislike about Drata?**

There are frequent updates so takes some time to know where things are. More integrations planned, but not yet supported.

**What problems is Drata solving and how is that benefiting you?**

Fast and painless SOC2 Compliance.

  ### 43. A top notch, total portal for SOC reviews

**Rating:** 5.0/5.0 stars

**Reviewed by:** Clint M. | IT Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** January 02, 2025

**What do you like best about Drata?**

Drata was easy to implement and provided an accurate place to upload our evidence. It gave us frameworks so that our guidance in our SOC 2 review was quickly done - we received our audit results in practically no time thanks to Drata's system.

**What do you dislike about Drata?**

The only real downside we experienced with Drata was the occasional glitch with internal testing.  The help desk was able to resolve any of those issues quickly.

**What problems is Drata solving and how is that benefiting you?**

Drata helped us with our SOC 2 certification - this benefits us as it gives our business a lift among our clients and provides us with the needed tool to get in the door with further clients.

  ### 44. Drata Support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Health, Wellness and Fitness | Mid-Market (51-1000 emp.)

**Reviewed Date:** June 04, 2025

**What do you like best about Drata?**

Drata is great for monitoring compliance against the frameworks which Atlantis Health need to be compliant against.
The support staff are friendly and helpful.
Our assigned CSM is always willing to assist and answer any questions along with keeping us focus on achieving our goals.

**What do you dislike about Drata?**

Ensuring policies & evidence is kept current.

**What problems is Drata solving and how is that benefiting you?**

Compliance with GDPR, HIPAA, ISO27001 and SOC2 for start.
Focus efforts on what is required to achieve compliance.

  ### 45. Gamechanger for security compliance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** January 28, 2021

**What do you like best about Drata?**

- Product velocity is awesome; continues to get better quickly
- Really supportive CS program; helped us set up for our SOC 2 effectively
- Good alerting and notifications when things go wrong (e.g. via Slack app) so we can fix asap
- Device agent so our team doesn't have to install or use additional 3rd party MDM software
- The Trust Center / Hub for an overview of security protocols is great to share with prospects and customers
- Auditor app to make it easy for Auditors to get the data and create a report

**What do you dislike about Drata?**

- Some gaps in automated test coverage means we still need to regulary add and take screenshots
- As normal, some bugs and minor issues in the product, but they get resolved quickly after being reported

**What problems is Drata solving and how is that benefiting you?**

- Getting started sooner than expected with SOC 2 audits
- Saving a significant amount of time and effort in collecting the evidence for our audits
- Making it easier to have and get adherence to key company policies
- Helping us formalize and improve our security understanding and posture
- Better visibility and transparency (even internally) around our compliance requirements and status
- Credibility when engaging prospects around our security protocols and practices

  ### 46. Best application for building a compliance program, hands down!!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jonathon M. | Founder / Principal, Small-Business (50 or fewer emp.)

**Reviewed Date:** February 07, 2025

**What do you like best about Drata?**

Drata has everything to love. The platform is easy to use, intuitive, and allows the user to make almost all connections, for automatic updates. The help AI is amazing and has answered every question I have had. Strong support team. By applying Agile practices to this launch, we have reached 73% passing tests in 38 days.

**What do you dislike about Drata?**

That I did not know about them earlier! I  have found nothing bad so far!

**What problems is Drata solving and how is that benefiting you?**

Drata solves the problem of creating from scratch,  a compliance program for most of the top security compliance frameworks.

  ### 47. Drata helps keep our virtual tech company compliant with necessary compliance requirements.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Nicole D. | People Operations Manager, Small-Business (50 or fewer emp.)

**Reviewed Date:** February 05, 2025

**What do you like best about Drata?**

Its an all in one platform where I can view our employee compliance requirements. It is easy to navigate and keeps me on track each year for annual trainings.

**What do you dislike about Drata?**

I wish there was more add ons such as sexual harrassment training, and a more extensive HIPAA training. This would be great to ensure basic requirements are met for employee security on their work devices

**What problems is Drata solving and how is that benefiting you?**

Compliance all in one place to easily identify areas where tasks are not complete for employees. Helps us to stay on track with up to date information.

