External reviews
External reviews are not included in the AWS star rating for the product.
SOC2 for Dummies!
What do you like best about the product?
The upside of using Drata for our start-up organization is the ease of use, policy templates available, control ratings/alerts and monitoring functionality and having a central repository for not only internal member access but SOC2 auditor access.
What do you dislike about the product?
The help/chat functionality window remains static. While during a help/chat session, the ability to move the window would be most helpful. There are times when the chat window contains helpful instructions but ultimately is in the way of performing the function in the system while remaining in chat session. Having the ability to move the chat window around the screen would assist in the ability to quickly resolve issues.
What problems is the product solving and how is that benefiting you?
Drata solves the problem of policy storage, maintenance, security training logs, employee background checks are integrated in the system through our provider. Without the Drata platform, we would not be as organized as we are with regards to all of the control items required for SOC2, policies, policy updates, training completion tracking and ongoing monitoring would be a very manual process and time consuming to say the very least.
- Leave a Comment |
- Mark review as helpful
Amazing People!
What do you like best about the product?
Drata is most helpful at showing us all the things we need to do to be compliant with SOC2. The automated gathering of evidence saves so much time. The collecting of employee data is a huge help also.
What do you dislike about the product?
I do not have the most expierience with Drata but so far I have not found any down sides. I will be contacting auditors soon and may find a down side when I am further along in the SOC2 process.
What problems is the product solving and how is that benefiting you?
Drata is helping us to get SOC2 compliant. This solves a problem with customers trusting us with their data and with us being able to know that we are following industry best practices.
Continue to be impressed with Drata
What do you like best about the product?
Drata makes our compliance and security program easy. It automates so many of the hard parts and makes the rest easy!
What do you dislike about the product?
Could use more integrations, but I have no major dislikes of the platform.
What problems is the product solving and how is that benefiting you?
Automation of our existing compliance program and a solid framework to enable us for future compliance attestations.
Great customer service and highly knowledgeable
What do you like best about the product?
I worked with Elise and Tony on SOC 2 compliance, and they were both friendly and knowledgeable. They provided great support for someone going through this for the first time.
What do you dislike about the product?
I can't think of anything that I disliked about my experience.
What problems is the product solving and how is that benefiting you?
Drata drastically simplifies the complicated SOC 2 compliance process. Without them, it would take 100x longer.
Very simple and professional
What do you like best about the product?
- Complete solution
- Open to feedback and feature requests
- Great sales and support
- Open to feedback and feature requests
- Great sales and support
What do you dislike about the product?
I really don't have any dislikes at this time
What problems is the product solving and how is that benefiting you?
One pane of glass to present our security posture to customers
Drata is an extremely helpful platform for gathering compliance evidence.
What do you like best about the product?
I like having all my compliance and evidence data in one place that is easy to manage.
What do you dislike about the product?
Sometimes the raw test evidence can be very ambiguous which can make it hard to track down the exact reason a test is failing.
What problems is the product solving and how is that benefiting you?
Drata is solving our need for compliance monitoring and evidence gathering for our SOC 2audit.
Excellent service
What do you like best about the product?
Drata has made our SOC2 compliance journey very manageable for us, and they have been incredibly helpful every step of the way. They listen to their customers and ensure our audits run smoothly.
What do you dislike about the product?
There's not a whole lot to dislike about Drata-- if I had one recommendation, I would ask that their UI team explore a dark mode for us that have to stare at screens all day.
What problems is the product solving and how is that benefiting you?
Continuous, automated compliance monitoring makes my life so much easier. Instead of manually uploading evidence all the time, their intuitive software does all the heavy lifting for me-- saving me a lot of time. The built-in policies and monitoring features give me much greater insight into our daily operations as well.
Drata - Continuous monitoring Tool for GRC
What do you like best about the product?
Drata has vision and best features in continuous monitoring of a compliance environment. Drata looks to build different functionality that complements compliance and tracking requirements. Every Quarter they are releasing new frameworks which will help us in the future as we adopt addtional frameworks.
