Product Updates

Drata

Drata supports ISO/IEC 27701:2025

Drata now supports ISO/IEC 27701:2025! ISO/IEC 27701:2025 is the latest version of the global standard for building a Privacy Information Management System (PIMS), extending ISO 27001 to define clear responsibilities for PII controllers and processors while supporting compliance efforts under regulations such as GDPR and CCPA. The 2025 update clarifies privacy governance, aligns with ISO’s harmonized structure and ISO 27001:2022, and strengthens accountability across the full PII lifecycle. Click here to learn more!

April 17, 2026

SafeBase

Evidence Library Sync

Evidence Library Sync is now generally available in North America, enabling joint Drata + SafeBase customers to automatically keep their compliance evidence in SafeBase’s Trust Center and AIQA up to date. Click here to learn more!

April 17, 2026

SafeBase

Knowledge Base Update: AI-Powered Potential Issues

We have introduced an automated detection and remediation system for Knowledge Base (KB) maintenance. This feature uses AI to identify outdated, duplicate, or conflicting entries that reduces the quality of AI Questionnaire Assistance and Trust Center search results. Click here to learn more!

April 11, 2026

Drata

Unified Login Service Update

We are centralizing the Drata login experience at auth.drata.com to provide a single and secure entry point. Click here to learn more!

April 11, 2026

Drata

Enhanced Dashboard: SafeBase Support for North American MSSPs

North American MSSPs can now manage SafeBase tenants directly from the Drata dashboard. Click here to learn more!

April 11, 2026

Drata

Custom Pre-Audit Packages (Audit Hub)

We’ve updated how pre-audit packages work to give you more control. For every audit, you can now decide whether you want a pre-audit package at all and exactly which information is included in it. Click here to learn more!

April 3, 2026

Drata

Terminology Update: Standardized Risk Labels for VRM

We’ve updated our Vendor Risk Management (VRM) labels to align with standard industry terminology. You’ll now see Inherent Risk and Residual Risk throughout the platform, providing instant clarity without the need for extra explanation. Click here to learn more!

April 3, 2026

Test Library – Multi‑Provider Support for Imported Tests

Imported Test Library tests now support multiple providers. Expanded coverage includes AWS accounts and Organizational Units, as well as Azure, Azure GCC High, Management Groups, and Organizational Units, with tests automatically running across configurations without manual setup. Click here to learn more!

March 20, 2026

Drata

CCPA 2026 Regulatory Updates

Drata automates the most complex aspects of CCPA compliance—from control monitoring to vendor reviews. It operationalizes CCPA by streamlining control monitoring, evidence collection, and audit-ready documentation, while also supporting risk assessments directly within the platform. Click here to learn more!

March 20, 2026

SafeBase

SafeBase Chrome Extension – Portal‑Agnostic Parsing

Portal-Agnostic Parsing unlocks support for all previously unsupported TPRM portals, enabling AI-assisted questionnaire completion regardless of portal design or format. It works by extracting questions directly from the HTML in the browser. It will extract only what is visible; however the customer has the ability to navigate through to subsequent pages and sections in the questionnaire and click to parse all questions. Click here to learn more!

March 20, 2026