  ### 48. Best Compliance tool out there

**Rating:** 5.0/5.0 stars

**Reviewed by:** Kithmina S. | Information Security Analyst, Mid-Market (51-1000 emp.)

**Reviewed Date:** January 21, 2025

**What do you like best about Drata?**

It is very easy to use, Implementation was a breeze, and also has top-notch customer support. We use the product on a daily basis and since it was easy to integrate with our other platforms, compliance is easier to perform.

**What do you dislike about Drata?**

Some granularity in controls still needs an uplift, one such place is ticketing management, It currently only supports Jira which creates some difficulties when performing tasks.

**What problems is Drata solving and how is that benefiting you?**

Keeping up with compliance frameworks, monitoring controls and systems, maintaining policies and procedures, managing vendors

  ### 49. Great platform to manage compliance to multiple framework.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Vaibhav Singh B. | Chief Information &amp; Security Officer, Mid-Market (51-1000 emp.)

**Reviewed Date:** March 11, 2025

**What do you like best about Drata?**

Consolidation of controls aligned to various frameworks make audit easy and efficient. It really helps in building efficient and accurate process for monitoring controls. Continuous monitoring through integration is very helpful to identify & mitigate vulnerabilities. CSM support was great throughout the onboarding and transition process. @Elizabeth John

**What do you dislike about Drata?**

There is still scope of improvement on Risk Management component.

**What problems is Drata solving and how is that benefiting you?**

It helps in reducing repetitive work for multiple frameworks and various controls are mapped together.

  ### 50. Drata platform has really streamlined our compliance processes

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.)

**Reviewed Date:** December 20, 2024

**What do you like best about Drata?**

I’ve been super impressed with Drata! As an early stage start-up oursleves, resources are limited and the Drata platform has really streamlined our compliance processes, especially with SOC 2. The automation features are a game-changer, making tasks like evidence collection and policy management so much easier and less time-consuming. Drata integrates seamlessly with our existing tools, which has saved us a ton of manual work. Plus, their customer support is fantastic—responsive, knowledgeable, and always ready to help. Our customer service manager, Jessica, has been a huge help and is always willing to goes the extra mile. Overall, Drata has made our compliance journey smoother and way more efficient.

**What do you dislike about Drata?**

One area for improvement with Drata is the policy editor. During our annual policy review, we found the process a bit clunky because the executive who approves the policies isn’t the same person who loads them for review. It would be great to have a feature that allows us to make policy updates without affecting the SLA until the designated approver signs off. This would streamline the workflow and avoid any unintended impacts while policies are under review. Overall, it’s a small issue, but addressing it could really enhance the platform’s functionality for our team.

**What problems is Drata solving and how is that benefiting you?**

Drata addresses several problems for us:
1. Reduces the amount of manual compliance processes we need to do with evidence collection and being able to set reminders of when evidence needs to be updated to automated control monitoring, which has been saved us time on needing to manually monitor/check controls. 
2. The pre-mapped controlsl for the various frameworks that we use has also provided a huge benefit in allowing us to setup our compliance program and also helps us with our annual SOC2 audit. 
3. Their knowledge base and compliance experts have been instrmential in addressing our very specific questions / needs.
4. Their customer success / support team is phenomenal. Our customer success account manager, Jessica, is very repsonisve and solution oriented. It is a huge help for a company of our size and scale.


## Drata Discussions
  - [Hard Disk Encryption](https://www.g2.com/discussions/hard-disk-encryption) - 1 comment, 2 upvotes
  - [How are others coping with slower support, chatbot inconsistencies, and login / chat issues?](https://www.g2.com/discussions/how-are-others-coping-with-slower-support-chatbot-inconsistencies-and-login-chat-issues) - 1 comment, 1 upvote
  - [Has anyone else felt friction between Drata’s control depth and their own compliance approach or frameworks?](https://www.g2.com/discussions/has-anyone-else-felt-friction-between-drata-s-control-depth-and-their-own-compliance-approach-or-frameworks) - 1 comment, 1 upvote
  - [What’s your workaround when Drata’s integrations and automation do not go deep enough?](https://www.g2.com/discussions/what-s-your-workaround-when-drata-s-integrations-and-automation-do-not-go-deep-enough) - 1 comment, 1 upvote
  - [How are you all dealing with confusing navigation and policy / control relationships in Drata?](https://www.g2.com/discussions/how-are-you-all-dealing-with-confusing-navigation-and-policy-control-relationships-in-drata) - 1 comment, 1 upvote

