Drata is a security and compliance automation platform that continuously monitors and collects evidence of a company’s security controls, while streamlining workflows to ensure audit-readiness.
Offers robust, scalable compliance with advanced risk, vendor, and access controls, Compliance as Code Pro, and flexible add-ons for mature GRC programs.
Typical price after negotiations
Drata GRC Platform: FoundationNew purchase, 1 year term
Plan includes all Advanced features and introduces advanced analytics dashboards, unlimited Trust Center access, and extensive API customization. It supports unlimited webhook access, advanced integrations with Salesforce, HubSpot, and Microsoft Dynamics, as well as SCIM provisioning. Users can define unlimited custom permission profiles and synchronize data with data warehouses and Microsoft Purview.
Advanced
Introduces enhanced governance and workflow automation. It encompasses all Foundation features and adds integrations with Salesforce, HubSpot, DocuSign, and IronClad. Additional capabilities include configurable access expiration dates, internal product portals for AI Questionnaire Assistance, branded email notifications, and document synchronization with both Drata and Google Drive. The plan also offers access to one Trust Center and an open API for deeper customization.
Foundation
Provides a branded Trust Center to showcase security documentation, policies, and reports. It includes features like a Knowledge Base, Clickwrap NDA support, automated access approvals, and integrations with Slack and Teams. Users also benefit from a custom Trust Center URL, SAML/SSO (JIT), and a Top Metrics Dashboard. Document synchronization is available exclusively with Drata.