967 Drata Reviews
Overall Review Sentiment for Drata
Log in to view review sentiment.
It pools all the users from cloud, pools evidences from all events, gives rating, and easily integrates everything, makes the life comfortable every step of the way. Its easy to implement any compliance if we have this tool.
Have been using for 2 days, its very intutive and easy to work with. gives all the required documents and criterias needed in less than a min. Gives lot of automtion and customisation with complete ease. Well developed tool to handle GRC, i would recomend everyone to use this and make your process faster and easier.
They have 24/5 customer support, who works like you buddies at work. supporting all the way in your accomplishments. Review collected by and hosted on G2.com.
Nothing much yet, in less than 2 days am able to handle everything very esily, its a great tool. will comeback and write if there is anything that i feel needs to be updated. Review collected by and hosted on G2.com.

What makes Drata helpful is the overall consolidation and mapping of the security standards and technical requirements needed to achieve compliance. There are functionalities too that can automate tasks for compliance evaluation which makes it very helpful in analyzing the gaps as to what needs remediation. Review collected by and hosted on G2.com.
There are certain options that can be quite challenging to integrate and this needs to be head leveled in the documentation procedures. Review collected by and hosted on G2.com.

The feature I've enjoyed the most is having centralized and detailed visibility of all our personnel, assets and also being able to see what compliance requirements need our attention. Drata's customer service has been excellent, even being available to chat in real time late at night (EST time) and offering clear instructions.
Our representative Noah Barnett meets with us frequently to address any issues we might have, get feedback, and give us excellent support on our SOC 2 type 2 compliance process.
Using Drata as our security compliance platform was an excellent decision and has made the compliance process much more manageable. Highly recommend it! Review collected by and hosted on G2.com.
There isn't anything significant that I dislike about Drata (I'm the person in charge of using the platform). My latest request/feedback is that I would love it if they had the option for dark mode in their UI, and I am confident the feature will be made available soon! Review collected by and hosted on G2.com.

There are real people there to help me along the way. Our company is going through SOC2 Type 2 comliance for the first time and learning a lot. Drata is there to help with every step of the process. The Patform is easy to use, implemented quickly, has good customer support, and easily integrates with other tools to simplify the process. Review collected by and hosted on G2.com.
I feel like there are parts of the platform which feel disconnected and confusing. We have to use the tool everyday. We are also missing some of the integrations to tools we use daily. Review collected by and hosted on G2.com.

They really streamlined and automated alot of the tasks that require SOC 2 compliance. They also send reminders and have due dates around tasks needing to be completed, so for smaller companies with limited resources, it really helps to make sure we are continually staying compliant. We continue to login and use the system monthly and their customer support is extremely responsive and helpful when it is necesary. Review collected by and hosted on G2.com.
The main thing I have trouble with in Drata is the expansive set of different frameworks they support and me wanting to align to all of them, but with a small team I can not stay on top of it all, but for larger companies this would be a benefit. Review collected by and hosted on G2.com.
I have been thoroughly impressed with Drata. The dashboard and modules provided are clear and concise which creates a clear learning experience and offers precise insights into our progress towards achieving security compliance. The customer service provided by Drata has exceeded my expectations. As someone who started the SOC2 compliance journey with very little knowledge of security protocols, I was lucky to have an outstanding Customer Success Manager guiding me through every step. Elizabeth John's expertise were evident in her explanation of each process during our meetings, allowing me to grasp concepts gradually. She has been instrumental in assisting me at every step. I cannot emphasize enough how invaluable her support has been. I recommend Drata to anyone looking for comprehensive security compliance solutions! Review collected by and hosted on G2.com.
I cannot express any negatives about my experience with Drata. Review collected by and hosted on G2.com.

Drata provides a clear dashboard view of the frameworks we work towards, clear connections to controls, the capabilities of ownership and maintenance of out ISMS and risk management.
The supplier management section is also super helpful!
Implementation was easy and using the connections and integrations we were set up and running within two weeks.
The ability to be part of the roadmap and feedback to Drata using customer support really makes you feel part of a family.
When I log on to our system, Drata is one of the first applications I open and it stays with me all day. Review collected by and hosted on G2.com.
The downside of Drata for me personally, is that it is that efficient, the moment any part of ISMS falls out of review I see the percentage score drop and this messes with my OCD! Review collected by and hosted on G2.com.

I would say the structure of the platform is excellent, providing clear guidance for a company to manage its security issues comprehensively. Initially, we were not familiar with the security area, especially regarding how to periodically address security issues under the SOC2 and GDPR frameworks. Our customer success manager, Elizabeth John, is very nice and gentle. She has provided me with a wealth of instructions patiently and efficiently. I would recommend Drata to anyone needing to address security regulations. Review collected by and hosted on G2.com.
Drata is well-suited for those who really need to meet security regulations. Startups should carefully evaluate whether they have sufficient resources to commit, as once you begin implementing security regulations, it's not easy to stop and you should also expect a long-term commitment. Therefore, if you have a significant number of customers requiring this, it's advisable to proceed. Otherwise, carefully consider your starting point. Review collected by and hosted on G2.com.
Drata really helped us prepare for our SOC 2 audit, providing a starting framework to work from, continuous monitoring of various controls through integrations, and personal assistance from our customer success manager, Elizabeth. We've since decided to attempt to centralize our compliance processes and efforts within Drata, as the platform is naturally suited to this task. Review collected by and hosted on G2.com.
Drata is still growing and changing regularly, so expect changes to your process and the occasional idiosyncracy/bug. Review collected by and hosted on G2.com.

Drata enables "continuous compliance." This has shown itself to be very helpful in practice. When working on SOC2 at prior companies we would often find issues and gaps during the Audit or as we generated populations for the audit. Drata's constant checks for compliance allows us to show auditors a track record of continual work on our compliance journey and allows us to find and fix gaps and deviations without being already in the room in front of an auditor.
I also have had great experience with their customer support and their AI chatbot. The chatbot is able to understand our internal policies and procedures and generate adhoc answers to audit questions that pull from our actual policies. Customer support has also been able to go the extra mile to diagnose indepth issues with how their platform was interpreting our cloud setup and provide pointers on how to adjust our Azure settings to make them more secure. Review collected by and hosted on G2.com.
Drata sometimes can feel like a game of "whack-a-mole." The graphs show a track record overtime per control and as a company grows it will get harder and harder to show "constant" compliance. Invariably some user is always going to be late on their training or an engineer will create an improper resource in the cloud and cause a permanant blemish on the record over time. I'm not sure how to make it work but being able to show constant forward progress would be more advantatageous versus showing all the red marks where we failed for a day. Review collected by and hosted on G2.com.