External reviews
External reviews are not included in the AWS star rating for the product.
3 Months to a clean SOC 2 Type 1 Report
What do you like best about the product?
Drata made it very easy for us to begin our SOC 2 journey. I compared three other platforms before selecting this one. The controls and alerts made it simple to distribute updated policies to our workforce and ensure everyone stays on top of their compliance and security responsibilities. The integrations with various services helped us uncover and quickly address some minor configuration issues.
Our Customer Success Manager, Jordan, was an immense help and an excellent guide. As were the collection of agents available through live chat. Many questions about policy updates were addressed within minutes and helped us move quickly through our checklists. It was nerve-wracking to start the audit process, but we were confident we were ready based on our dashboard readings. Receiving that clean report after three months (plus a week) was well worth all the effort. We're already scheduling our SOC 2 Type 2 audit later this year.
Our Customer Success Manager, Jordan, was an immense help and an excellent guide. As were the collection of agents available through live chat. Many questions about policy updates were addressed within minutes and helped us move quickly through our checklists. It was nerve-wracking to start the audit process, but we were confident we were ready based on our dashboard readings. Receiving that clean report after three months (plus a week) was well worth all the effort. We're already scheduling our SOC 2 Type 2 audit later this year.
What do you dislike about the product?
The Risk Assessment section needs some work. Six sets of questions (Tec, Legal, HR, Info Sec, Finance, and Sales) can only be answered by going through them one question at a time. It's a dynamic series of forms, but the navigation often made it difficult to revisit a previous question. We often would have multiple people trying to navigate the same topic, causing some loss of answers. There should be a way to download all the questions, including the branching options, so we can collaborate on our responses before completing each topic. I just copied the questions to a document to review my answers over time.
What problems is the product solving and how is that benefiting you?
Several potential clients have asked about our SOC 2 status. They can't move forward with us while that status is unknown. For one, we had a tight deadline we wanted to achieve, and while it was possible, we weren't so sure it was probable.
- Leave a Comment |
- Mark review as helpful
Seamless and Simple
What do you like best about the product?
Drata is easy to use, intuitive, and makes the implementation and adherence to compliance simple and approachable. Drata gives you visibility into your compliance posture, tools to remediate failures, explanations, definitions, and examples for every control within the framework. Getting to a stable and confident position regarding your compliance posture is simple and intuitive.
What do you dislike about the product?
I have not run into any issues in my current implementation. I'm sure there will be more as we expand our frameworks, but in our current state, the solution is flawless.
What problems is the product solving and how is that benefiting you?
SOC2 and PCI DSS compliance is not trivial. Drata has minimized our barrier to validation and provided tools and resources for enhancing our current position as an organization.
Good Product, Great People!
What do you like best about the product?
The things I appreciated the most about Drata were the onboarding/get-started list of activities and the live support chat with experts! Top of the list is their excellent onboarding team.
What do you dislike about the product?
Compliance is a complex subject, and it can be difficult to understand how the different controls and requirements interact and affect each other. A little more linking and interaction between controls/requirements and their definitions would go a long way to help understanding when first configuring Drata.
What problems is the product solving and how is that benefiting you?
Drata helped us solve our need to quickly and efficiently move toward our SOC2, type 2 compliance. The platform gave us a measuring stick for success, and Drata was able to refer us to an auditor familiar with their product to make the audit process straightforward.
Drata intuitive application and amazing people
What do you like best about the product?
We went though our first SOC 2 review all manually with Drata we are saving time and money and becoming more secure. The Drata platform is fantastic but the people of Drata are the key. Elise Spitzer our Customer Sucess Manager meet with us weekly to help us from day one though the audit.
What do you dislike about the product?
A few more intigration would be helpful but they are working on that,
What problems is the product solving and how is that benefiting you?
It helps us write effective policies and automate internal controls
From manual to automated in only a few weeks!
What do you like best about the product?
As a small business, we had struggled through a fully manual SOC2 Type 1 audit. As we started the type 2 process, it became immediately apparent that we needed a better solution. We were lucky enough to have Elise as our Customer Success Manager, and truly believe she made our onboarding and adoption more successful.
Drata makes syncing, tracking, and incorporating our external systems a breeze. While our Audit is ongoing, we've already noticed the process being smoother as all our controls, evidence, and document requests are easily tracked and shared with our auditors.
The support from Drata (again, huge shout out to Elise) is top notch. We get valuable answers to all our questions quickly, adding to the overal time savings.
Drata makes syncing, tracking, and incorporating our external systems a breeze. While our Audit is ongoing, we've already noticed the process being smoother as all our controls, evidence, and document requests are easily tracked and shared with our auditors.
The support from Drata (again, huge shout out to Elise) is top notch. We get valuable answers to all our questions quickly, adding to the overal time savings.
What do you dislike about the product?
Not a dislike, per se, but we are eagerly looking forward to Drata's improved RBAC controls, improved syncing with our HRIS (especially around policies), and more granular controls for bulk-uploading evidence in the personnel and device management sections. To be clear, this does not detract from our success with Drata - but would be nice-to-haves!
What problems is the product solving and how is that benefiting you?