- [View Drata pricing details and edition comparison](https://www.g2.com/products/drata/reviews?page=5&source=search&section=pricing&secure%5Bexpires_at%5D=2026-08-05+17%3A01%3A40+-0500&secure%5Bsession_id%5D=9aaf8bf0-b0be-4897-9e9f-03dfb83c3075&secure%5Btoken%5D=ed298412d14547343ae76c2f642656ccb22e4f51206cd0c71c9df12d1aeda3da&format=llm_user)
## Drata Integrations
  - [1Password](https://www.g2.com/products/1password/reviews)
  - [360Learning](https://www.g2.com/products/360learning/reviews)
  - [ADP Workforce Now](https://www.g2.com/products/adp-workforce-now/reviews)
  - [Agentforce Sales (formerly Salesforce Sales Cloud)](https://www.g2.com/products/agentforce-sales-formerly-salesforce-sales-cloud/reviews)
  - [Aha!](https://www.g2.com/products/aha/reviews)
  - [Aikido Security](https://www.g2.com/products/aikido-security/reviews)
  - [AlexisHR](https://www.g2.com/products/alexishr/reviews)
  - [Amazon EC2](https://www.g2.com/products/amazon-ec2/reviews)
  - [Arnica](https://www.g2.com/products/arnica/reviews)
  - [Asana](https://www.g2.com/products/asana/reviews)
  - [AWS Cloud9](https://www.g2.com/products/aws-cloud9/reviews)
  - [AWS CodeCommit](https://www.g2.com/products/aws-codecommit/reviews)
  - [AWS Fargate](https://www.g2.com/products/aws-fargate/reviews)
  - [AWS Lambda](https://www.g2.com/products/aws-lambda/reviews)
  - [AWS Organizations](https://www.g2.com/products/aws-organizations/reviews)
  - [Azure Portal](https://www.g2.com/products/azure-portal/reviews)
  - [Azure SQL Database](https://www.g2.com/products/azure-sql-database/reviews)
  - [BambooHR](https://www.g2.com/products/bamboohr/reviews)
  - [Basecamp](https://www.g2.com/products/basecamp/reviews)
  - [Bitbucket](https://www.g2.com/products/bitbucket/reviews)
  - [Bitwarden](https://www.g2.com/products/bitwarden/reviews)
  - [Box](https://www.g2.com/products/box/reviews)
  - [Certn](https://www.g2.com/products/certn/reviews)
  - [CharlieHR](https://www.g2.com/products/charliehr/reviews)
  - [ChartHop](https://www.g2.com/products/charthop/reviews)
  - [Checkr](https://www.g2.com/products/checkr-inc-checkr/reviews)
  - [Checkr](https://www.g2.com/products/checkr/reviews)
  - [CircleCI](https://www.g2.com/products/circleci/reviews)
  - [ClearCompany](https://www.g2.com/products/clearcompany/reviews)
  - [ClickUp](https://www.g2.com/products/clickup/reviews)
  - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews)
  - [Confluence](https://www.g2.com/products/confluence/reviews)
  - [Cornerstone](https://www.g2.com/products/cornerstone-cornerstone/reviews)
  - [Coursera for Business](https://www.g2.com/products/coursera-for-business/reviews)
  - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews)
  - [CrowdStrike Falcon Exposure Management](https://www.g2.com/products/crowdstrike-falcon-exposure-management/reviews)
  - [CyberArk Workforce Identity](https://www.g2.com/products/cyberark-workforce-identity/reviews)
  - [Darwinbox](https://www.g2.com/products/darwinbox/reviews)
  - [Datadog](https://www.g2.com/products/datadog/reviews)
  - [Dayforce](https://www.g2.com/products/dayforce/reviews)
  - [Deel HR](https://www.g2.com/products/deel-hr/reviews)
  - [Docebo](https://www.g2.com/products/docebo/reviews)
  - [Docusign](https://www.g2.com/products/docusign/reviews)
  - [Dropbox](https://www.g2.com/products/dropbox/reviews)
  - [Duo](https://www.g2.com/products/duo/reviews)
  - [EasyLlama](https://www.g2.com/products/easyllama/reviews)
  - [Employment Hero](https://www.g2.com/products/employment-hero/reviews)
  - [Factorial](https://www.g2.com/products/factorial/reviews)
  - [Fibery](https://www.g2.com/products/fibery/reviews)
  - [Freshdesk](https://www.g2.com/products/freshdesk/reviews)
  - [Freshservice](https://www.g2.com/products/freshservice/reviews)
  - [Freshteam by Freshworks](https://www.g2.com/products/freshteam-by-freshworks/reviews)
  - [Front](https://www.g2.com/products/front/reviews)
  - [GitHub](https://www.g2.com/products/github/reviews)
  - [GitLab](https://www.g2.com/products/gitlab/reviews)
  - [Go1](https://www.g2.com/products/go1-go1/reviews)
  - [GoodHire (a Checkr company)](https://www.g2.com/products/goodhire-a-checkr-company/reviews)
  - [Google Cloud Run](https://www.g2.com/products/google-cloud-run/reviews)
  - [Google Workspace](https://www.g2.com/products/google-workspace/reviews)
  - [Gusto](https://www.g2.com/products/gusto/reviews)
  - [Harness](https://www.g2.com/products/harness-wealth-harness/reviews)
  - [Height](https://www.g2.com/products/height/reviews)
  - [Hexnode UEM](https://www.g2.com/products/hexnode-uem/reviews)
  - [HiBob HRIS](https://www.g2.com/products/hibob-hris/reviews)
  - [HireRight](https://www.g2.com/products/hireright/reviews)
  - [Hive](https://www.g2.com/products/hive-hive-hive/reviews)
  - [Humaans](https://www.g2.com/products/humaans/reviews)
  - [Huntress Managed Security Awareness Training](https://www.g2.com/products/huntress-managed-security-awareness-training/reviews)
  - [Hyperproof](https://www.g2.com/products/hyperproof/reviews)
  - [Infosec IQ](https://www.g2.com/products/infosec-iq/reviews)
  - [Insperity](https://www.g2.com/products/insperity/reviews)
  - [Intellihr.com](https://www.g2.com/products/intellihr-com/reviews)
  - [Intruder](https://www.g2.com/products/intruder/reviews)
  - [Ironclad](https://www.g2.com/products/ironclad/reviews)
  - [Iru](https://www.g2.com/products/iru/reviews)
