External reviews
External reviews are not included in the AWS star rating for the product.
Still the best place for compliance and audit checking
What do you like best about the product?
The software is simple enough that anyone can understand what is happening but complex enough so that when passing information about technical tasks no one is looking at you with a blank face.
Implementation of the tasks are described well and any time I have any queries I the in app chat is always handy and if it is something more complex my account manager will contact me shortly afterwards.
Implementation of the tasks are described well and any time I have any queries I the in app chat is always handy and if it is something more complex my account manager will contact me shortly afterwards.
What do you dislike about the product?
When you having a failing tasks there is no notification either through email or some other method to advise this. Had a case where something change and the monitored task was failing but didn't pick it up until i checked Drata at the end of the week.
What problems is the product solving and how is that benefiting you?
Drata solved our problems with setting up, monitoring and tracking SOC2 compliance. We have gone further than this and using it to keep on top of our GDPR and soon ISO27001.
- Leave a Comment |
- Mark review as helpful
Great layout and quite intuitive. Helps you organize all you compliance work.
What do you like best about the product?
The best feature of Drata is that it helps you organize all the controls you need in place - in order to be certified accoring to the certification of your choice. If your employees haven't read the required policies or performed the training they were supposed to do, Drata will remind them or you can easily go into the dashboard to see who you need to chase.
Another thing that stands out is its beautiful design. It really is one of the better softwares from en esthetic point of view. The intiutive GUI makes Drata easy to use and the many ready-made templates make the the implementaion easy.
Compliance can be complicated but the chat function with customer support is really quick and the people there are knowledgeable and respond quickly to any technical or compliance related questions.
Frequency of Use: When you implement Drata, you need to use it a lot. But once up and running, I use Drata more as a tool to follow up any gaps towards being certified.
I also really like that Drata has made it easy to share our compliance work with potential customers in a "trust center". Here you can tailor what you show to your customers and share all the information you want by sending them a URL. We try to do this before onbaording a new customer to eliminate a tedious compliance process from the customer's side.
Another thing that stands out is its beautiful design. It really is one of the better softwares from en esthetic point of view. The intiutive GUI makes Drata easy to use and the many ready-made templates make the the implementaion easy.
Compliance can be complicated but the chat function with customer support is really quick and the people there are knowledgeable and respond quickly to any technical or compliance related questions.
Frequency of Use: When you implement Drata, you need to use it a lot. But once up and running, I use Drata more as a tool to follow up any gaps towards being certified.
I also really like that Drata has made it easy to share our compliance work with potential customers in a "trust center". Here you can tailor what you show to your customers and share all the information you want by sending them a URL. We try to do this before onbaording a new customer to eliminate a tedious compliance process from the customer's side.
What do you dislike about the product?
Some of the evidence is static and you can fool Drata by uploading something that is not real evidence. However, there are more and more integrations towards other systems, which makes evidence live and up to date.
What problems is the product solving and how is that benefiting you?
Drata his helping us aligning all the internal policies and controls but also helping us to communicate it and building trust towards the entire supply chain and ultimately our customers.
Best SOC 2 readiness platform we investigated
What do you like best about the product?
- Best in class UI for compliance readiness
- Live customer support in-app
- Straightforward to use
- Agentless monitoring (I don't want 3rd party agents monitoring cloud infrastructure as that's very deep access)
- Live customer support in-app
- Straightforward to use
- Agentless monitoring (I don't want 3rd party agents monitoring cloud infrastructure as that's very deep access)
What do you dislike about the product?
- Overly prescriptive SOC 2 controls and evidence; there are workarounds for custom controls and evidence, but they require much more manual work
What problems is the product solving and how is that benefiting you?
- Manages policies, controls, and evidence for SOC 2 compliance
- Automated monitoring (quality varies) for continuous control compliance - e.g. checking that all users' endpoint devices match our security policies and recording for the auditor
- Formalized method for sharing compliance documents with customers and organizing readiness with auditors
- Automated monitoring (quality varies) for continuous control compliance - e.g. checking that all users' endpoint devices match our security policies and recording for the auditor
- Formalized method for sharing compliance documents with customers and organizing readiness with auditors
Drata: Making Compliance Easy and Effective
What do you like best about the product?
Drata is a big win for anyone dealing with compliance. It's super easy to set up, which is a huge relief. What's really cool is the number of integrations it offers, letting you automate pretty much all your compliance tasks and keep an eye on them all year round.
If something goes wrong, Drata doesn't just leave you hanging. They have really helpful guides that show you how to fix issues, which is great for peace of mind. The team behind Drata really listens to what users need and keeps adding new stuff to make it even better. We've been using it for three years now, and it just keeps getting better. We're big fans of everything Drata does!
If something goes wrong, Drata doesn't just leave you hanging. They have really helpful guides that show you how to fix issues, which is great for peace of mind. The team behind Drata really listens to what users need and keeps adding new stuff to make it even better. We've been using it for three years now, and it just keeps getting better. We're big fans of everything Drata does!
What do you dislike about the product?
We haven't found anything to dislike about Drata. It's been an excellent tool for us, especially since we're using multiple frameworks like SOC2, HIPAA, and GDPR. Drata handles them all brilliantly.
