Drata Pricing Overview

Drata completely transformed the way we manage our compliance activities, especially in terms of keeping track of the controls and the related evidences. Prior to using Drata, our compliance activities such as policy management, risk assessments and evidence collection were all managed via Google Drive, mainly on spreadsheets which made everything quite manual and scattered around. Now we have everything in one place and in great detail. All our evidences are documented within the platform and it is a huge plus that we have the Audit Hub so there is no need for us or the auditor to waste time anywhere else trying to reach these documents. We manage all employee tasks from Drata and centralize the security training, too. Setting up the integrations is fast and easy, and the related monitors give us additional insight on our tech stack. Our periodic Risk Assessments are now easier because we have one platform to track treatment plans instead of spreadsheets. Vendor compliance management and report review functionality is also really handy. The custom framework capability is really helpful for us to track country-specific frameworks. We made use of the custom framework feature very recently an it worked wonders for us.

Drata team is always very quick to help us assist with any problem or question we might have. Our customer success manager efficiently keeps track of any open items and supports us in the process until they are solved. He also introduces us to new features often. The team behind the live chat, both for platform-specific questions and compliance questions, also approach the issues with the utmost care. We had a change of CSM's a few times, and each time we were accompanied with great attention and care.

We use Drata every day and it definitely helps us automate almost everything compliance related. It is a great tool to track SOC2, ISO controls. It has been over a year of using Drata, and we have not had any doubts since then Review collected by and hosted on G2.com.

There isn't anything that I particularly dislike about Drata. Even when there are issues with the platform (and there was nothing major so far at all, just a few issues that you would expect from any such platform of this size), our CSM and the rest of the team are really quick and helpful with their support.

The only con of the platform for us would be the lack of integration with GCPW, and how we cannot connect two IdPs at the same time. However the team is aware of this need of ours and from past experience we are aware of how important it is for them to take client needs and requests into account. Review collected by and hosted on G2.com.

Gives us a process for getting ISO27001 that would have been difficult to follow otherwise. Review collected by and hosted on G2.com.

There's only really one thing, but it's important and incredibly painful. There's no ability to add your own users if they don't exist in your IDP. For example a contractor that doesn't have their email address on your domain - you cannot bring them into the system. This has wasted so much time as we need to find alternative systems for things that we're already paying for as part of Drata. Review collected by and hosted on G2.com.