Skip to main content

Manage Notifications for Required Approvals and Control Updates

Set up and manage notifications to keep control owners and approvers informed about required approvals and control changes.

⚠️ Select your experience

The steps depend on your interface version. Select a link to skip to the instructions for your version.

Customers who joined Drata on or after Feb 24, 2026 are automatically on the New Experience.


Instructions for the New Experience ⬇️

Overview

Notifications help control owners and approvers stay informed about required approval stages, evidence changes, and updates to their controls. Setting up notifications ensures reviews happen on time, approvals are not missed, and control readiness is maintained without manual follow-ups.

Notifications are tied to the required approvals lifecycle, so changes to a control—such as adding evidence or requesting changes—can trigger alerts to the appropriate users.

Prerequisites

  • Integrations: Microsoft Teams or Slack must be connected before related notifications can be configured

  • Permissions:

    • Only Administrators can configure Microsoft Teams or Slack notifications

    • Ensure your user role has read-only dis-enabled to update email notification preferences

Email Notifications

Goal: Receive notifications by email for required approval activity and control updates.

Set up email notifications

  1. Go to Settings page.

  2. Under the Personal header, select the Notifications page.

  3. Enable Allow notifications.

  4. Scroll down to configure more notification types you want to receive.

  5. Choose a delivery frequency (Daily or Weekly) where applicable.

Available email notifications for Controls

Notification Type

What it notifies

Evidence updates on controls

Notifies control owners when there are changes to control evidence.

Approval updates on controls

Control owners and approvers are notified when there are changes to the control approval status.

Status change for controls assigned to me

Receive summaries of assigned controls.

Internal note added to a control

Get notified when a new internal note is added to a control.


Microsoft Teams Notifications

Goal: Send notifications about required approvals and control updates to a Microsoft Teams channel or directly to personnel.

Set up Microsoft Teams notifications

  1. Go to Settings page.

  2. Under the Organization header, select the Notification rules page.

  3. Select Create notification rule.

  4. Select the Teams channel for notifications.

Important Notes:

ℹ️ Microsoft Teams now supports sending direct messages to personnel for the following notification types: Personnel with Pending Actions, Required Approvals, Control Evidence Updates, and Workflow Updates. When direct messaging is enabled, notifications are sent to both the destination channel and directly to the personnel.

⚠️ Direct messages are sent through the Drata App in Microsoft Teams—not to a user's personal chat. Ensure the Drata App is installed in Microsoft Teams before enabling this option. Learn more at Microsoft Teams integration guide.

⚠️ Microsoft Teams does not support sending notifications to private channels.


Slack Notifications

Goal: Send notifications about required approvals and control updates to Slack.

Set up Slack notifications

  1. Go to Settings page > Organization > Notification rules

  2. Select Create notification rule.

  3. Paste a slack channel or search and select one.

⚠️ Direct messages are sent through the Drata App in Slack—not to a user's personal chat. Ensure the Drata App is installed and added to any private channels before enabling this option. Learn more at Slack integration guide.


How notifications relate to required approvals

Notifications are closely tied to the required approvals workflow. For example:

  • Moving a control to Needs approval notifies approvers

  • Requesting changes notifies control owners

  • Adding evidence after approval may reset the approval stage and trigger new notifications

This ensures the right people are notified when action is required.


Instructions for the Classic Experience ⬇️

It is crucial for organizations to both maintain and determine control readiness. In Drata, you can streamline internal reviews and approvals for your controls, reducing complexity and minimizing the need for various tools.

Set up notifications to receive updates about required approvals and control changes, ensuring control owners stay informed promptly.

Prerequisite

  • Only Administrator roles can set up Microsoft Teams or Slack notifications. You must configure these notifications before setting up the required approval notifications.

    • To verify if you are an account admin, go to Company settings and then Notifications.

  • You must have write-access to update email notifications configurations.

Set up email notifications

Learn how to set up email notifications for required approvals and control updates in Drata. Ensure that your role has write-access permissions.

You can enable notifications for the following scenarios:

  • Notify approvers: When there are changes to required approvals.

  • Notify control owners: When there are changes to their controls.

  1. Access Notifications:

    • Select your user account, and then Settings.

    • Under My Settings, select Notifications.

  2. Enable Allow Notifications.

  3. There are several Notification Types you can enable.

    • Status updates for controls assigned to me: If you enable this option, you receive summaries of the controls assigned to you at the set frequency. You can adjust this frequency to receive notifications either daily or weekly.

    • Control approval notification assigned to me: Notifications for this type are triggered in the following scenarios.

      • Control owners are notified when:

        • The approver requests changes on the required approval.

        • The required approval review stage is updated to Approved.

        • Controls with Approved are updated to Prepare for Approvers due to new evidence.

        • Your control is approved.

      • Approvers are notified when:

        • A control needs approval.

        • Another approver has approved a control assigned to you.

    • Controls: New internal notes added: If you enable this option, you are notified when there are new internal notes.

    • Control updates: If you enable this option, control owners are notified of changes to their controls, such as when new evidence is added.

Note: Ensure that you have write-access to the Controls page if you would like to act on and manage your required approvals.

Set Up Microsoft Teams Notification

Note: Only admins can enable this feature and ensure that you have connected Microsoft Teams to Drata. If you did not connect to Microsoft Teams, refer to Drata Microsoft Teams App Support documentation.

  1. Select your user account, and then Settings.

  2. Under Company Settings, select Notifications.

  3. Select Microsoft team.

  4. Select + New Notification.

  5. Select the desired notification scenario.

    • Select Required approvals to notify any updates to control approvals

    • Select Control evidence updates to notify changes in controls such as whenever there's evidence added to controls.

  6. Select the Microsoft Team channel you would like to send these notifications to.

    • Microsoft Team notifications are sent to Microsoft Teams channels and cannot be directly sent to personnel.

Set Up Slack Notifications

  1. Select your user account, and then Settings.

  2. Under Company Settings, select Notifications.

  3. Select Slack.

  4. Select + New Notification.

  5. Select the desired notification scenario.

    • Select Required approvals to notify any updates to control approvals

    • Select Control evidence updates to notify changes in controls, such as when evidence is added. Notifications can only be sent to Slack channels.

  6. Select the Slack channels or notify personnel.

    • Selecting a Slack channel sends the required approval notifications to a specific Slack channel.

    • Selecting Notify Personnel sends the notification directly to the control owner or approvers.

Did this answer your question?