Normalised provider profile

Drata develops a platform for governance, risk, compliance and demonstrating an organisation’s security posture to customers. Compliance Automation collects evidence from connected IT tools, continuously monitors controls and maps them to frameworks such as SOC 2, ISO 27001 and HIPAA. Additional products address internal risk, vendor risk, security questionnaires and Trust Centers for controlled document sharing. Audit Hub supports collaboration with external auditors. Organisations can coordinate evidence and ownership across teams and assessment cycles. Selection depends on available integrations, which controls can actually be automated, auditor permissions and the release of sensitive evidence. Drata does not replace an independent certification body. Its partnership with A-LIGN connects software with audit services while maintaining separate companies and responsibilities.