  - [Jamf](https://www.g2.com/products/jamf/reviews)
  - [Jenkins](https://www.g2.com/products/jenkins/reviews)
  - [Jira](https://www.g2.com/products/jira/reviews)
  - [Jira Service Management](https://www.g2.com/products/jira-service-management/reviews)
  - [Jit](https://www.g2.com/products/jit/reviews)
  - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews)
  - [Justworks](https://www.g2.com/products/justworks/reviews)
  - [Kallidus](https://www.g2.com/products/kallidus/reviews)
  - [KarmaCheck](https://www.g2.com/products/karmacheck/reviews)
  - [Keka](https://www.g2.com/products/keka/reviews)
  - [KnowBe4 Security Awareness Training](https://www.g2.com/products/knowbe4-security-awareness-training/reviews)
  - [LastPass](https://www.g2.com/products/lastpass/reviews)
  - [Lattice](https://www.g2.com/products/lattice-lattice/reviews)
  - [Linear](https://www.g2.com/products/linear/reviews)
  - [LinkedIn Learning](https://www.g2.com/products/linkedin-linkedin-learning/reviews)
  - [Lukka](https://www.g2.com/products/lukka/reviews)
  - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews)
  - [Microsoft Defender Vulnerability Management](https://www.g2.com/products/microsoft-defender-vulnerability-management/reviews)
  - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews)
  - [Microsoft Intune Enterprise Application Management](https://www.g2.com/products/microsoft-intune-enterprise-application-management/reviews)
  - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews)
  - [miniOrange Identity &amp; Access Management](https://www.g2.com/products/miniorange-identity-access-management/reviews)
  - [Namely](https://www.g2.com/products/namely/reviews)
  - [New Relic](https://www.g2.com/products/new-relic/reviews)
  - [NinjaOne](https://www.g2.com/products/ninjaone/reviews)
  - [Notion](https://www.g2.com/products/notion/reviews)
  - [Objectivity/DB](https://www.g2.com/products/objectivity-db/reviews)
  - [Officient](https://www.g2.com/products/officient/reviews)
  - [Okta](https://www.g2.com/products/okta/reviews)
  - [OneLogin](https://www.g2.com/products/onelogin/reviews)
  - [Orca](https://www.g2.com/products/cortez-labs-orca/reviews)
  - [Oyster](https://www.g2.com/products/oyster-oyster/reviews)
  - [Paychex](https://www.g2.com/products/paychex/reviews)
  - [Paycor](https://www.g2.com/products/paycor/reviews)
  - [Paylocity](https://www.g2.com/products/paylocity/reviews)
  - [PeopleFluent Learning](https://www.g2.com/products/peoplefluent-peoplefluent-learning/reviews)
  - [Personio](https://www.g2.com/products/personio/reviews)
  - [Qualys VM](https://www.g2.com/products/qualys-vm/reviews)
  - [Rapid7 Managed Detection and Response Services](https://www.g2.com/products/rapid7-managed-detection-and-response-services/reviews)
  - [Rippling](https://www.g2.com/products/rippling/reviews)
  - [SafeBase](https://www.g2.com/products/safebase/reviews)
  - [Sage HR](https://www.g2.com/products/sage-hr/reviews)
  - [Salesforce Heroku](https://www.g2.com/products/salesforce-heroku/reviews)
  - [SAP SuccessFactors Onboarding](https://www.g2.com/products/sap-successfactors-onboarding/reviews)
  - [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews)
  - [SentinelOne Singularity Vulnerability Management](https://www.g2.com/products/sentinelone-singularity-vulnerability-management/reviews)
  - [ServiceNow Customer Service Management](https://www.g2.com/products/servicenow-customer-service-management/reviews)
  - [Shortcut](https://www.g2.com/products/shortcut/reviews)
  - [Slack](https://www.g2.com/products/slack/reviews)
  - [Slack Connector for Jira](https://www.g2.com/products/slack-connector-for-jira/reviews)
  - [Snyk](https://www.g2.com/products/snyk/reviews)
  - [Swif.ai](https://www.g2.com/products/swif-ai/reviews)
  - [TeamWork](https://www.g2.com/products/teamwork-2025-01-31/reviews)
  - [Tenable Vulnerability Management](https://www.g2.com/products/tenable-vulnerability-management/reviews)
  - [Tines](https://www.g2.com/products/tines/reviews)
  - [Torq](https://www.g2.com/products/torq-ai-torq/reviews)
  - [Travis CI](https://www.g2.com/products/travis-ci/reviews)
  - [Tray.ai](https://www.g2.com/products/tray-ai/reviews)
  - [Trello](https://www.g2.com/products/trello/reviews)
  - [TriNet](https://www.g2.com/products/trinet/reviews)
  - [Udemy Business](https://www.g2.com/products/udemy-business/reviews)
  - [UKG Pro](https://www.g2.com/products/ukg-pro/reviews)
  - [UKG Ready](https://www.g2.com/products/ukg-ready/reviews)
  - [Upwind](https://www.g2.com/products/upwind/reviews)
  - [Vetty](https://www.g2.com/products/vetty/reviews)
  - [Wiz](https://www.g2.com/products/wiz-wiz/reviews)
  - [Wiz Code](https://www.g2.com/products/wiz-code/reviews)
  - [Workday Learning](https://www.g2.com/products/workday-learning/reviews)
  - [Workspace ONE](https://www.g2.com/products/workspace-one/reviews)
  - [Wrike](https://www.g2.com/products/wrike/reviews)
  - [XFA](https://www.g2.com/products/xfa/reviews)
  - [Zendesk for Customer Service](https://www.g2.com/products/zendesk-for-customer-service/reviews)
  - [Zip](https://www.g2.com/products/zip-2025-09-24/reviews)
  - [Zoho BugTracker](https://www.g2.com/products/zoho-bugtracker/reviews)
  - [Zoho CRM](https://www.g2.com/products/zoho-crm/reviews)
  - [Zoho Desk](https://www.g2.com/products/zoho-desk/reviews)
  - [Zoho People](https://www.g2.com/products/zoho-people/reviews)

