I appreciate Drata because it helps me standardize policies in areas like data use and direct control, which is really crucial for my work with my tech lawyer. I find it fun to work with, and it's very helpful in ensuring that our policies are up to date. My team and the cybersecurity architecture team use it to understand how the technology framework is evolving. The initial setup was great and very smooth, without any issues. Review collected by and hosted on G2.com.

I think one thing that could be improved is having scheduled data control measures fortnightly or a timeline that we could set. That would generally help. Review collected by and hosted on G2.com.

I appreciate how Drata keeps everything organized, from evidence and compliance to risk management, making it the key to everything. The interface is always improving, becoming smarter and easier to use, which is great since I am in it every day working on compliance. What I really like is how the interface actively guides me through compliance work by linking controls, policies, and integrations together. It lets me see what's wrong, what's missing, why it matters, and how to fix it. The setup process is very intuitive as well, allowing me to add and remove vendors, policies, and connections easily. Drata was essential in obtaining our first SOC2 certification and continues to be invaluable in maintaining it. I can't imagine how challenging it would be to organize everything without Drata. Review collected by and hosted on G2.com.

I always seem to struggle when it comes to the hardware. I feel that workstations could be reported on a little better. Same for people. When looking at people, and seeing their compliance tasks overdue, like policies, it feels a bit convoluted. Review collected by and hosted on G2.com.

Drata let's us control all of our compliance/audit related requirements in one system–simple as that. The UX is great–it's easy to understand, easy to navigate, easy to add evidence, etc. The automation workflows are great–being able to automatically import all of our employees, devices, 2FA rules, etc. directly from our SaaS/PaaS products (e.g., Azure) is fantastic. The TrustCenter is quite helpful as well as a way of sharing sensitive documents (e.g. audit reports) with third parties in a tracked manner. It's a great tool tbh. Review collected by and hosted on G2.com.

It's a big system so it can be quite confusing at first. It's hard to know what's actually required for your various audit types–Drata gives you a template for nearly everything, but do you actually need everything in the template? Probably not. That's not Drata's fault, it's just the nature of being a generalized compliance tool that works across every industry. Review collected by and hosted on G2.com.

The platform is relatively easy to use and has everything included within it Review collected by and hosted on G2.com.

Sometimes it is unclear how the process works fully, especially with the involvement of 3rd party companies Review collected by and hosted on G2.com.

I like how easily and friendly the interface of Drata is. It's very clean, and everything is easy to find, which is important since we ask our employees to use this software once a year; having an easy-to-use interface is crucial. It ensures that they can complete courses and understand everything without spending a lot of time figuring out how the software works. The initial setup was easy too; we just needed to set some things, and it was working pretty well. Everyone can do the courses and make sure they're aware of the best practices, so it's easy-going software. Review collected by and hosted on G2.com.

I had some issues logging in, but the team was very helpful. They helped me, and I received a reply a few minutes after requesting some help. They can add an option to log in with social media to avoid issues, such as not receiving matching links because they end up in the spam folder. Review collected by and hosted on G2.com.

As a devops engineer the most useful part is the AWS integrations (and other similar integrations), and the automated controls. Review collected by and hosted on G2.com.

The web interface is sometimes hard to navigate, links don't always open what I expect, or are just lacking. The wording is sometimes confusing: some terms seem specific to Drata and need to be learnt, but there's no contextual help. Review collected by and hosted on G2.com.

I like the most the ease of communication with auditors through the platform. I also like the ease of tracking Personnel compliance through Drata. Review collected by and hosted on G2.com.

I really had more use from customer support than from our account manager to be honest. Also, some fixes took weeks for us, which was not convenient since it was during the audit. Review collected by and hosted on G2.com.

I like that Drata helps me with getting ISO 27001 by working as a checklist. The interface and integrations work really well, which I find valuable. It's easy to use and offers clear progress tracking, which allows us to scope tasks efficiently. The customer support is great, as demonstrated when Terrious helped me with the Orca integration issue. Review collected by and hosted on G2.com.

The Orca integration was not working but Terrious managed to help me. Support was great Review collected by and hosted on G2.com.

I like the pricing point of Drata, which is important as we are mindful about our budget while trying to achieve SOC2 compliance. The onboarding process was smooth, and we were guided through a series of workshops and onboarding sessions that provided us the tools to start using the platform effectively. The initial setup of Drata was also easy. Review collected by and hosted on G2.com.

The UI is a little confusing sometimes. As someone who has already done a SOC2 audit with a competitor product, I sometimes find the Drata platform a little confusing. It's not straightforward to see what tasks are missing and what specific things we need to fix. I think UX could be improved. Review collected by and hosted on G2.com.

I love the ease of use of Drata. The centralization is what helps us the most, it saves a lot of time with our small team. It prevents us from having confusion about what is up-to-date or not. I also appreciate the sharing with our auditors for certifications. Review collected by and hosted on G2.com.

For now, nothing. Except maybe the price, which is high for a startup. Review collected by and hosted on G2.com.