SaaS Ranking
Menu

Security and compliance / Compliance automation

Drata

What Drata publishes on drata.com, measured on 2026-09-02. Every line links the page we found it on, or lists the addresses we checked.

Not enough data: 4 of 12 criteria measured, so no transparency score

Not ranked: we could measure 4 of 12 criteria, below our thresholdchecked 2026-09-02

1 gap found: one criterion not found at the addresses we checked. 3 found1 not found8 not measured

Public transparency score, not a product or security rating. That is a statement about our measurement, not about Drata.

Transparency labelsaas-ranking.com

Drata

drata.com · Compliance automation

  1. A
  2. B
  3. C
  4. D
  5. E
  6. F
Not enough data4 of 12 measured, no score

Published commitments2 of 2 found, 7 not measured

Measured behaviour1 of 2 found, 1 not measured

Checked 2026-09-02. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.

We do not issue badges: a badge is the first step towards a paid placement, and there is none here. The SVG is a document with the date in it, for your own files.

Show the full transparency label

Transparency labelsaas-ranking.com

Drata

drata.com · Compliance automation

  1. A
  2. B
  3. C
  4. D
  5. E
  6. F
Not enough data4 of 12 measured, no score

Published commitments2 of 2 found, 7 not measured

Measured behaviour1 of 2 found, 1 not measured

Checked 2026-09-02. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.

We do not issue badges: a badge is the first step towards a paid placement, and there is none here. The SVG is a document with the date in it, for your own files.

Not found, heaviest first

✗

No third-party tracking before consent

weight 2 of 3

No consent-free first load found.

Checked 1 address on 2026-09-02.

Show the 1 address we checked
  1. https://drata.com/ – third-party requests before any interaction: api2.amplitude.com, cdn.amplitude.com, cdn.builder.io, sr-client-cfg.amplitude.com

Is this wrong? Send us the URL

Published evidence 3
✓

Status page with history

weight 2 of 3

A public status page with incident history.

Source: https://status.drata.com/ · checked 2026-09-02

✓

HTTPS enforced with HSTS

weight 2 of 3

HTTP redirects to HTTPS and the HSTS header is set.

Source: https://drata.com/ · checked 2026-09-02

✓

Certifications named

weight 1 of 3

SOC 2 or ISO 27001 named on a public page.

Source: https://trust.drata.com/ · checked 2026-09-02

Not measured by us 8
–

Data processing agreement

weight 3 of 3

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 8 addresses we checked
  1. https://drata.com/legal/dpa – blocked or unavailable (HTTP 403)
  2. https://drata.com/dpa – blocked or unavailable (HTTP 403)
  3. https://drata.com/legal/data-processing-agreement – blocked or unavailable (HTTP 403)
  4. https://drata.com/data-processing-agreement – blocked or unavailable (HTTP 403)
  5. https://drata.com/legal/data-processing-addendum – blocked or unavailable (HTTP 403)
  6. https://drata.com/legal/gdpr – blocked or unavailable (HTTP 403)
  7. https://drata.com/trust/dpa – blocked or unavailable (HTTP 403)
  8. https://drata.com/privacy/dpa – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Subprocessor list

weight 3 of 3

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 7 addresses we checked
  1. https://drata.com/legal/subprocessors – blocked or unavailable (HTTP 403)
  2. https://drata.com/subprocessors – blocked or unavailable (HTTP 403)
  3. https://drata.com/sub-processors – blocked or unavailable (HTTP 403)
  4. https://drata.com/legal/sub-processors – blocked or unavailable (HTTP 403)
  5. https://drata.com/trust/subprocessors – blocked or unavailable (HTTP 403)
  6. https://drata.com/privacy/subprocessors – blocked or unavailable (HTTP 403)
  7. https://drata.com/legal/subprocessor-list – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Data location stated

weight 3 of 3

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 7 addresses we checked
  1. https://drata.com/security – blocked or unavailable (HTTP 403)
  2. https://drata.com/trust – blocked or unavailable (HTTP 403)
  3. https://drata.com/legal/privacy – blocked or unavailable (HTTP 403)
  4. https://drata.com/privacy – blocked or unavailable (HTTP 403)
  5. https://drata.com/privacy-policy – blocked or unavailable (HTTP 403)
  6. https://drata.com/compliance – blocked or unavailable (HTTP 403)
  7. https://drata.com/legal/privacy-policy – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Public pricing

weight 2 of 3

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 5 addresses we checked
  1. https://drata.com/pricing – blocked or unavailable (HTTP 403)
  2. https://drata.com/pricing/ – blocked or unavailable (HTTP 403)
  3. https://drata.com/plans – blocked or unavailable (HTTP 403)
  4. https://drata.com/en/pricing – blocked or unavailable (HTTP 403)
  5. https://drata.com/pricing-plans – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Notice before subprocessors change

weight 2 of 3

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 8 addresses we checked
  1. https://drata.com/legal/subprocessors – blocked or unavailable (HTTP 403)
  2. https://drata.com/subprocessors – blocked or unavailable (HTTP 403)
  3. https://drata.com/sub-processors – blocked or unavailable (HTTP 403)
  4. https://drata.com/legal/dpa – blocked or unavailable (HTTP 403)
  5. https://drata.com/dpa – blocked or unavailable (HTTP 403)
  6. https://drata.com/legal/data-processing-agreement – blocked or unavailable (HTTP 403)
  7. https://drata.com/trust/subprocessors – blocked or unavailable (HTTP 403)
  8. https://drata.com/legal/sub-processors – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Uptime SLA with a figure

weight 1 of 3

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 6 addresses we checked
  1. https://drata.com/legal/sla – blocked or unavailable (HTTP 403)
  2. https://drata.com/sla – blocked or unavailable (HTTP 403)
  3. https://drata.com/legal/service-level-agreement – blocked or unavailable (HTTP 403)
  4. https://drata.com/trust/sla – blocked or unavailable (HTTP 403)
  5. https://drata.com/uptime – blocked or unavailable (HTTP 403)
  6. https://drata.com/legal/uptime-sla – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

security.txt (RFC 9116)

weight 1 of 3

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 1 address we checked
  1. https://drata.com/.well-known/security.txt – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Named privacy contact

weight 1 of 3

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 7 addresses we checked
  1. https://drata.com/legal/privacy – blocked or unavailable (HTTP 403)
  2. https://drata.com/privacy – blocked or unavailable (HTTP 403)
  3. https://drata.com/privacy-policy – blocked or unavailable (HTTP 403)
  4. https://drata.com/legal/privacy-policy – blocked or unavailable (HTTP 403)
  5. https://drata.com/legal/privacy-notice – blocked or unavailable (HTTP 403)
  6. https://drata.com/trust/privacy – blocked or unavailable (HTTP 403)
  7. https://drata.com/datenschutz – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

Keep going