Product Updates

Drata

Custom Fields for Framework Requirements

Custom Fields are now available directly on framework requirements (both Drata out-of-the-box frameworks and custom frameworks), so you can attach rich metadata—like implementation statements, ownership, or scoring—right where the work happens. Click here to learn more!

May 1, 2026

Drata

Customizing Security Review Titles

You can now give Vendor Security Reviews names that match how your team actually talks about them (for example, “Q4 Re-assessment – High Risk” or “SOC 2 Type II – 2025”), instead of relying only on auto-generated titles. Click here to learn more!

May 1, 2026

Drata

New Connection Scoping for AWS, Azure, and GCP

You can now more precisely scope your AWS, Azure, and GCP connections so Drata only monitors the accounts, subscriptions, and projects that matter. Click here to learn more!

May 1, 2026

Drata

Bulk Import Custom Tasks (New Experience)

Bulk import for Custom Tasks lets teams create large batches of tasks in a single, spreadsheet-style flow in the New Drata Experience, instead of creating each task one by one. Click here to learn more.

May 1, 2026

Drata

Drata supports ISO/IEC 27701:2025

Drata now supports ISO/IEC 27701:2025! ISO/IEC 27701:2025 is the latest version of the global standard for building a Privacy Information Management System (PIMS), extending ISO 27001 to define clear responsibilities for PII controllers and processors while supporting compliance efforts under regulations such as GDPR and CCPA. The 2025 update clarifies privacy governance, aligns with ISO’s harmonized structure and ISO 27001:2022, and strengthens accountability across the full PII lifecycle. Click here to learn more!

April 17, 2026

Drata

Unified Login Service Update

We are centralizing the Drata login experience at auth.drata.com to provide a single and secure entry point. Click here to learn more!

April 11, 2026

Drata

Enhanced Dashboard: SafeBase Support for North American MSSPs

North American MSSPs can now manage SafeBase tenants directly from the Drata dashboard. Click here to learn more!

April 11, 2026

Drata

Custom Pre-Audit Packages (Audit Hub)

We’ve updated how pre-audit packages work to give you more control. For every audit, you can now decide whether you want a pre-audit package at all and exactly which information is included in it. Click here to learn more!

April 3, 2026

Drata

Terminology Update: Standardized Risk Labels for VRM

We’ve updated our Vendor Risk Management (VRM) labels to align with standard industry terminology. You’ll now see Inherent Risk and Residual Risk throughout the platform, providing instant clarity without the need for extra explanation. Click here to learn more!

April 3, 2026

Drata

CCPA 2026 Regulatory Updates

Drata automates the most complex aspects of CCPA compliance—from control monitoring to vendor reviews. It operationalizes CCPA by streamlining control monitoring, evidence collection, and audit-ready documentation, while also supporting risk assessments directly within the platform. Click here to learn more!

March 20, 2026