## Drata Features
****
- Tagging
- Natural Language Processing
- Data Extraction
- Multi-Language
- Predictive Analytics
- Drag & Drop
- Speech Recognition
- Reporting/Analytics
- Data Storage Management
- Virtual Personal Assistant (VPA)
- AI Copilot
- Customer Segmentation
- Collaboration Tools
- Data Import/Export
- Generative AI
- For eCommerce
- Role-Based Permissions
- Customizable Branding
- Search/Filter
- Monitoring
- Document Management
- API
- Data Visualization
- Trend Analysis
- Machine Learning
- Access Controls/Permissions
- Alerts/Escalation
- Performance Metrics
- Real-Time Data
- Third-Party Integrations
- Mobile App
- Multiple Data Sources
- For Sales Teams/Organizations
- Sentiment Analysis
- Activity Dashboard
- Chatbot

****
- Incident Management
- Real-Time Monitoring
- Evidence Management
- Risk Alerts
- Reporting & Statistics
- Third-Party Integrations
- Workflow Management
- Risk Analysis
- Sarbanes-Oxley Compliance
- Single Sign On
- Compliance Management
- Policy Management
- Real-Time Reporting
- Audit Trail
- Assessment Management
- HIPAA Compliant
- Operational Risk Management
- Document Storage
- Enterprise Risk Management
- Data Visualization
- Configurable Workflow
- Vendor Management
- IT Risk Management
- User Management
- Issue Management
- Internal Controls Management
- AI Copilot
- Environmental Compliance
- Customizable Reports
- Data Import/Export
- Risk Management
- API
- Document Management
- Risk Assessment
- Activity Dashboard
- Task Management
- Audit Management
- Generative AI
- Governance
- Corrective and Preventive Actions (CAPA)
- Alerts/Notifications
- FDA Compliance
- Secure Data Storage
- Approval Process Control
- Version Control

