External reviews
External reviews are not included in the AWS star rating for the product.
Comprehensive Assistance from Drata Team
What do you like best about the product?
Drata is a user-friendly system that allows us to easily remain compliant, even with our non-technical employees.
What do you dislike about the product?
Coming from Vanta, I was concerned I wouldn't be able to navigate the system, but Drata is quite intuitive.
What problems is the product solving and how is that benefiting you?
As a HIPAA compliant company, we need to remain SOC2 compliant, and Drata allows us to do so.
- Leave a Comment |
- Mark review as helpful
Drata makes compliance possible in the chaos of running a business...
What do you like best about the product?
As someone who used to do compliance manually, I love how Drata uses our vendors and systems to automate much of the data collection and organization of evidence. The support is always available for questions, and the dashboard and onboarding steps simplify implementation. They walk you through the steps with questions, and once you select your auditor, they know Drata as well and can help tie up any loose ends before starting an audit.
What do you dislike about the product?
There is no downside. They have integrations with all of our cloud, development and IDP systems.
What problems is the product solving and how is that benefiting you?
Drata collects the majotity of evidence needed for our SOC 2 and HIPAA and for the manual evidence, has reminders and places to store the manual evidence when it is collected.
had a quick question and was helped immediately with great service
What do you like best about the product?
Easy to use - great support - very helpful and knowledgeable
What do you dislike about the product?
I sometimes get too into the details and miss how easy it is to actually use and track my needs
What problems is the product solving and how is that benefiting you?
I need to maintain a SOC2 certification and Drata makes it easy
Clarity and support that has helped us grow
What do you like best about the product?
Take what you will from that fact that I've enjoyed learning about and implementing these data privacy and security frameworks, but I attribute a lot of that enjoyment to the value we've gotten from working with Drata. They've been an essential partner in our startup’s growth, streamlining our GRC and compliance efforts with clarity, transparency, and exceptional support. Their platform makes it easy to navigate complex requirements, the Compliance Accelerator program has been a major asset in helping us quickly align with industry standards, and the integration with SafeBase’s Trust Center has elevated how we can communicate our security posture—clean, modern, and confidence-inspiring for both prospective partners and customers. Their documentation is extensive and accessible, the onboarding and implementation process was quick and clear, and their support team has always been responsive and genuinely helpful.
What do you dislike about the product?
I don't think there's anything I actively dislike. The help guides could probably be structured more clearly with subheadings/highlights, some of the large tables could be better formatted for either dynamic resizing or pop-out windows, and the help docs overall could use a bit more branded visual flair or character, but that's pretty minor all things considered.
What problems is the product solving and how is that benefiting you?
Demonstrating our security posture, helping us meet modern GRC requirements quickly, and supporting our ability to grow our business and customer base.
Excellent platform for SOC 2 implementation for Startup
What do you like best about the product?
Excellent support for SOC implementation provides functionalities for integration with a fast way to understand and use interfaces.
What do you dislike about the product?
The Drata audit hub feedback: the user needs to enter each requisite answer and go back to the principal page to select another topic, answer, go back again, etc. You do not have a next button to continue answering. You do not have an export report for all issues you need to work on.
What problems is the product solving and how is that benefiting you?
SOC 2 Implementation and Control for a Startup Company.
Simple and effective for people new to compliance
What do you like best about the product?
Drata presents all the tasks and requirements you need to do for your chosen compliance framework in a very clear way, with detailed descriptions to help you understand what the auditor will need from you. The support and advice from the team has also been high quality and responsive. The integrations also automate a huge amount of the evidence collection and monitoring.
What do you dislike about the product?
As a first time user of a fully fledged GRC platform, there is very little to dislike. The suggest controls and evidence do focus on what will suffice for the majority but there could be more built-in options for alternatives - however the support teams and chatbot are quick to suggest these when asked.
What problems is the product solving and how is that benefiting you?
Drata has helped centralise the compliance tasks and reporting as well as helped with employee onboarding. The interface it provides for the auditors makes the audit's much easier.
Drata - Monitoring Platform
What do you like best about the product?
Proper Support on time
Easy Implementation
Easy Implementation
What do you dislike about the product?
Suggestion : can add more test cases
can improve documentation
can improve documentation
What problems is the product solving and how is that benefiting you?
Drata is integrated with our Cloud Platform. Help us to maintain Compliance
Compliance Made Easy with Drata
What do you like best about the product?
Drata's platform is incredibly user-friendly, and their customer support is top-notch. Out of our entire tech stack, only one system required manual input—everything else integrated seamlessly. Whenever we’ve had questions or needed assistance, the support team has been impressively fast and helpful. The platform gives us clear visibility into our compliance posture.
What do you dislike about the product?
This isn’t specific to Drata, but more of a general limitation across most compliance management systems. It would be great to see more AI-driven features that could automatically map and configure controls based on our environment, reducing the need for manual setup and rule-by-rule customization. The platform is strong, but as compliance becomes more complex, smarter automation would take it to the next level.
What problems is the product solving and how is that benefiting you?
Before Drata, we were managing our compliance efforts manually in spreadsheets, which was time-consuming and error-prone. Drata centralizes everything, automates evidence collection, and keeps us continuously audit-ready. As a result, we spend far less time on documentation and back-and-forth during audits, allowing us to focus more on actual security improvements and strategy.
Natural, lightweight, intuitive
What do you like best about the product?
Drata is an opinionated, lightweight, easy to understand repository for all our compliance information. It does everything we need (and more) which gives us a growth path with the tool, all-the-while aligning us with requirements and making them clear.
The automated tests are a bonus, on top of the very clear control management system.
Its integration with Slack is fast and efficient, and allows our tech team to keep an eye on control compliance and test status.
The automated tests are a bonus, on top of the very clear control management system.
Its integration with Slack is fast and efficient, and allows our tech team to keep an eye on control compliance and test status.
What do you dislike about the product?
I would wish for more native integrations with third-party vendors, since this really where such a tool shines, and more support for self-hosted versions, since we are big proponents of self-hosting.
What problems is the product solving and how is that benefiting you?
Our previous audits, carried out manually by an external consultancy, lacked a centralised, well-formed and opinionated data collection/repository, which required us (and the external consultant) to hunt for data and required a lot of back-and-forth to come to an agreement as to what is acceptable to be in-scope and not-in-scope without triggering exceptions. There was a lot less upfront clarity, and evidence could not be submitted much in advance, let alone as we go.
My Drata User Experience
What do you like best about the product?
The user interface is very easy to use. The functionality of Drata addressed many of our business needs and processes.
What do you dislike about the product?
So far, I have not encountered any downsides. I just started using the platform.
What problems is the product solving and how is that benefiting you?
The Drata tool is assisting my organization with Cybersecurity Risk Management and audit activities.
showing 1 - 10