Drata

Drata is a security compliance company founded in 2020 by Adam Markowitz, Troy Markowitz, and Daniel Marashlian, headquartered in San Francisco, California, US. It was built to remove the manual evidence-collection work that made SOC 2, ISO 27001, and similar audits slow and repetitive for growing companies.

Its Trust Management Platform automates continuous control monitoring and evidence collection, hosts a public Trust Center for sharing security posture with customers, and adds AI-based questionnaire automation and third-party risk assessment. More than 8,500 organizations, from early-stage startups to large enterprises, use the platform to prepare for and maintain compliance certifications.

1. Compliance Automation: Continuously monitors controls and collects audit evidence across cloud systems.

2. Enterprise GRC: Centralizes governance, risk, and compliance workflows across multiple frameworks.

3. Trust Center: Publishes a shareable security posture page for customers and prospects.

4. Questionnaire Automation: Uses AI to draft answers to security review questionnaires from vendors.

5. Third-Party Risk Management: Assesses vendor risk using AI-assisted evidence review.

6. Framework Coverage: Supports SOC 2, ISO 27001, and other common compliance frameworks in one workflow.