What problems is the product solving and how is that benefiting you?
Drata's integration capabilities are a game-changer for us. They make our life so much simpler. We don't need to stress about constant monitoring because Drata does it for us. This saves us a lot of time and effort every year, ensuring that our compliance is always in check without the extra hassle.
Automation Our Compliance Process for the Win
What do you like best about the product?
Drata is well integrated with the majority of cloud systems we use to manage our business and platform.
What do you dislike about the product?
Some aspects of the UI navigation seem to be more hidden than they need to be. There are a number of workflows that require many clicks to get to the right screen.
What problems is the product solving and how is that benefiting you?
We are HIPAA compliant and SOC 2 Type II audited. We are using Drata is the data collection and exchange platform for everything.
Drata - Easy to use and very helpful
What do you like best about the product?
All of the continous monitoring of controls and details of what is necessary. Along with the Live chat feature for questions.
What do you dislike about the product?
Sometimes uploading new policies from Confluence can cause weird formatting.
What problems is the product solving and how is that benefiting you?
Drata is working to help us acheive SOC 2 compliance and Drata listing out all the necessary evidence is extremely helpful.
Taking much of the effort and guesswork out of compliance.
What do you like best about the product?
Drata is much easier to use than other compliance platforms that we have used and was easy to get up and running. When we do have questions or issues, their support team can be contacted directly via chat within the platform and are friendly, responsive, and knowledgeable. We feel like Drata will be an excellent partner for years to come and we appreciate the straightforward pricing per framework. That will make it easy to grow in the future as we add additional frameworks.
What do you dislike about the product?
We wish that there were additional automations or improvements on some of the existing integrations. For example, many of the monitors/tests are geared towards Jira being used for tracking things such as onboarding/offboarding. We use Freshservice for that and even though there is a Freshservice integration, we cannot currently tell Drata to look at Freshservice for those types of tickets. This is frustrating as it means we then have to submit that evidence manually.
Additionally, we wish that there was more clarity or guidance around when a test is failing. For example, a test may fail for a variety of reasons such as reliance on a policy being approved or evidence being provided. It's not always clear why a monitor or control is failing. Is it due to the policy? Is it a lack of evidence? Should that evidence have been pulled automatically or is it something we need to provide manually? This could be streamlined and provide more detailed guidance as to what exactly is needed to fix it.
Additionally, we wish that there was more clarity or guidance around when a test is failing. For example, a test may fail for a variety of reasons such as reliance on a policy being approved or evidence being provided. It's not always clear why a monitor or control is failing. Is it due to the policy? Is it a lack of evidence? Should that evidence have been pulled automatically or is it something we need to provide manually? This could be streamlined and provide more detailed guidance as to what exactly is needed to fix it.
What problems is the product solving and how is that benefiting you?
We needed a product to help us manage our SOC2 compliance while providing the ability to easily add additional frameworks in the future. When doing so, we wanted to try and maximize the work already completed towards those additional frameworks.
A Worthwhile Option
What do you like best about the product?
Drata made management of our SOC 2 process easy. We had no idea how deficient we were until we spun of Drata and saw all of the things we still needed to do. Also, the Customer Support system and team are hands down the best I have worked with in my 30 years in hospitality and tech.
What do you dislike about the product?
Not much to dislike. For SOC 2 it's very clear what needs to be done. I can't speak for other frameworks.
What problems is the product solving and how is that benefiting you?
As a SaaS company, having our SOC 2 is vital and Drata has allowed us to do that after years of trying without a tool.
Great Automation capabilities & amazing support
What do you like best about the product?
Very responsive Support
Good automation workflows
Good automation workflows
What do you dislike about the product?
Nothing as such. So far so good. will point out any issues when I come across
What problems is the product solving and how is that benefiting you?
Cloud compliance automation
Wonderful People
What do you like best about the product?
I love working with my customer success manager, Craig Macaraeg, and all the wonderful support team like Tony, Aiden, and Rick. These guys made working within Drata so much easier. Craig literally met with me every two weeks and was genuinely concerned about my work. Tony and the gang were always happy to help me when I had questions. Even dumb ones. I was in Drata nearly every day working on something. So I spoke to the teams quite a bit. The platform itself was very easy to use. Things got set up and you didn't really have to worry about them.
What do you dislike about the product?
Sometimes I got lost in all the features. It was hard to keep up with all the new features coming out. This isn't necessarily a bad thing from a normal users perspective. I am just very new to compliance work so it was easy to get lost. But the support and customer success people were always there to help. Another minor gripe I have was with the policy editor. It was hard to edit directly in the browser so I often took the text and pasted it into Word. But since I did that, pasting it back into the editor would wreck the formatting. I wanted to use the editor for after I got the policy mostly set. It makes it easier to perform small changes. Rather than having to constantly upload new files. Which got confusing.
What problems is the product solving and how is that benefiting you?
My company had no clue how nor any groundwork done to get started in the complex world of compliance. Drata took us from completely ignorant to participating in our first SOC 2 Type 1 audit in about a year. (The length of time is mostly my company's doing. Change is slow when you go from nothing to something.)
showing 121 - 130