Drata Q2 Product Releases: Scaling Compliance and Automating Governance

At Drata, we’re committed to helping you stay ahead of every requirement, review, and risk with a platform that evolves alongside your business. In Q2, Drata released platform-wide innovations that simplify compliance, streamline governance, and elevate trust management. Let’s take a look at what’s new.

More Frameworks. Smarter Agents. Stronger Visibility.

Compliance doesn’t wait. So why should your tools? This quarter, we expanded our framework support, enhanced our agent experience, and delivered deeper AWS coverage to help GRC teams maintain readiness without added lift.

Support for CIS 8.1 and Cyber Essentials 3.2

Drata now supports continuous monitoring for both the CIS 8.1 benchmark and the latest UK Cyber Essentials 3.2 framework. Get mapped controls, faster threat alignment, and eliminate manual overhead. Learn More >

Streamline HITRUST Compliance

Run HITRUST assessments in Drata with mapped controls, real-time risk scoring, and seamless collaboration with assessors. Learn More >

Drata Agent 3.8.0 Update

Get smoother compliance ops with Ubuntu 24.04 support, error-handling improvements, and global language compatibility. Learn More >

AWS Org Unit Compliance Visibility

Drata now supports AWS Org Unit-level resource visibility, surfacing metric alarms and logs across accounts. No configuration changes needed—just better coverage for your infrastructure tests. Learn More >

Reduce Review Time. Centralize Risk Data. Simplify Imports.

Risk reviews often start with vendor questionnaires and slow down from there. This quarter, we focused on consolidating workflows and accelerating vendor intake with flexible import tools.

Custom Questionnaire Import for Vendor Risk Management

Now you can upload any vendor questionnaire into Drata’s builder. Edit, assign, and track responses all in one place. Learn More >

Workflows That Scale With Your Team So You Stay Audit-Ready

As organizations scale, so does the complexity of keeping people aligned and accountable. Drata’s new and automated governance features give teams greater control over task orchestration, policy sign-off, and cross-system integration—all backed by clear audit trails.

Custom Connections and Tests

Integrate with any external system via API, automate evidence ingestion with JSON payloads, and validate with Test Builder logic. Included in Advanced + Enterprise plans, CCT future-proofs compliance and closes coverage gaps. Learn More >

Recurring Tasks and Notifications

Automate task cadences with weekly, monthly, or custom schedules. Email notifications ensure nothing gets missed. Learn More >

Multi-Tiered Policy Approvals

Set up multi-level, sequential approvals for policies with logic-based rules. Keep audit trails clean and centralized. Learn More >

Google OAuth Setup for IdP and UAR

Simplify onboarding with OAuth—no Super Admin required. Access is safer, faster, and aligned with Google’s latest guidance. Learn More > 

SafeBase Trust Center Gets Smarter

Trust is a team sport and a competitive advantage. Our latest SafeBase updates bring AI, automation, and Slack-native experiences into the heart of security reviews. That means fewer back-and-forths, faster answers, and more transparency for everyone.

Embed Video in SafeBase Trust Center

Bring your security story to life with embedded video walkthroughs or team intros.

SafeBase AI: Knowledge Base Issue Detection

Spot duplicate or conflicting KB entries automatically to maintain trust and accuracy. Learn More >

Better Collaboration with Messages in SafeBase

Comment directly on AIQA questions and keep full thread history—no more lost context. Learn More >

Find Answers Faster with SafeBase AI Search

AI-powered Trust Library search scans your docs and delivers relevant answers instantly. Learn More >

Ask AI in Slack

If connected to your Trust Library, Slack can now deliver contextual answers to GRC questions—no platform switch required. Learn More >

Questionnaire Table UI Enhancements

Track completion status faster with sortable status and pinned progress views.

Auto-Approve Trusted Colleagues

Grant access to invited users from trusted domains instantly—no manual approval needed.

Salesforce Permission Checker

Automatically detect missing permissions for your integration, reducing time lost in troubleshooting.

From smarter frameworks to automated approvals and AI-driven answers, our Q2 releases help GRC teams scale with confidence and clarity.

Whether you’re expanding into new frameworks, optimizing governance workflows, or building trust with stakeholders, Drata provides the automation, intelligence, and support you need to move faster.

Ready to streamline your compliance journey? Book a demo today.