Product Updates

Drata

Control Action Panel

We’ve introduced a new Control Action Panel that helps you quickly identify and resolve items impacting a control’s readiness — all without leaving the Control page. This feature is available in the New Drata Experience. Click here to learn more!

February 28, 2026

Drata

TPRM Enhancements

We’ve introduced several improvements to Third-Party Risk Management (TPRM) to provide greater flexibility, visibility, and control across vendor workflows. This feature is available in the New Drata Experience. Click here to learn more!

February 28, 2026

Drata

Customer-Facing Evidence Viewer in Audit Hub

Evidence can now be viewed directly inside Drata using a built-in Document Viewer. This feature is available in the New Drata Experience. Click here to learn more!

February 28, 2026

Drata

Bulk CSV Import for Controls, Risks, Personnel Trainings, and Background Checks 

You can now bulk import Controls, Risks, Personnel Trainings, and Background Checks directly into Drata. This feature is available in the New Drata Experience. Click here to learn more!

February 28, 2026

Drata

New Integration: Upwind for Vulnerability Scanning

Drata now integrates with Upwind, a leading vulnerability scanning provider for enterprise environments. Click here to learn more!

February 13, 2026

Drata

Bitbucket (Version Control Integration): API Endpoint Updates

We’ve updated the Bitbucket integration to align with upcoming changes to Atlassian’s Bitbucket Cloud REST APIs. Click here to learn more!

February 6, 2026

Drata

New Integration: Orca Security for Vulnerability Scanning

Drata now integrates with Orca Security, a leading vulnerability scanning provider for enterprise environments. Click here to learn more!

January 30, 2026

Drata

Group Scoping Now Required for Identity Provider (IdP) Connections

Group scoping is now required when setting up the following Identity Provider (IdP) connections: Microsoft 365, Microsoft 365 GCC High, Okta, and Google. Click here to learn more!

January 3, 2026

Drata

Microsoft 365 User Identity Mapping Selection (UPN or Email)

We have updated both the Microsoft 365 Identity Provider and the Microsoft 365 GCC High Identity Provider connection drawers to give customers explicit control over which field is used for user identity mapping. Instead of always defaulting to the User Principal Name (UPN), customers can now choose between Primary Email or UPN to map personnel identities. Click here to learn more!

December 20, 2025

Drata

ISO/IEC 27018:2025 Now Supported

Drata enables you to adopt ISO 27018:2025 immediately by delivering the updated control set, pre‑mapped to other frameworks and powered by continuous monitoring—so your team can protect PII, demonstrate compliance, and scale trust‑worthy cloud services faster. Click here to learn more!

December 20, 2025