External reviews
External reviews are not included in the AWS star rating for the product.
SOC 2 and HIPAA in 10 Days
What do you like best about the product?
We started on SOC 2 and HIPAA compliance journey when a large customer requested a SOC 2 Report. We had a month to get it done so we turned to Drata to see how fast and effectively we can attain SOC 2 Type 1 and HIPAA compliance.
Within 10 days we were able to achieve 98% compliance posture thanks to their automated system, template policies, and most importantly their excellent audit compliance and customer success teams who were there at every turn to answer questions, help us draft policies and guide us through the maze of regulations, controls, and developer support.
You heard it right! In 10 days we were ready for our auditor to start reviewing the documentation and prepping our drat SOC 2 Type 1 Report
Within 10 days we were able to achieve 98% compliance posture thanks to their automated system, template policies, and most importantly their excellent audit compliance and customer success teams who were there at every turn to answer questions, help us draft policies and guide us through the maze of regulations, controls, and developer support.
You heard it right! In 10 days we were ready for our auditor to start reviewing the documentation and prepping our drat SOC 2 Type 1 Report
What do you dislike about the product?
Need custom controls.
At the time of SOC 2 Type 1 journey, they did not have a way to create custom controls and apply automation. That would be a very helpful feature.
At the time of SOC 2 Type 1 journey, they did not have a way to create custom controls and apply automation. That would be a very helpful feature.
What problems is the product solving and how is that benefiting you?
We use Drata to comply with SOC 2 Type I & II, as well as HIPAA requirements.
Additionally, we use Drata to provide high-level monitoring for continuous compliance.
Additionally, we use Drata to provide high-level monitoring for continuous compliance.
- Leave a Comment |
- Mark review as helpful
Compliance made easy
What do you like best about the product?
The intuitiveness of the platform, UX/UI and automated checks are awesome. I also love having a knowledgeable point of contact who can actually answer product questions.
What do you dislike about the product?
There isn't anything to dislike, Drata made our lives so much easier.
What problems is the product solving and how is that benefiting you?
We are a small team becoming HIPAA and SOC2 compliant. It's a lot of work for just a few engineers and product people to put together but Drata organized it all for us.
Drata makes SOC & ISO Compliancy Easy!
What do you like best about the product?
Drata's easy-to-use platform has made navigating our SOC II Type I/II and ISO requirements a breeze! We are able to effortlessly integrate AWS and other major systems into the Drata platform, download their app, and ensure compliance across our entire company. Their team is easy to work with, and always prompt in answering our questions or resolving any concerns!
What do you dislike about the product?
The current UI is a little bit hard to navigate at times/a bit busy with all the frameworks and subsections related to SOC and ISO, but the Drata team is currently simplifying the UI experience so many of these concerns should be resolved!
What problems is the product solving and how is that benefiting you?
Drata has truly allowed us to put our SOC 2 and ISO compliance on auto-pilot. A single person using Drata can view compliance across all systems and employees, and ensure that as new employees onboard, or new services are spun-up, they are set up in a way that ensures that you are secure and following best practices.
Drata is awesome!
What do you like best about the product?
Drata has been our all-in-one solution for compliance. It's so easy to keep track of controls and monitor compliance in the platform. I've done SOC2 audits before and none have been easier to manage than with Drata.
What do you dislike about the product?
Nothing! Drata has been such a pleasure to use. Their team has been super helpful in implementing the platform and achieving SOC2 Type II compliance. Our experience has been great.
What problems is the product solving and how is that benefiting you?
SOC2 compliance, GDPR, ISO. We're learning how to maintain compliance in our environment and the benefit is no exceptions on our reports. We've been really pleased.
Streamline Compliance
What do you like best about the product?
Drata has helped our team streamline our governance documentation. The platform is intuitive and has really helped us hone our compliance processes.
What do you dislike about the product?