**Security**
- Compliance Monitoring
- Anomoly Detection
- Cloud Gap Analytics

**Functionality**
- Centralized Vendor Catalog
- Questionnaire Templates
- User Access Control

**Generative AI**
- AI Text Summarization
- AI Text Generation
- Generative AI

**Generative AI**
- AI Text Generation
- AI Text Summarization
- Generative AI
- Approval Process Control

**AI Compliance**
- Regulatory Reporting
- Automated Compliance
- Audit Trails

**Agentic AI - Vendor Management**
- Decision Making

****
- Generative AI
- Billing & Invoicing
- Customizable Templates
- User Management
- Invoice Processing
- Onboarding
- Search/Filter
- Sourcing Management
- Vendor Master Data Management
- Procurement Management
- Reporting & Statistics
- Document Management
- Project Management
- Data Visualization
- Access Controls/Permissions
- Transaction History
- Risk Assessment
- Activity Dashboard
- Real-Time Data
- Alerts/Notifications
- Offboarding
- AI Copilot
- Self Service Portal
- Audit Management
- Collaboration Tools
- API
- Approval Process Control
- Vendor Payment
- Third-Party Integrations
- Performance Metrics
- Purchase Order Management
- Contract/License Management
- Data Import/Export
- Single Sign On
- Workflow Management
- Compliance Management
- Task Management

**Cloud Visibility**
- Data Discovery
- Cloud Registry
- Cloud Gap Analytics

**Revenue Recognition**
- Usage Tracking
- Deferred Revenue
- Revenue Accrual

**Compliance**
- Governance
- Data Governance
- Sensitive Data Compliance

**Risk assessment**
- Risk Scoring
- Monitoring And Alerts
- AI Monitoring

**Workflows - Audit Management**
- Audit Trail
- Recommendations
- Collaboration Tools
- Integrations
- Planning & Scheduling

**Risk Management & Monitoring**
- AI Risk Management
- Real-time Monitoring

**Generative AI - Security Compliance**
- Predictive Risk
- Automated Documentation

**Platform AI Features - Policy Management**
- Reports
- Workflow Management
- Customizable Reports
- Content Management
- Renewal Management
- Document Management
- Forms Management
- Compliance Management
- Incident Management
- Lifecycle Management
- Template Management
- Audit Management
- Assessment Management
- Policy Metadata Management
- Expiration Management
- Configurable Workflow

****
- Version Control
- Secure Data Storage
- Search/Filter
- Reminders
- Monitoring
- API
- Activity Tracking
- Activity Dashboard
- Role-Based Permissions
- Single Sign On
- Policy Training
- Archiving & Retention
- Audit Trail
- Attestation
- AI/Machine Learning
- Chatbot
- Collaboration Tools
- Risk Analysis
- Self Service Portal
- Document Analysis
- AI Copilot
- Third-Party Integrations
- Policy Creation
- Digital Signature
- Alerts/Notifications
- Policy Library
- Real-Time Notifications
- Document Review
- Reporting/Analytics
- Customizable Templates

