External reviews
External reviews are not included in the AWS star rating for the product.
A useful platform, saves time and makes the process easy
What do you like best about the product?
The close support and accompaniment of our CSM Nick Chapman make our compliance make it happen.
The controls automation saves a lot of time.
The controls automation saves a lot of time.
What do you dislike about the product?
Increasing automation for additional controls.
What problems is the product solving and how is that benefiting you?
SOC2 Compliance
- Leave a Comment |
- Mark review as helpful
Compliance made easy
What do you like best about the product?
The intuitiveness of the platform, UX/UI and automated checks are awesome. I also love having a knowledgeable point of contact who can actually answer product questions.
What do you dislike about the product?
There isn't anything to dislike, Drata made our lives so much easier.
What problems is the product solving and how is that benefiting you?
We are a small team becoming HIPAA and SOC2 compliant. It's a lot of work for just a few engineers and product people to put together but Drata organized it all for us.
Drata makes SOC & ISO Compliancy Easy!
What do you like best about the product?
Drata's easy-to-use platform has made navigating our SOC II Type I/II and ISO requirements a breeze! We are able to effortlessly integrate AWS and other major systems into the Drata platform, download their app, and ensure compliance across our entire company. Their team is easy to work with, and always prompt in answering our questions or resolving any concerns!
What do you dislike about the product?
The current UI is a little bit hard to navigate at times/a bit busy with all the frameworks and subsections related to SOC and ISO, but the Drata team is currently simplifying the UI experience so many of these concerns should be resolved!
What problems is the product solving and how is that benefiting you?
Drata has truly allowed us to put our SOC 2 and ISO compliance on auto-pilot. A single person using Drata can view compliance across all systems and employees, and ensure that as new employees onboard, or new services are spun-up, they are set up in a way that ensures that you are secure and following best practices.
Drata is awesome!
What do you like best about the product?
Drata has been our all-in-one solution for compliance. It's so easy to keep track of controls and monitor compliance in the platform. I've done SOC2 audits before and none have been easier to manage than with Drata.
What do you dislike about the product?
Nothing! Drata has been such a pleasure to use. Their team has been super helpful in implementing the platform and achieving SOC2 Type II compliance. Our experience has been great.
What problems is the product solving and how is that benefiting you?
SOC2 compliance, GDPR, ISO. We're learning how to maintain compliance in our environment and the benefit is no exceptions on our reports. We've been really pleased.
Streamline Compliance
What do you like best about the product?
Drata has helped our team streamline our governance documentation. The platform is intuitive and has really helped us hone our compliance processes.
What do you dislike about the product?
The platform has been extremely easy for our team members to navigate. I honestly don't have anything negative to say about the product thus far.
What problems is the product solving and how is that benefiting you?
Drata has helped us document our security processes which has allowed us to shorten our overall sales cycle.
Drata - a remarkable organization
What do you like best about the product?
Personnel, expertise, interface. I really enjoyed working with Andrew - he offered tons of support and resources to keep us moving in the right direction. Also, Tyler, who connected me with additional audit contacts to help clarify our particular situation. Having formerly been in the financial industry with an entire audit team supporting our policy/control/review processes, I am impressed by how thoughtfully and well Drata has constructed itself to be a one-stop-shop to help all company types and sizes achieve the same robust, practical and thorough security and data integrity setup at a fraction of the noise and cost. Their integrations, templates and Drata agent provided a nearly turnkey start for our efforts, which was truly appreciated. There is enough intensive work that needs to be done to assure certification; having the right foundation quickly and easily puts your company ahead of the game from the start.
What do you dislike about the product?
Not a dislike at all, just a wish list item that Drata could perhaps feature a 'library' of consultant contacts that a client could opt to work with; this might support a faster progression toward examination and advice for atypical company structures.
What problems is the product solving and how is that benefiting you?
Even as a very small company, Drata helped us in working toward our goals of having appropriate procedures, controls and monitoring so we could act as a viable and trustworthy player in our space.
Recommendations to others considering the product:
Use Drata's templates to educate yourselves about all aspects of policies and controls your company may need. The things not on your radar are the ones that may cause the most surprises, so use their great tools and references as much as possible!
Lifesaver (did this same process before, the hard way)
What do you like best about the product?
Drata setup enabled the vast majority of work to prepare for our first SOC2 TYPE2 to be automated, and the remaining manual effort was easily understood. I was able to get the grunt work done without undue stress or inefficiency.
What do you dislike about the product?
One of the mandatory policies for us was written for a different type of entity, and we had to rewrite it for our use. It was a policy that is required by any healthcare I/T vendor, and I'm sure it will be made into a great template very soon (maybe already has).
What problems is the product solving and how is that benefiting you?
Our preparation for our SOC2 TYPE2 was a sizeable burden for a company of our size, until we found and implemented Drata. The ease of preparation was, and the ease of our audit process will be, a priceless benefit.
Recommendations to others considering the product:
Don't wait, don't procrastinate, just do it. And if your selected audit firm is not familiar with Drata, ask to introduce them and let the Drata staff take it from there.
Drata is a multiplier for your compliance programs
What do you like best about the product?
I like that Drata is simple enough to use that we have on person executing most of our SOC2 control framework.
What do you dislike about the product?
There are some limitations in terms of handling past contractors or outside contributors who you may not be able to pair with users coming in through the HR integration.
What problems is the product solving and how is that benefiting you?
Drata is allowing us to get our SOC2 certification!
Such a helpful platform & great customer support!
What do you like best about the product?
The entire user experience of Drata is incredible. It's so easy to navigate. I began using it with no background or prior knowledge of SOC-2 / GDPR compliance, and using Drata has made it so much easier for me to learn and keep my company & employees compliant. It's so great to have all of our controls and evidence in one place for our auditor. On top of that, the customer support we receive is magnificent - the team is always helpful whenever I have questions.
What do you dislike about the product?
There's really not anything that comes to mind when I think of things that we have disliked. Any time that we have run into an issue or hit a bump in the road, we reach out to our contacts at Drata and they are very responsive and are able to find a solution quickly. We also have regular check in calls with our customer success rep & she gives us updates for things coming down the pipeline.
What problems is the product solving and how is that benefiting you?
Security & compliance for our full-time employees and contractors, as well as keeping our company compliant to SOC-2 and GDPR requirements. Drata has helped us through initial and continuous audit cycles.
Makes an otherwise tedious and messy process very straightforward and efficient
What do you like best about the product?
As an end-user trying to help my company get SOC2 certified as quickly as possible, Drata was basically fool-proof.
What do you dislike about the product?
Nobody really likes compliance-related work. But they made it as stress-free as possible.
What problems is the product solving and how is that benefiting you?
We achieved our SOC2 certification in less than 3 months.
showing 451 - 460