The platform has been extremely easy for our team members to navigate. I honestly don't have anything negative to say about the product thus far.
What problems is the product solving and how is that benefiting you?
Drata has helped us document our security processes which has allowed us to shorten our overall sales cycle.
Drata - a remarkable organization
What do you like best about the product?
Personnel, expertise, interface. I really enjoyed working with Andrew - he offered tons of support and resources to keep us moving in the right direction. Also, Tyler, who connected me with additional audit contacts to help clarify our particular situation. Having formerly been in the financial industry with an entire audit team supporting our policy/control/review processes, I am impressed by how thoughtfully and well Drata has constructed itself to be a one-stop-shop to help all company types and sizes achieve the same robust, practical and thorough security and data integrity setup at a fraction of the noise and cost. Their integrations, templates and Drata agent provided a nearly turnkey start for our efforts, which was truly appreciated. There is enough intensive work that needs to be done to assure certification; having the right foundation quickly and easily puts your company ahead of the game from the start.
What do you dislike about the product?
Not a dislike at all, just a wish list item that Drata could perhaps feature a 'library' of consultant contacts that a client could opt to work with; this might support a faster progression toward examination and advice for atypical company structures.
What problems is the product solving and how is that benefiting you?
Even as a very small company, Drata helped us in working toward our goals of having appropriate procedures, controls and monitoring so we could act as a viable and trustworthy player in our space.
Recommendations to others considering the product:
Use Drata's templates to educate yourselves about all aspects of policies and controls your company may need. The things not on your radar are the ones that may cause the most surprises, so use their great tools and references as much as possible!
Lifesaver (did this same process before, the hard way)
What do you like best about the product?
Drata setup enabled the vast majority of work to prepare for our first SOC2 TYPE2 to be automated, and the remaining manual effort was easily understood. I was able to get the grunt work done without undue stress or inefficiency.
What do you dislike about the product?
One of the mandatory policies for us was written for a different type of entity, and we had to rewrite it for our use. It was a policy that is required by any healthcare I/T vendor, and I'm sure it will be made into a great template very soon (maybe already has).
What problems is the product solving and how is that benefiting you?
Our preparation for our SOC2 TYPE2 was a sizeable burden for a company of our size, until we found and implemented Drata. The ease of preparation was, and the ease of our audit process will be, a priceless benefit.
Recommendations to others considering the product:
Don't wait, don't procrastinate, just do it. And if your selected audit firm is not familiar with Drata, ask to introduce them and let the Drata staff take it from there.
Great new way to manage your compliance initiatives
What do you like best about the product?
I liked that for a compliance novice like me, Drata's system walks you through the various stages to get setup. They also have some great templates for documentation if your organization is starting from ground zero.
What do you dislike about the product?
At the time, it seemed like Drata didn't allow for the administrator to assign different compliance tasks or controls to different control owners. Although it's possible that they have added this feature now.
What problems is the product solving and how is that benefiting you?
Ultimately, Drata is helping to make it easier to ensure that we're staying compliant throughout the year, instead of just madly focusing it around audit-time. The monitoring is a great help.
Drata is a multiplier for your compliance programs
What do you like best about the product?
I like that Drata is simple enough to use that we have on person executing most of our SOC2 control framework.
What do you dislike about the product?
There are some limitations in terms of handling past contractors or outside contributors who you may not be able to pair with users coming in through the HR integration.
What problems is the product solving and how is that benefiting you?
Drata is allowing us to get our SOC2 certification!
Drata for YouAttest SOC2 Compliance
What do you like best about the product?
The on-going support. The willingneess to explain the product and contrast feature-to-feature with our environmen w/ our compliance manager.
What do you dislike about the product?
No main complaints at the moment. So good so far.
What problems is the product solving and how is that benefiting you?
Discover where we are in our SOC 2 Type 2 compliance and document what we have and fix what we don't.
Recommendations to others considering the product:
get your team involved .
showing 611 - 620