Drata Acquires SafeBase, Accelerating its Vision for the Future of Trust Management
Combining the leading enterprise trust center network with the fastest growing GRC automation solution creates the world’s most comprehensive Trust Management Platform.
We're officially announcing that Drata has entered into a definitive agreement to acquire SafeBase.
I’m incredibly proud to welcome the SafeBase team, as today marks the beginning of our shared journey ahead.
My first meeting with Al Yang, SafeBase’s co-founder and CEO, was back in 2021 at SaaStr, Drata’s first-ever in-person event. At the time, both of our companies were less than a year old. Al and I had an engaging conversation in one of the COVID-necessary outdoor tents, discussing our visions, the importance of culture, and our shared obsession with building mission-driven companies that put customers first.
Even then, I could see the clear overlap and unity between our products and visions. But what stood out most was our mutual respect for culture and working with good people. Over the years, while our companies charted separate paths, Al and I stayed in touch, always recognizing how closely aligned our missions and values were.
Fast forward three years, and here we are—joining forces to bring a unified vision of Trust Management to tens of thousands of customers. The combined power of our platforms positions us to lead this market like never before.
What is Trust Management?
At its core, Trust Management is the continuous process of ensuring and communicating that a company is secure, compliant, and worthy of customer trust. By enabling organizations to build, maintain, and demonstrate trust, we’re not just unlocking opportunities for them—we’re helping them accelerate growth and achieve their full potential.
Our vision is to be the “trust layer” between great companies, driving seamless and transparent relationships in today’s interconnected digital world.
Why Now?
There are perfect storm conditions brewing that are magnifying the need for comprehensive Trust Management:
Cloud and AI Dependency: The rise of cloud applications and gen AI has increased enterprises’ reliance on third-party vendors that access sensitive customer data.
Growing Security Risks: With breaches becoming more frequent and costly, vendors face growing scrutiny and higher standards for security assurance.
Increased Regulation: Baseline frameworks like SOC 2, ISO 27001, GDPR, and CCPA are now joined by emerging regulations such as DORA, ISO 42001, and the EU AI Act.
“Modern distributed infrastructure, which relies heavily on SaaS usage, creates endless new opportunities for unmonitored access to corporate data and processes…In the last year, 41% of the organizations that suffered a material incident say a third party caused it.” - Anna Sarnek, AWS
These dynamics create an urgent need for a holistic Trust Management platform that combines security, compliance, and risk management.
Why Drata + SafeBase?
Drata’s automation-driven compliance, vendor risk management, and modern GRC solutions empower now over 7,000 customers to continuously monitor security controls, streamline audits, and manage internal and third party risk. In just four years, customers like Notion, Lemonade, Tenable, Alteryx, and thousands more have monitored millions of controls, streamlined thousands of audits, and radically improved vendor risk management at scale.
SafeBase has revolutionized how organizations demonstrate their security posture through a robust network of trust centers and AI-powered security questionnaire capabilities. SafeBase’s products have played a pivotal role in accelerating revenue growth and building trust in the marketplace with customers like OpenAI, Twilio, Crowdstrike, LinkedIn, SentinelOne, and hundreds more. $15B in transactions have been tied to security teams using SafeBase Trust Centers over just the last 4 years.
And we’re both just getting started. Together, Drata and SafeBase are creating a seamless ecosystem that integrates trust, governance, risk, and compliance. Here’s what this means for our customers:
Proactive Trust Building: Real-time, dynamic trust centers to enhance transparency and streamline self-serve security reviews.
Faster Security Reviews: AI-powered automation to accelerate questionnaire responses and close deals.
Effortless Compliance: Advanced automation to scale compliance and simplify audits.
Enhanced Vendor Risk Management: Greater efficiency and continuous visibility across third-party vendors and suppliers.
Scalable GRC Programs: Meeting enterprise needs as they grow and modernize their programs.
This isn’t just a merger of complementary products—it’s a union of two customer-obsessed companies with aligned missions and cultures, working together to redefine what’s possible in trust management.
Meeting Enterprise Demands
Today's enterprises face growing challenges in maintaining trust and compliance as baseline frameworks and emerging regulations drive added layers of complexity. Staying ahead of these demands requires proactive, nimble, and scalable solutions.
SafeBase + Drata will:
Ensure regulatory readiness with real-time updates across multiple frameworks.
Streamline security reviews and audits with AI-driven automation.
Strengthen vendor risk management, ensuring supply chain resilience.
Turn trust and compliance into a competitive advantage.
“Drata has been invaluable to Vercel’s operations. Seeing two market leaders, Drata and SafeBase, come together, is a game-changer for trust and GRC teams.” - Ty Sbano, CISO at Vercel
Just the Beginning
Just in time for Drata’s fourth anniversary, this milestone marks the start of an exciting new chapter. Together with SafeBase, we’re more committed than ever to empowering our customers to build and scale trust, unlock growth, and achieve success.
The future of Trust Management is here, and we’re truly honored to have the privilege of leading the way.
