Build SOC 2 readiness with Drata: automate evidence collection, monitor controls continuously, and get guided onboarding plus partner benefits for eligible buyers.
Move from SOC 2 kickoff to audit-ready with Drata. This package combines the Drata Agentic Trust Management platform with one SOC 2 framework, helping your team connect its AWS environment, automate evidence collection, and continuously monitor controls. Guided onboarding from Riveron, a Drata Compliance Advisory Partner, helps you get started.
Your package also gives you access to partner benefits, subject to eligibility and program terms:
AWS Marketplace credits: Eligible purchases of $10,000 or more through AWS Marketplace may receive 2% of contract value back in AWS credits through the AWS Marketplace Private Offer Promotion Program (MPOPP). Drata spend also counts toward your AWS commitment. AWS program terms apply.
Aikido AI pentest credits: New Aikido customers may be eligible for up to $4,000 in AI pentest credits. Redeem within your first three months as a Drata customer.
SOC 2 audit: A Drata partner audit firm provides a SOC 2 Type I and Type II audit for the Security criteria for a $5,000 audit fee (included in the bundle).
The package price is $14,000. Partner benefits are subject to applicable eligibility requirements and program terms.
Highlights
Start SOC 2 with guided support: You get the Drata platform, one SOC 2 framework, and guided onboarding from Riveron.
Automate ongoing compliance work: Connect your AWS environment to automate evidence collection and monitor controls continuously.
Unlock partner benefits: Eligible buyers may receive up to $4,000 in Aikido AI pentest credits and 2% AWS Marketplace credits; a partner SOC 2 Type I and Type II audit is available for a $5,000 fee.
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing offers a single pricing option billed as a one-year contract package. You pay for a fixed term rather than by usage or per-unit metering. The package covers the platform configured for one SOC 2 framework. It bundles automated evidence collection, continuous control monitoring, and guided onboarding into that one price. There are no separate tiers or add-ons to combine. Because pricing is a flat annual commitment, your cost does not change with how much you use the platform during the term.
Top-of-mind questions for buyers
What does the guided onboarding from Riveron cover in this package?
The package includes guided onboarding delivered by Riveron to help you set up the platform. This support helps you configure controls, connect your systems, and prepare for your first SOC 2 audit. Onboarding is part of the fixed one-year price with no separate charge.
What is included when the package covers "one SOC 2 framework"?
You get the platform configured for a single SOC 2 framework. This covers automated evidence collection from your connected systems and continuous testing of SOC 2 controls across security, availability, confidentiality, processing integrity, and privacy. Other frameworks are not part of this package.
What does automated evidence collection connect to in this package?
The platform connects directly to your tech stack to collect and map evidence to SOC 2 controls. This includes cloud infrastructure, identity providers, HR systems, code repositories, and ticketing tools. It keeps records current without manual work during your one-year term.
drata.com
Helpful?
Vendor refund policy
All Orders are non-cancellable and all fees and other amounts you pay under this Agreement are non-refundable.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Included in your contract, Drata provides onboarding, live chat (in product), and continuous enablement. Onboarding includes integration setup, assistance configuring compliance policy and controls in the platform, and guidance on utilizing our network of auditors and technology/service partners to serve you in your compliance journey.
support@drata.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
An AWS Security Competency Partner, Drata is a GRC automation solution that allows companies to continuously monitor security and compliance controls, automatically collect evidence needed for an audit, and manage and remediate risk. Drata streamlines common compliance frameworks like SOC 2, ISO 27001, GDPR, and more and allows you to share your real-time compliance posture with prospects and customers to build trust and accelerate growth.
An AWS Security Competency Partner, Drata is a GRC solution that enables companies to continuously monitor security and compliance controls, automatically collect evidence needed for an audit, and manage and remediate risk. Drata also allows you to share your real-time compliance posture with prospects and customers to build trust and accelerate growth.
Speed up your SOC 2 goals with affordable and flexible vCISO services. Rhymetec's vCISO program is tailored exclusively to your needs and your unique infrastructure, helping you develop an infosec program that scales with your organization. With 3 tiers of service, we can adapt to how hands-on or hands-off your team needs us to be.
Speed up your SOC 2 goals with affordable and flexible vCISO services. Rhymetec's vCISO program is tailored exclusively to your needs and your unique infrastructure, helping you develop an infosec program that scales with your organization. With 3 tiers of service, we can adapt to how hands-on or hands-off your team needs us to be.
Thoropass, CITSAP, and DuploCloud's SOC 2 compliance solution for early-stage startups leverage a holistic framework built around highly skilled professionals, streamlined processes, and use of the Thoropass automated compliance platform, and DuploCloud’s DevOps cloud provisioning to ease the burden of meeting your SOC 2 compliance requirements in the most efficient and effective manner. Our team of subject matter experts will support you throughout your compliance journey from readiness assessment to audit and reporting.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.