External reviews
External reviews are not included in the AWS star rating for the product.
Josie Beaudoin, Solution Architect - Integration Support
What do you like best about the product?
Drata makes a very complex process as simple as possible to understand and manage.
What do you dislike about the product?
It's more the nature of the compliance efforts themselves, rather than the product. There are many challenges that the product makes much easier than they could be.
What problems is the product solving and how is that benefiting you?
SOC2 Compliance Endeavors
- Leave a Comment |
- Mark review as helpful
Drata disappointed us, did not deliver, and refused to refund us.
What do you like best about the product?
Drata said it's a compliance automation platform that will automate-away the entire compliance processes. That's far from reality. You need a full time proffesional to operate Drata.
What do you dislike about the product?
Bad service. Dishonest business. It's not really making anything easy for you. You to (A) know what you're doing, and (B) do all the work. While (C) they keep trying to push their service-providers your way to get you to pay more.
What problems is the product solving and how is that benefiting you?
Drata were suppose to automate compliance - they do not do that at all.
1 person found this helpful
Nice user interface, extensive GRC automation features, responsive support team
What do you like best about the product?
Easy to use and was implemented smoothly across my organisation. Customer support is very responsive. I use it daily in my work as a GRC analyst due to its control monitoring features. It integrates well with my organisation's instance of Intune, Entra ID, and Azure, making control testing and monitoring a breeze.
What do you dislike about the product?
Still lacking some basic features which I have submitted feature requests for.
What problems is the product solving and how is that benefiting you?
Drata is helping my organisation attain ISO27001 certification faster by automating our evidence collection and streamlining our continuous control monitoring.
GRC platform for companies that take risk management seriously
What do you like best about the product?
It is a very complete package. My team and I do audits and risk management integration daily. It is straight forward to work with. Everything is there, and it is so convenient for us to work with. Risk Management within an organization is a discipline, a commitment within the organization that risk management is more important than internet access. GRC becomes the public face of the collective strategic risk initiatives. It is a place to share risk efforts with auditors, regulators, clients and leads.
The platform is complex, but it makes sense in it's role within risk management.
The platform is complex, but it makes sense in it's role within risk management.
What do you dislike about the product?
The interaction with auditors focuses around the DCF (Drata Control Framework) rather than a specific framework control (like SOC2, ISO, etc). I know that Drata is using that to increase coverage of more frameworks. However, forcing auditors to use DCF rather than an ISO control is a bit of a nuisance.
Despite that, auditors have figured it out. This is a small inconvenience and not a major stopper.
Despite that, auditors have figured it out. This is a small inconvenience and not a major stopper.
What problems is the product solving and how is that benefiting you?
GRC is an agnostic platform that becomes the single source of truth for risk management. If this is accepted, customers, leads, regulators, auditors and more, never have to go further than trusting the information displayed by Drata.
It becomes a place to shape the forward looking risk mission of an organization and then share that with others.
It has to be a trusted platform onto which controls, standards, policies, evidence and SOPs are published. It needs to be the definitive source of this information and this has to be trusted by all without question. Drata is critically used for clients acheiving and maintaining regulatory compliance and security certifications year over year. It has to be a credible and agnostic platform, trusted by external reviewers and auditors.
It excels at those requirements.
It becomes a place to shape the forward looking risk mission of an organization and then share that with others.
It has to be a trusted platform onto which controls, standards, policies, evidence and SOPs are published. It needs to be the definitive source of this information and this has to be trusted by all without question. Drata is critically used for clients acheiving and maintaining regulatory compliance and security certifications year over year. It has to be a credible and agnostic platform, trusted by external reviewers and auditors.
It excels at those requirements.
Moved from SecureFrame and loving this
What do you like best about the product?
So many great features and the ease of use
What do you dislike about the product?
I don't know of any real downsides from where I sit
What problems is the product solving and how is that benefiting you?
Drata is helping us with our SOC-II compliance. I love how it simplifies this complex process.
Streamlined the SOC2 requirements from Scratch
What do you like best about the product?
They really streamlined and automated alot of the tasks that require SOC 2 compliance. They also send reminders and have due dates around tasks needing to be completed, so for smaller companies with limited resources, it really helps to make sure we are continually staying compliant. We continue to login and use the system monthly and their customer support is extremely responsive and helpful when it is necesary.
What do you dislike about the product?
The main thing I have trouble with in Drata is the expansive set of different frameworks they support and me wanting to align to all of them, but with a small team I can not stay on top of it all, but for larger companies this would be a benefit.
What problems is the product solving and how is that benefiting you?
