Question 1

Does Drata have SOC 2 Type II?

Accepted Answer

Yes. Drata holds SOC 2 Type II, SOC 3, ISO 27001, ISO 27017, ISO 27018, ISO 42001, HIPAA, FedRAMP, GDPR, CCPA, CSA STAR, NIST certifications. You can view their trust center at trust.drata.com for full security and compliance documentation.

Question 2

Where can I find Drata's security documentation?

Accepted Answer

Drata publishes their trust center on SafeBase at trust.drata.com. It includes security policies, compliance certifications (SOC 2 Type II, SOC 3, ISO 27001, ISO 27017, ISO 27018, ISO 42001, HIPAA, FedRAMP, GDPR, CCPA, CSA STAR, NIST), and other documentation.

Compliance & Certifications

More on SafeBase