External reviews
1,075 reviews
from
and
External reviews are not included in the AWS star rating for the product.
The Drata platform is great for getting audit ready and monitoring compliance
What do you like best about the product?
Drata's platform offers a wide range of features and guidelines that enabled us to get started with compliance and helps us to continuously stay on top of our data governance requirements. The policy templates and management system make it easy to create policies that are aligned with industry standards and regulations. The platform's automated tracking and reporting capabilities for connected third party tools and platforms enable us to ensure compliance with relevant laws and guidelines.
Victoria, our Customer Success Manager, provided us with exceptional support, addressing all our inquiries promptly and introducing us to relevant external companies for audit and penetration testing.
Victoria, our Customer Success Manager, provided us with exceptional support, addressing all our inquiries promptly and introducing us to relevant external companies for audit and penetration testing.
What do you dislike about the product?
There were a few technical issues while connecting some of our third party systems to Drata due to the custom configurations in our company. All technical issues could be resolved in the end and the support was very responsive throughout.
What problems is the product solving and how is that benefiting you?
Drata's all-in-one platform enables us to automatically monitor our IT systems, keep track of required documentation and provide all relevant information to auditors. This helps us save time, reduce the risk of errors or oversights and, overall, keep the compliance beast at bay.
Drata Makes the SOC 2 Compliance Process 100x Easier
What do you like best about the product?
Drata oulines the necessary steps to gain SOC 2 compliance and provides high quality support duing the process. I've thoroughly enjoyed working with my Drata Customer Support Manager, Craig Macaraeg.
What do you dislike about the product?
Not applicable - no dislikes about Drata to note.
What problems is the product solving and how is that benefiting you?
SOC 2 compliance would be cumbersome and likely unrealistic for start ups and small businesses without Drata.
Daily Compliance Means Audit Season isn't Even a Day Long
What do you like best about the product?
Before Drata, I was managing an audit manually. It took almost 3 months between auditor pre-checklists, dropbox, talking to HR, Finance, and having a multi-day grueling audit to show all evidence.
I've been a Drata customer for 3 years, after the initial setup, ongoing audit has been virtually no added work. It connects to my HR/Finance/IT systems and securely keeps track of all evidence.
With drata, it took that same 3 months to get everything into the system, but I could do it on my schedule. After I got to 100% compliance (which you can see in the dashboard daily), it became seamless thereafter.
The auditor logs in, sees the evidence, and it is just one call, instead of multiple all day sessions.
I've been a Drata customer for 3 years, after the initial setup, ongoing audit has been virtually no added work. It connects to my HR/Finance/IT systems and securely keeps track of all evidence.
With drata, it took that same 3 months to get everything into the system, but I could do it on my schedule. After I got to 100% compliance (which you can see in the dashboard daily), it became seamless thereafter.
The auditor logs in, sees the evidence, and it is just one call, instead of multiple all day sessions.
What do you dislike about the product?
I wish it handled FedRamp and other very niche audits.
What problems is the product solving and how is that benefiting you?
SOC2, ISO27001 COmpliance
Made our SOC 2 a breeze
What do you like best about the product?
SOC 2 can be a monster project of policy compliance and training. Drata's framework for managing all aspects made it easily manageable
What do you dislike about the product?
No downsides. Well worth the price. If you tried to do this using folders, spreadsheets and word docs you'd spend more in time and errors.
What problems is the product solving and how is that benefiting you?
As a Saas company with PII stored in our systems, security and data compliance is paramount to giving our customers peace of mind. Drata maks this easy.
An all-in-one solution for audit evidence collection and sharing
What do you like best about the product?
Drata has the most mature and robust offering in the compliance/evidence repository space. They have managed to navigate the line between the customer's needs and the auditor's requirements successfully, resulting in a friendly and easy to use UI that significantly reduces overhead.
The support from our CSM, Laci, has been exceptional. We're an active customer who constantly provides product feedback, and Laci ensures this is communicated to the product team and Drata leadership.