Unknown requirements when first starting out and understanding what the compliance standards are along with gathering of evidence to satisfy the auditors.
Game Changing
What do you like best about the product?
Drata has truly been a game-changer for our organization’s compliance and security processes.
Drata’s user-friendly interface is intuitive, and the platform’s ability to continuously monitor and track our compliance status in real-time is incredibly valuable.
What really stands out is the level of support Drata provides. They've even made changes to their product based on some of our feedback.
Overall, Drata has been an essential tool for our team. It has not only helped us stay compliant but also enhanced our overall security posture.
Drata’s user-friendly interface is intuitive, and the platform’s ability to continuously monitor and track our compliance status in real-time is incredibly valuable.
What really stands out is the level of support Drata provides. They've even made changes to their product based on some of our feedback.
Overall, Drata has been an essential tool for our team. It has not only helped us stay compliant but also enhanced our overall security posture.
What do you dislike about the product?
We encountered some complications integrating with Google Workspace due to our company’s organizational structure. We could only link one account, which required a complex consolidation of multiple Workspace accounts, that did add some additional costs when onboarding.
What problems is the product solving and how is that benefiting you?
Drata is helping us achieve our goal of SOC 2, ISO 27001, and HIPAA compliance
Drata usage
What do you like best about the product?
The Drata Control Framework enables the team to quickly build up our compliance program to meet multiple compliance frameworks. Drata has a significant number of integrations that are easy to set up and help us monitor our controls.
What do you dislike about the product?
We would like a simpler licensing model for companies that need to comply with many compliance frameworks (5+) with multiple scopes.
What problems is the product solving and how is that benefiting you?
Managing our compliance requirements, coordinating with external and internal stakeholders. Facilititing evidence collection for audits.
Excellent security risk and compliance management platform
What do you like best about the product?
This platform saves a GRC leader tons of time but mapping all the important frameworks, controls, tests (even automates many of them). I would never go back to driving a GRC program without this tool.
What do you dislike about the product?
Some of the user interfaces can be a little confusing at times. Good news is Drata has terrific 24/7 support with real, expert people who are always ready and able to help.
What problems is the product solving and how is that benefiting you?
Drata hels me manage our company's security risk and compliance program.
Drata platform has really streamlined our compliance processes
What do you like best about the product?
I’ve been super impressed with Drata! As an early stage start-up oursleves, resources are limited and the Drata platform has really streamlined our compliance processes, especially with SOC 2. The automation features are a game-changer, making tasks like evidence collection and policy management so much easier and less time-consuming. Drata integrates seamlessly with our existing tools, which has saved us a ton of manual work. Plus, their customer support is fantastic—responsive, knowledgeable, and always ready to help. Our customer service manager, Jessica, has been a huge help and is always willing to goes the extra mile. Overall, Drata has made our compliance journey smoother and way more efficient.
What do you dislike about the product?
One area for improvement with Drata is the policy editor. During our annual policy review, we found the process a bit clunky because the executive who approves the policies isn’t the same person who loads them for review. It would be great to have a feature that allows us to make policy updates without affecting the SLA until the designated approver signs off. This would streamline the workflow and avoid any unintended impacts while policies are under review. Overall, it’s a small issue, but addressing it could really enhance the platform’s functionality for our team.
What problems is the product solving and how is that benefiting you?
Drata addresses several problems for us:
1. Reduces the amount of manual compliance processes we need to do with evidence collection and being able to set reminders of when evidence needs to be updated to automated control monitoring, which has been saved us time on needing to manually monitor/check controls.
2. The pre-mapped controlsl for the various frameworks that we use has also provided a huge benefit in allowing us to setup our compliance program and also helps us with our annual SOC2 audit.
3. Their knowledge base and compliance experts have been instrmential in addressing our very specific questions / needs.
4. Their customer success / support team is phenomenal. Our customer success account manager, Jessica, is very repsonisve and solution oriented. It is a huge help for a company of our size and scale.
1. Reduces the amount of manual compliance processes we need to do with evidence collection and being able to set reminders of when evidence needs to be updated to automated control monitoring, which has been saved us time on needing to manually monitor/check controls.
2. The pre-mapped controlsl for the various frameworks that we use has also provided a huge benefit in allowing us to setup our compliance program and also helps us with our annual SOC2 audit.
3. Their knowledge base and compliance experts have been instrmential in addressing our very specific questions / needs.
4. Their customer success / support team is phenomenal. Our customer success account manager, Jessica, is very repsonisve and solution oriented. It is a huge help for a company of our size and scale.
showing 91 - 100