Overview
Drata uses two primary legal agreements to govern customer relationships: the Terms of Service (DCF-63) and the Master Service Agreement (DCF-66). While both define the rights and obligations between Drata and its customers, the Terms of Service apply by default unless a separate Master Service Agreement is fully executed.
Key Concepts or Components
Aspect | Terms of Service (DCF-63) | Master Service Agreement (DCF-66) |
Purpose | Serves as Drata’s baseline legal agreement for all users. | Provides negotiated contractual terms for customers that require custom legal, security, or compliance provisions beyond the standard Terms of Service. |
Applicability | Required before accessing the Drata platform. | Used in place of the Terms of Service once executed; however, certain public ToS terms (such as platform rules or acceptable use requirements) may still apply unless explicitly overridden. |
Characteristics |
|
|
Use Cases / Best Practices
Understanding which agreement applies to your organization helps ensure clarity when evaluating contractual obligations:
Small and Mid-Sized Businesses: Most customers onboard using the standard Terms of Service (DCF-63) with no need for negotiation.
Enterprise Customers: Organizations with formal procurement processes, industry-specific requirements, or custom contractual needs often negotiate a Master Service Agreement (DCF-66).
Hierarchy of Terms: If both agreements exist, the MSA (DCF-66) governs in the event of any conflicting terms; the Terms of Service continue to apply only where the MSA is silent.