August Product Roundup

August brought exciting updates to Drata, with new features and enhancements designed to accelerate revenue, boost operational efficiency and proactively manage your organizational risk all in one unified platform experience. Check out all of the new innovations below.

Knowing what artifacts are needed to satisfy the requirements of your regulatory framework can be challenging, especially if you are new to compliance. Now with Evidence Guidance, get clear descriptions and implementation guidance that eliminates the headaches involved with identifying, uploading, and managing evidence, making you more confident in your readiness and audits.

• Gain confidence in your readiness and eliminate surprises during audits with clear guidance on what evidence is required to ensure a control is implemented and operating effectively.

• GRC Approved: Drata worked with our internal GRC experts to ensure that Evidence Guidance meets the latest standards from AICPA and ISO.

• Configure Drata to fit your needs by creating custom evidence with your own guidance or your auditor's. Once created, you can assign owners and task them with uploading the required artifacts.

Faster Sales, Fewer Hassles: Trust Center’s Salesforce Integration

Trust Center’s integration with Salesforce fully automates the document request process, and accelerates your sales cycle even more with this latest enhancement. Here’s what's new: 

• Automatic Approvals: Drata streamlines your workflow by automatically approving requests based on predefined rules, freeing up your time for more important tasks.

• Optimized Access Request Process: With Trust Center Pro, Drata effortlessly pulls the necessary information from Salesforce, saving you time and boosting efficiency.

• NDA Bypass for Faster Approvals: Drata speeds up the process by automatically bypassing NDA requirements for users with existing agreements, helping you move through approvals even faster.

Additional Highlights from August

While those are some key highlights, there’s more! Every business has unique needs, and our latest releases ensure you can work seamlessly across your organization by using Drata as your centralized platform and source of truth—all while maintaining full control and configurability. Here’s what’s new:

Enhancing operational efficiency and automation is essential for seamless collaboration with teams across your organization and external vendors. Explore our latest releases designed to support you in achieving this goal.

Guided Vendor Security Reviews

Streamline vendor onboarding, evaluation, and compliance with Guided Vendor Security Reviews. Easily track prospective vendors throughout the procurement process, capture key observations, and maintain a complete record of your vendor reviews over time. Simplify third-party security management and ensure compliance with a few clicks.

Multiple Instance Management (MIM) Dashboard

Say hello to a more comprehensive compliance overview with the new Multiple Instance Management (MIM) Dashboard! This feature provides a holistic view of your compliance health across all accounts, enabling you to quickly identify which accounts need attention. This powerful new tool helps keep compliance at the forefront.

Dashboards for Workspaces (BETA)

Currently in BETA, Dashboards for Workspaces allows you to view a snapshot of key compliance health metrics across each business unit, providing greater visibility and control over your organization’s compliance status.

We hope these updates help you achieve even more with Drata! Stay tuned for next month’s roundup, where we’ll continue to bring you the latest product developments to support your risk and compliance journey all in one central platform.

Control Owner Notifications

Stay on top of compliance with our enhanced Control Owner Notifications. Control owners can now opt to receive notifications via Slack, Microsoft Teams, or email whenever evidence for a control is updated, linked, edited, or added, so you can easily keep your team up-to-date.

Jira Automated Ticketing for Compliance-as-Code

We’re enhancing collaboration with the new Jira Automated Ticketing for Compliance-as-Code product. You can now configure ticketing workflows to automatically create Jira tickets for Compliance-as-Code tests. This will help you track Infrastructure as Code (IaC), compliance issues, and remediation efforts while coordinating seamlessly across teams. Drata is the only compliance automation platform that monitors and collects evidence of controls from code to production, and this new enhancement makes that even easier.

Quick User Access Reviews

We’ve made it easier to conduct User Access Reviews (UAR) with the Quick User Access Reviews feature. Now you can view roles and set the review status for each individual personnel in a single view, streamlining your review process.

Your GRC program is unique, which is why we’re committed to helping you configure Drata to meet your specific needs. Here are some new ways to do just that.

Policy Legal Disclaimers

We’ve added a new option for policy legal disclaimers. Customers can now fill in an optional legal disclaimer directly from the Policy Details drawer, ensuring all necessary legal information is documented and communicated effectively.

API for Manual Import of Personnel Data

Eliminate manual work with our new API for Manual Import of Personnel Data. Automate your personnel data uploads by submitting a CSV file or JSON in a POST Body. Say goodbye to daily exporting, formatting, and uploading, and hello to a streamlined, automated process.

Having integrations with key providers is essential for easily pulling in the evidence you need and being audit-ready at any time. Check out the new providers we now support.

New User Access Review Connections

More integrations for User Access Reviews—We’ve added support for the following UAR systems: 1Password, Azure DevOps, Databricks, Lacework, Lattice, Lever, Matillion ETL, Microsoft 365 GCC High, Mixpanel, Sonarcloud, Vercel, and Webflow. Additionally, our Vercel integration brings our total number of direct UAR integrations to 100!

Support for GitHub On-Prem Environments

Exciting news for teams using GitHub Enterprise Server: Drata now supports integrations with GitHub On-Prem Environments. This new feature enables you to connect to GitHub Enterprise Server and leverage Drata's continuous monitoring and automated evidence collection capabilities, ensuring compliance for your on-premise environments.

IdP Integrations: Microsoft 365 GCC High & CyberArk

We’ve expanded our Identity Provider integrations to connect to Microsoft 365 GCC High or CyberArk, synchronizing and provisioning accounts for all personnel effortlessly. These new integrations streamline identity management by ensuring all user access is up-to-date and compliant across your organization.

Vetty Integration

Check out Vetty, our new background check provider integration. Similar to our other background check integrations, Vetty pulls information via the partner API and syncs the proof and timestamps of completed background checks to personnel profiles.