Snapshot 244019

Document
Data processing addendum
URL
https://drata.com/data-processing-addendum
Fetched
HTTP status
200
Content type
text/html
Fetch mode
static
Size
301668 bytes
SHA-256 (raw)
4317b58aefe781061ed1edd6499e560b7905093eec81aa607329ea1826f1adf8
SHA-256 (normalized text)
a226d28af350b4b6c35fbed8b7aa7ee5739c730f6ed5d2563e9c2fc1d8be76f6

Normalized text

Scripts and page chrome removed; this is what change detection compares.

[PRODUCTS]
Agentic Trust Management PlatformBuild and prove trust with an integrated platform built on AI.
Enterprise GRCCentralize governance, controls, risk, and compliance.
Compliance AutomationGet compliant quickly and easily across frameworks.
Trust CenterShare your security posture faster with an always-on trust portal.
AI Questionnaire AssistanceSave time answering security questionnaires.
Third-Party Risk ManagementContinuously assess vendors to reduce third-party exposure.
AI GovernanceDiscover, monitor, and govern all your AI agents.
[CATEGORIES]
Automated GovernanceStreamline security tasks to unify governance across teams.
Integrated Risk ManagementManage internal and third-party risk in a singular platform.
Continuous ComplianceAutomate evidence collection and monitor controls for audit readiness.
Security AssuranceProve trust faster and in real time to shorten review cycles.
Drata AITransform GRC from a defensive necessity into a business driver.
[CAPABILITIES]
AI Governance
Controls and Evidence
Monitoring and Tests
Multi-Framework Support
Audit Hub
Internal Risk Management
Agentic TPRM Assessment
User Access Reviews
Enterprise Workspaces
Customer Trust Portal
Trust Measurement
[GO BEYOND]
The Drata Difference
Integrations
Open API
Drata MCP
What’s New
[BY SIZE]
StartupLaunch trust fast and prove security early.
GrowthAccelerate trust smoothly and scale as you grow.
EnterpriseCommand trust at scale with unified governance, risk, compliance, and assurance.
[BY FRAMEWORK]
SOC 2
ISO 27001
HIPAA
GDPR
FedRAMP
CMMC
ISO 42001
PCI DSS
HITRUST
NIST AI RMF
DORA
Custom Frameworks
[BY INDUSTRY]
Financial Services
Healthcare
Insurance
SaaS
[CUSTOMER LOVE]
Customer Stories
Wall of Love
Advocacy Program
Example Trust Centers
Customer Wins
[SUPPORT]
Customer Success
Drata Academy
Drata Help Center
SafeBase Help Center
[FEATURED CUSTOMERS STORIES]
Brex Modernizes GRC and Assurance with Drata
UiPath Scales Third-Party Risk Management with Drata
Okta Transforms Security Assurance with Drata
[CHANNEL PARTNERS]
Overview
Find a Channel Partner
Become a Channel Partner
[VC & PE Partners]
Overview
Join Our Investor Partner Program
[TECH PARTNERS]
Overview
Find a Tech Partner
Become a Tech Partner
[AUDIT ALLIANCE]
Overview
Find an Auditor
Join the Audit Alliance
Auditor Code of Ethics
[QUICK LINKS]
The Trusted Blog
When Trust Meets AI Podcast
Women in Trust
[RESOURCE CENTER]
Reports
Guides
Webinars
Data Sheets
[LEARN]
SOC 2 Collection
ISO 27001 Collection
HIPAA Collection
Compliance Collection
[FEATURED RESOURCES]
The CISO Guide to Continuous Compliance
Demo Days: See Drata in Action with Live Q&A
[COMPANY]
About Drata
News & Press
Security & Compliance
Contact Us
Events
[CAREERS]
Open Roles
Life at Drata
[FEATURED RESOURCES]
Best Practices for Implementing Agentic AI in GRC Workflows
Leveraging AI to Optimize GRC: From Reactive to Proactive
Get Started
Sign InContact Sales
This Data Processing Addendum (“DPA”) forms part of the Terms of Service - Subscription Agreement (the “Agreement”) entered into by and between Customer and Drata Inc., pursuant to which Customer has purchased a subscription to Drata’s software-as-a-service (“Services”, as described at www.drata.com).
The purpose of this DPA is to reflect the Parties’ agreement with regard to the Processing of Personal Data, in accordance with the requirements of Applicable Data Protection Law. All capitalized terms not defined herein shall have the meaning set forth in the Agreement or the DPA, as applicable.
In the course of providing the Services to Customer pursuant to the Agreement, Drata may Process Personal Data on behalf of Customer and the Parties agree to comply with the following provisions with respect to any Personal Data, each acting reasonably and in good faith.
Please follow the instructions below to first review and then electronically sign the DPA.
How to Execute This DPA
Review & Sign
To begin click here and complete the required fields and click on ‘Submit’. Please note that you are not signing anything at this stage, simply providing contact info to receive a copy of the DPA to review and execute.
You will then receive an email from ‘Drata Inc. via Docusign’ with a link to the DPA document for viewing and e-signature. If you do not receive an email, please check your spam folders.
If you are not the authorized signatory, you are able to ‘Assign to Someone Else’ in the ‘Other Options’ drop-down menu in the bottom right hand corner of the welcome window message.
If you are the authorized signatory then complete the required fields in the DPA and click ‘Finish’ to finalize the signature process.
Once complete(d), you will receive an email from ‘Drata Inc. via Docusign’ with a digital copy of the DPA signature packet.
Option to Download to Review Prior to Signing
You have the option to download the DPA for review prior to completing the execution process. Once in review, after clicking ‘Continue’ simply click on the ‘Download’ icon located on the upper right side of the DocuSign screen.
File Copy After Execution
Additional information about our privacy and information security practices can be found in Drata’s Trust Center, please visit: https://trust.drata.com/.
Should you have any questions, please contact privacy@drata.com.