Drata Q1 Product Releases: Unlocking Greater Control, Visibility, and Flexibility

At Drata, we’re committed to helping you stay ahead of every requirement, review, and risk with a platform that evolves alongside your business. Our Q1 product updates are all about strengthening integrations, simplifying evidence workflows, and giving you greater power to customize and control your compliance experience. Let’s take a look at what’s new.

Expanded Integrations for a More Connected Compliance Ecosystem

A strong compliance program is built on reliable data—and that starts with your integrations. This quarter, we’ve expanded our ecosystem to include more tools across HRIS, ticketing, identity, and cloud services. These updates help you capture evidence automatically, extend coverage, and reduce manual work across your tech stack.

HRIS Support for Zoho People

You can now connect Zoho People to Drata for real-time tracking of employee onboarding, offboarding, and status changes—streamlining personnel evidence collection and ensuring your people-based controls are always up to date.

9 New UAR Connections

User access reviews just got easier with nine new integrations. You can now pull access data from Anthropic, Box, Dropbox, Dropbox Sign, Harvest, Kameleoon, Retool, Make, and Toggl to complete your UARs with broader coverage and less manual effort.

MDM Support for Microsoft Intune GCC High

Government cloud customers using Intune GCC High can now pull mobile device data directly into Drata to monitor endpoint compliance continuously within Azure’s high-security environment.

PingOne Support

Drata now integrates with PingOne, allowing you to bring in identity provider data for automated personnel monitoring and control evidence collection—no manual exports required.

Ticketing Support for Azure Boards and Zoho Desk

Connect Azure Boards or Zoho Desk to generate tickets directly from Drata for tests, controls, and risks—ensuring remediation stays visible and aligned with your team’s existing workflows.

Additional Fields for Linear Tickets

Our Linear integration now supports more detail than ever. Add Priority, Status, Project tags, and more when generating tickets to streamline how you track and resolve issues across compliance tasks.

Virtual Assets for AWS Org Units

Simplify AWS asset management with automatic import of Org Unit data. No more manually linking each account—Drata will now pull in all assets from your org structure for a complete view of your environment.

A Smarter Compliance Workspace

We’ve redesigned key pages across the platform to give you more clarity and context where it matters most. From streamlined monitoring to more informative test and evidence views, these enhancements make it easier to understand your compliance posture and take action faster.

Full Page Experience Infrastructure Connections

We’ve redesigned how you interact with infrastructure integrations. Our new full-page view gives you direct insight into each connection's controls, tests, and requirements, plus instant access to relevant help documentation.

Full Page Experience for Controls and Test Details (Early Access)

Gain deeper insight into your compliance status with redesigned full-page views for controls and tests. Identify readiness gaps faster and resolve issues with context-rich layouts—now available in early access.

New Monitoring Page

Your command center just got an upgrade. Our refreshed Monitoring page helps you spot risk areas at a glance, resolve flagged issues quickly, and maintain your compliance posture in real time.

Evidence Management Made Easy

The upgraded Evidence Library now includes a unified Evidence Details Page that shows all current and past evidence, test links, control references, and file previews in one place—giving you full control over documentation without the chaos.

Workflow and Experience Upgrades

Better workflows lead to better outcomes. These updates streamline how you and your teams manage policies, answer security questionnaires, and assess vendors and risks—saving you time while improving accuracy and collaboration.

Configurable Policy Renewal

Skip the busywork when renewing policies that haven’t changed. Policy owners can now instantly renew static policies in a single click—keeping your documentation current without added overhead.

SafeBase AIQA User Experience Update

We’ve made it easier to fly through inbound security questionnaires. Scan answers faster, jump to key sections, and make edits with a click so you can wrap up those AIQA requests in record time.

Upgraded Vendor Questionnaire

Our redesigned vendor questionnaire tool makes it easier for your third-party partners to respond, collaborate, and complete reviews. Add your branding, include optional questions, and let vendors save and track progress with a clearer, more flexible interface.

Enhanced Views for Smarter Risk Management

Both the Risk Register and Risk Library now feature sortable, action-ready tables packed with deeper context. Spot trends, dig into risk details, and respond faster—all from a single, streamlined view.

More Coverage, More Confidence

Compliance should grow with your business. This quarter, we’ve expanded testing coverage and introduced powerful new customization options to help you stay secure and audit-ready—no matter how unique your environment is.

Custom Connections and Tests

Formerly known as Adaptive Automation, Custom Connections and Tests lets you integrate any tool into Drata via API and build custom tests using our no-code Test Builder. It’s a game-changer for closing coverage gaps and tailoring your compliance strategy.

17 New AWS and Azure Tests

We’ve added 14 new tests for Azure and three for AWS, giving you broader automated coverage. These tests are off by default, but ready for you to activate if you’re connected to the relevant cloud environments.

Framework Support and Readiness Tools

We’re committed to supporting the latest versions of leading frameworks—and giving you more control over how you track and report readiness. These updates help you stay current and prepare for audits with confidence.

NIST 800-171r3

We now support Revision 3 of the NIST 800-171 framework, which introduces roughly 60 new controls and stricter selection criteria. With both r2 and r3 running in parallel, customers can begin transitioning early for a smoother switch.

PCI 4.0.1

Drata now supports the updated PCI DSS version 4.0.1. This update clarifies intent and formatting for existing requirements and adds four new optional policy templates to strengthen your security documentation.

Framework Readiness Toggle

You asked, we delivered. You can now choose how Drata calculates your framework readiness—either by control coverage for incremental progress or by full requirement completion to reflect your true readiness status.

Whether you’re adding integrations, managing risk, or scaling your compliance across frameworks, these Q1 updates are designed to make your job easier, faster, and more effective. With expanded automation, smarter user experiences, and deeper control, you can keep moving forward—knowing your compliance foundation is stronger than ever.

Ready to streamline your compliance journey? Book a demo today.