About

Founded in 2020, Drata operates a trust management platform that automates compliance processes for businesses seeking to earn and maintain trust at scale. The company's platform continuously monitors security controls, automates evidence collection, and provides a centralized view of an organization's compliance posture, replacing manual workflows with automation. It supports frameworks including SOC 2, ISO 27001, HIPAA, and GDPR.

Drata employs over 600 people worldwide and serves thousands of companies across its customer base. The company has reached $100 million in annual recurring revenue (ARR), positioning it as a significant player in the B2B compliance and security software sector.

Technically, Drata's work spans compliance automation, security control monitoring, evidence collection automation, and AI-driven automation. The company's stated values emphasize trust, integrity, customer focus, and an automation-first approach to building its platform.

Similar companies

Vanta logoVA

Vanta

Vanta, founded in 2018, builds AI-aided security and compliance automation software that continuously monitors controls and collects audit evidence for SOC 2, ISO 27001, HIPAA and other frameworks.

Sprinto logoSP

Sprinto

Sprinto is an AI-native GRC platform that automates compliance, risk, vendor oversight and trust management for 3,000+ businesses in 75+ countries.

Entefy logoEN

Entefy

Entefy develops an enterprise AI platform for automation, data analytics, and information security across industries like financial services and healthcare.

HR Acuity logoHA

HR Acuity

HR Acuity is a technology company that provides a SaaS platform for managing employee relations, investigations, and related workplace documentation.

Sedric.ai logoSE

Sedric.ai

Sedric.ai builds a compliance-dedicated AI platform for financial institutions to monitor customer communications, automate policy enforcement, and detect risks in real-time.

Cyera logoCY

Cyera

Cyera is a data security company that builds an AI-native platform to discover, classify, and protect sensitive data across cloud, SaaS, on-premise, and AI environments.