What do you dislike about the product?
Continuous monitoring is a fairly new concept and is not completely there yet. But they have been working very closely with my team in improving their tool to get there.
What problems is the product solving and how is that benefiting you?
Drata is our master control listing that incorporates automation in control testing. In the future when looking to adopt new frameworks, Drata will help map the controls we already have in place to determine any gaps.
Drata is a luxury limousine for your compliance journey
What do you like best about the product?
There are a number of things that I love about Drata.
First and most important, the onboarding experience was phenomenal. Sometimes with vendors, the sales process is all "red carpet," but you feel as though the carpet is pulled up a bit once move from prospect to paying customer. With Drata, the sales process was great, but once we became a paying customer it felt like we moved to VIP status. Great onboarding, great support, totally responsive to every question we have asked. I literally could not be more satisfied.
Second, the platform itself is terrific. Great UX, intuitive, great visual design.
Third, the access to compliance experts within the Drata platform is an absolute game-changer. We have asked dozens of questions about different controls and evidence and in every case we've gotten a thorough and helpful response within a matter of minutes (at most, hours).
Fourth, Drata worked to understand our audit needs and match us with an auditor who has been terrific.
I could go on, but the main thing is, Drata has exceeded all expectations, which is saying something, because we vetted compliance vendors HARD and had high expectations going in.
First and most important, the onboarding experience was phenomenal. Sometimes with vendors, the sales process is all "red carpet," but you feel as though the carpet is pulled up a bit once move from prospect to paying customer. With Drata, the sales process was great, but once we became a paying customer it felt like we moved to VIP status. Great onboarding, great support, totally responsive to every question we have asked. I literally could not be more satisfied.
Second, the platform itself is terrific. Great UX, intuitive, great visual design.
Third, the access to compliance experts within the Drata platform is an absolute game-changer. We have asked dozens of questions about different controls and evidence and in every case we've gotten a thorough and helpful response within a matter of minutes (at most, hours).
Fourth, Drata worked to understand our audit needs and match us with an auditor who has been terrific.
I could go on, but the main thing is, Drata has exceeded all expectations, which is saying something, because we vetted compliance vendors HARD and had high expectations going in.
What do you dislike about the product?
Nothing. If I discover something I dislike, I'll update, but so far, I have not a single complaint. Unless it's fair to complain that completing evidence for certain controls is hard work and I wish Drata would magically get ALL my personnel to complete their awareness training modules in a timely fashion...
What problems is the product solving and how is that benefiting you?
We need to achieve multiple compliance objectives in 2022 and wanted a compliance platform to help us organize and manage our compliance efforts. We also need to help many of our customers with their own compliance needs and we wanted a platform that would help us organize and manage those efforts as well. We are using Drata ourselves first to ensure it works as desired and it is meeting all of our requirements and then some. I quite honestly do not know if would be able to meet our compliance objectives with Drata.
Recommendations to others considering the product:
In our evaluations, Drata was not the least expensive compliance solution on the surface, but the value and ROI in terms of reduced time to manage our compliance project, we felt Drata offered the best value and we are delighted in our choice. Drata has been a phenomenal partner, the platform is a pleasure to use and our compliance project is ahead of schedule.
The perfect solution for obtaining your SOC2 hassle-free
What do you like best about the product?
Customer Support is superb at Drata, you have your dedicated CSM with regular check-ins that ensure your making the right process on the platform. Every single question was handled immediately and Drata is always prepared for any question. The platform is very intuitive to use and with all their integrations, getting SOC2 ready is not a big deal any more.
What do you dislike about the product?
Not a lot to complain honestly. The only minor thing is that the invites to the Drata platform have to be manually send to your employees. In such an automated platform, this feels like a step-back. But this is flagged already and potentially be worked on.
What problems is the product solving and how is that benefiting you?
Getting your security controls right with as much automation as possible.
showing 511 - 520