Drata is helping us solve a wide array of onerous tasks including: SOC2 audit compliance, Vendor Onboarding, Risk Management, and policy management. This has resulted in huge time savings for us
start to finish support!
What do you like best about the product?
Nick, our client success manager, has walked us through the process. He is always available for help, along with chat support. The chat agents have all been fantastic to work with and have taken the time to learn about our company's specific needs and tailor their help and responses to accommodate that. The platform is very user-friendly and as a non-tech person by trade, I have been able to lead the entire audit with the help of everyone on our Drata support team. While SOC2 (and therefore Drata) are set up primarily for a saas type of company, in which we are not, there have been some things that we have had to modify or exclude to work for us and everyone there has helped us work through these issues.
What do you dislike about the product?
We are waiting on the Mulri-Tennent feature to be rolled out as well as integration with Mosyle.
What problems is the product solving and how is that benefiting you?
We required SOC2 compliance to be able to continue working with some Fortune 500 companies. Drata is making this process as painless as possible.
Save time, save headaches, just use Drata
What do you like best about the product?
Although I don't usually write reviews, I feel compelled to share my positive experience working with Drata. Undergoing any audit is a massive lift for those being audited. The entire process is confusing if not done correctly. Drata has made the process simple, easy, and innovative.
Our dedicated Customer Success Manager, Gabriella, has been incredible! As a fast-paced company, we relied heavily on her excellent communication skills, and she delivered consistently. Throughout our experience with Drata, Gabriella has been a reliable source of information and support. Additionally, everyone we interacted with at Drata was helpful and accommodating.
Overall, I highly recommend Drata for their exceptional service and expertise.
Our dedicated Customer Success Manager, Gabriella, has been incredible! As a fast-paced company, we relied heavily on her excellent communication skills, and she delivered consistently. Throughout our experience with Drata, Gabriella has been a reliable source of information and support. Additionally, everyone we interacted with at Drata was helpful and accommodating.
Overall, I highly recommend Drata for their exceptional service and expertise.
What do you dislike about the product?
There are not too many complaints here. A few features could be added to make it easier to view documents for auditors. Other than that, the features come in quickly and Drata is very serious about customer feedback.
What problems is the product solving and how is that benefiting you?
Easily undergoing audits that range from SOC 2 Type 2 to ISO 27001
The Drata platform is great for getting audit ready and monitoring compliance
What do you like best about the product?
Drata's platform offers a wide range of features and guidelines that enabled us to get started with compliance and helps us to continuously stay on top of our data governance requirements. The policy templates and management system make it easy to create policies that are aligned with industry standards and regulations. The platform's automated tracking and reporting capabilities for connected third party tools and platforms enable us to ensure compliance with relevant laws and guidelines.
Victoria, our Customer Success Manager, provided us with exceptional support, addressing all our inquiries promptly and introducing us to relevant external companies for audit and penetration testing.
Victoria, our Customer Success Manager, provided us with exceptional support, addressing all our inquiries promptly and introducing us to relevant external companies for audit and penetration testing.
What do you dislike about the product?
There were a few technical issues while connecting some of our third party systems to Drata due to the custom configurations in our company. All technical issues could be resolved in the end and the support was very responsive throughout.
What problems is the product solving and how is that benefiting you?
Drata's all-in-one platform enables us to automatically monitor our IT systems, keep track of required documentation and provide all relevant information to auditors. This helps us save time, reduce the risk of errors or oversights and, overall, keep the compliance beast at bay.
Drata Makes the SOC 2 Compliance Process 100x Easier
What do you like best about the product?
Drata oulines the necessary steps to gain SOC 2 compliance and provides high quality support duing the process. I've thoroughly enjoyed working with my Drata Customer Support Manager, Craig Macaraeg.
What do you dislike about the product?
Not applicable - no dislikes about Drata to note.
What problems is the product solving and how is that benefiting you?
SOC 2 compliance would be cumbersome and likely unrealistic for start ups and small businesses without Drata.
Daily Compliance Means Audit Season isn't Even a Day Long
What do you like best about the product?
Before Drata, I was managing an audit manually. It took almost 3 months between auditor pre-checklists, dropbox, talking to HR, Finance, and having a multi-day grueling audit to show all evidence.
I've been a Drata customer for 3 years, after the initial setup, ongoing audit has been virtually no added work. It connects to my HR/Finance/IT systems and securely keeps track of all evidence.
With drata, it took that same 3 months to get everything into the system, but I could do it on my schedule. After I got to 100% compliance (which you can see in the dashboard daily), it became seamless thereafter.
The auditor logs in, sees the evidence, and it is just one call, instead of multiple all day sessions.
I've been a Drata customer for 3 years, after the initial setup, ongoing audit has been virtually no added work. It connects to my HR/Finance/IT systems and securely keeps track of all evidence.
With drata, it took that same 3 months to get everything into the system, but I could do it on my schedule. After I got to 100% compliance (which you can see in the dashboard daily), it became seamless thereafter.
The auditor logs in, sees the evidence, and it is just one call, instead of multiple all day sessions.
What do you dislike about the product?
I wish it handled FedRamp and other very niche audits.
What problems is the product solving and how is that benefiting you?
SOC2, ISO27001 COmpliance
showing 371 - 380