Drata supports bulk import of evidence for Security, HIPAA, and AI Awareness personnel training. Bulk import allows you to upload training completion records for multiple personnel at once using a file. Each record is matched to a user by email address and recorded on that individual’s Personnel profile.
How bulk import works
During import, you:
Upload a file.
Map your file’s fields to Drata fields.
Resolve any validation errors.
Submit the import.
Drata validates each row before allowing submission. If validation fails, the row must be corrected before you can complete the import.
Prerequisites
The applicable framework must be enabled:
HIPAA training requires the HIPAA framework.
AI Awareness training requires the applicable AI framework.
If your account uses multiple workspaces, at least one workspace must have the framework enabled in Settings.
Personnel must already exist in Drata as current or former employees or contractors.
Required Drata roles: Admin, Workspace Manager
Future hire or out-of-scope email addresses are not supported.
Access bulk import
Go to Governance → Personnel.
In the Personnel table, select the More options menu (⋯).
Select Bulk import.
Select Trainings.
Select the training type:
Security
HIPAA (visible only if the HIPAA framework is enabled)
AI Awareness (visible only if the applicable AI framework is enabled)
After selecting a training type, continue with the upload workflow to import your training assignments.
Import training evidence data
You can import training evidence by uploading a file or by manually mapping fields during the workflow.
If you upload a file, prepare your file in advance and ensure it meets the field requirements listed in the next section. Files that do not meet these requirements will fail validation and must be corrected before submission.
Field requirements and validation rules
The following fields must be included and mapped correctly in your import file.
Field name | Required | Validation rules |
Personnel Email | Yes | Must be a valid email address belonging to a current or former employee or contractor in Drata. Out-of-scope and future hire email addresses are not supported. |
Completion Date | Yes | Must be today’s date or earlier. Future dates are not allowed. |
Evidence | Yes | Evidence files must be uploaded in the Upload evidence files section. Supported formats: |
Step 1: Upload your file and map your fields
In the Training list section, select Upload a file.
Choose one of the following:
Upload a file or
Manually map to enter and map data directly in the interface.
If you upload a file:
Upload your file.
Match your Incoming fields to Drata’s Destination fields.
Fields marked with an asterisk (*) in the Destination fields column are required and must be mapped to avoid validation errors.
Use the preview to review your mapped data.
Select Continue.
Step 2: (Optional) Map field values
If your file contains enumerated values (for example, predefined dropdown values), review and map them before continuing.
Under Incoming Values → Destination Values, review any mismatched values.
Update mappings as needed to align with Drata’s accepted values.
When all values are correctly mapped, select Submit.
You can map destination values to empty cells if needed. This may help prevent validation errors for required fields in the next step.
Step 3: Validate and submit the data
After mapping fields and values, Drata validates each row against the required field rules.
The number of invalid cells appears in the spreadsheet.
Cells that fail validation appear in red.
Warning or informational cells appear in yellow.
Hover over a column header to view its validation rules.
The Submit button becomes available only after all invalid (red) cells are resolved.
When all validation errors are resolved, select Submit to complete the import.