The support from our CSM, Laci, has been exceptional. We're an active customer who constantly provides product feedback, and Laci ensures this is communicated to the product team and Drata leadership.
What do you dislike about the product?
Currently, making changes to policies in Drata does not trigger an approval flow. Therefore, we edit our policies outside of Drata and then upload them. This isn't ideal and creates double-work. It also increases the risk of the wrong version being stored/updated. Please note that policies CAN be updated directly in Drata; our issue is the lack of an automated approval flow when changes are made.
What problems is the product solving and how is that benefiting you?
A single source of truth repository for evidence required by a third-party auditor.
Drata to the rescue
What do you like best about the product?
Very helpful in getting your SOC2 in place and maintaining everything in compliance. I also liked the handholding they provided us with both SOC2 and the Drata platform itself. Kudos to Jordan, who has been instrumental in quickly getting us up and running.
What do you dislike about the product?
I wish they had a feature to automatically produce your SOC2 system description document. I've been told this feature is in the works, so I'm really looking forward to that!
What problems is the product solving and how is that benefiting you?
Getting SOC2 in place quickly and automating our compliance against all of the requirements that come with SOC2.
Drata for Continuous Monitoring and Compliance Audits
What do you like best about the product?
Drata's ability to connect with multiple sources for continuous monitoring is great. They are expanding their reach to other applications on a regular basis. The templates provided for policy writing have been beneficial.
Our Customer Success Manager, Laci White, has been fantastic. She has been valuable by answering every question and providing resources while we build and prepare for our audits.
Our Customer Success Manager, Laci White, has been fantastic. She has been valuable by answering every question and providing resources while we build and prepare for our audits.
What do you dislike about the product?
Some limitations have created some growing pains. We utilize multiple instances of HRS systems, and while Drata is compatible with various systems, it can only integrate with one instance of one vendor. This leaves out numerous workforce users, making tracking them a manual process at the time being.
there are also some vendors that we use that are not yet available for connection, but I am hopeful for the future.
there are also some vendors that we use that are not yet available for connection, but I am hopeful for the future.
What problems is the product solving and how is that benefiting you?
the biggest benefit so far has been the policy templates. We have yet to utilize Drata for an actual audit. Luckily, our auditor works well with Drata, so I am very excited that evidence collection will be much easier.
Drata has helped us centralize our audit experience
What do you like best about the product?
Drata has helped my team centralize and organize our audit materials and artifact collection. Previously, we relied heavily on spreadsheets, shared Google Drive folders, and a lot of screenshots. Working with Laci, we've built out a lot of integrations that automatically pull evidence from the various systems in the scope of our audits, saving us a ton of time and manual work.
What do you dislike about the product?
There are still a few integrations that are not currently supported by Drata that would be helpful to further automate our compliance program. Specifically, background check evidence through HireRight and/or through the Workday API. Our org no longer uses a background check provider with a Drata integration, so for now we are manually linking evidence of background checks.
What problems is the product solving and how is that benefiting you?
Drata is reducing our reliance on spreadsheets and endless Google Drive folders, bringing our audit program into a single location that is but for the purpose.
Compliance Controls Simplified
What do you like best about the product?
Drata is very perscriptive on what you need to t do to be compliant. It has very easy out of the box automation and integrations with key parts of our tech stack that make compliance a breeze. The CSM team is also great (Special shoutout to Laci).
What do you dislike about the product?
Long term we hope the risk library improves along with better slack notifications.
What problems is the product solving and how is that benefiting you?
Compliance for Security - ISO27001, PCI, SOC2, and HIPAA.
Great Software for SOC2
What do you like best about the product?
Their technical teams and attention to product feature introduction and development. Our CSM is one of the best, that I've worked with in a long while. Shoutout to Laci!
What do you dislike about the product?
The product can be overwhelming, based on the organization and the security principles you are trying to tackle. The artifact and policy linking can be a little clumsy.
What problems is the product solving and how is that benefiting you?
SOC2 compliance automation for new digital properties.
showing 701 - 710