****
- HIPAA Compliant
- Workflow Management
- Secure Data Storage
- Third-Party Integrations
- Access Controls/Permissions
- Consent Management
- Data Mapping
- Audit Management
- API
- Role-Based Permissions
- Policy Management
- Single Sign On
- Risk Management
- Search/Filter
- Template Management
- Multi-Language
- Data Visualization
- User Management
- Monitoring
- PIA/DPIA
- Alerts/Notifications
- Sensitive Data Identification
- Self Service Portal
- Archiving & Retention
- Data Import/Export
- Risk Assessment
- Activity Dashboard
- Document Management
- PCI Compliance
- Incident Management
- Data Governance
- Compliance Management
- Customizable Templates
- AI Copilot
- Reporting & Statistics
- Generative AI
- Data Storage Management
- File Management
- Customizable Reports
- Performance Metrics
- Risk Analysis
- Intrusion Detection System
- Log Analysis
- Security Auditing
- Log Management
- Reporting/Analytics
- Risk Alerts
- PCI Assessment
- Vulnerability Scanning
- Event Logs
- File Integrity Monitoring
- Exceptions Management
- Data Synchronization
- Compliance Tracking
- Activity Monitoring
- Audit Trail
- Secure Login

**Security**
- Data Security
- Data loss Prevention
- Security Auditing
- Real-Time Data
- Cloud Application Security
- SSL Security

**Administration**
- Policy Enforcement
- Auditing
- Workflow Management

**Documentation - Audit Management**
- Templates & Forms
- Checklists

**AI Lifecycle Management**
- Lifecycle Automation

**Generative AI - Vendor Security and Privacy Assessment**
- Text Summarization
- Text Generation

**Identity**
- SSO
- Real-Time Analytics
- Visual Analytics
- Reporting/Analytics

**Reporting & Analytics - Audit Management**
- Dashboard
- Audit Performance
- Industry Compliance
- ISO Compliance
- Environmental Compliance
- AML Compliance
- Sarbanes-Oxley Compliance
- KYC Compliance
- FDA Compliance
- OSHA Compliance

**Access Control and Security**
- Pole-based Access Control (RBAC)

****
- Alerts/Notifications
- AI Copilot
- Access Controls/Permissions
- Endpoint Management
- Intrusion Detection System
- Compliance Management
- HIPAA Compliant
- Search/Filter
- API
- Two-Factor Authentication
- Data Visualization
- Risk Assessment
- Real-Time Monitoring
- Event Logs
- Activity Dashboard
- Audit Management
- Cloud Security Policy Management
- Vulnerability Protection
- Anti Virus
- Incident Management
- Threat Intelligence
- Real-Time Reporting
- Reporting & Statistics
- User Management
- Encryption
- Vulnerability Scanning
- Generative AI
- Status Tracking
- Third-Party Integrations
- Real-Time Notifications
- Patch Management
- Monitoring
- Cloud Encryption

****
- Mobile Access
- Corrective and Preventive Actions (CAPA)
- Issue Management
- Document Management
- Role-Based Permissions
- Activity Tracking
- Document Storage
- Reporting & Statistics
- Task Management
- Workflow Management
- Status Tracking
- Monitoring
- Data Visualization
- Approval Process Control
- Forms Management
- Change Management
- Risk Alerts
- Asset Tracking
- AI Copilot
- API
- Risk Analysis
- Policy Management
- Incident Management
- Real-Time Reporting
- Real-Time Notifications
- Alerts/Notifications
- Security Auditing
- Compliance Management
- Risk Assessment
- Real-Time Monitoring
- Version Control
- Archiving & Retention
- Alerts/Escalation
- Customizable Reports
- Compliance Tracking
- Access Controls/Permissions
- Certification Tracking
- Surveys & Feedback
- Digital Signature
- HIPAA Compliant
- Reminders

**Collaboration and Communication **
- Model Sharing and Reuse

**Agentic AI - AI Governance Tools**
- Autonomous Task Execution
- Multi-step Planning
- Cross-system Integration
- Adaptive Learning
- Natural Language Interaction
- Proactive Assistance
- Decision Making

## Top Drata Alternatives
  - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,662 reviews)
  - [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews) - 4.9/5.0 (1,311 reviews)
  - [Hyperproof](https://www.g2.com/products/hyperproof/reviews) - 4.5/5.0 (219 reviews)

