💡 Still using the classic Drata experience? Refer to Manually export evidence data from Drata without using the API for the original UI.
This article explains the available methods for manually exporting evidence and when to use each one.
Methods to Export Evidence Data
1. Download Evidence from the Evidence Library
The Evidence Library is a centralized repository for evidence files that have been uploaded or generated and linked to controls.
To download evidence from the Evidence Library:
Go to Compliance > Evidence.
Select the evidence item you need.
In the Current artifact section, select the ellipse and then download.
When to use this method:
Best for downloading specific, known evidence items
Files must be downloaded individually, which may be time-consuming for large volumes
2. Download Evidence Linked to a Control
Evidence is often attached directly to individual controls.
To download evidence from a control:
Go to Controls.
Select a control.
Open the Evidence tab (available to users opted into Early Access).
Select the Download near the top-right corner of the evidence table.
When the download is ready, a notification appears in the bottom-right corner.
When to use this method:
Useful for reviewing or exporting evidence tied to a small number of controls
Not efficient for exporting evidence across many controls
3. Download Raw Evidence from Events
Some evidence is generated through system events and stored in Event Tracking.
To download event-based evidence:
Go to Events.
Select an event to open its details.
Choose one of the following options:
Raw Evidence and Event Details (.pdf)
Raw result (.txt)
When to use this method:
Best for investigating or exporting individual event records
Not intended for broad or bulk evidence collection
4. Collect Evidence by Date Range Using Audit Hub
The Audit Hub can be used to gather a consolidated set of evidence for a defined audit period. While this is not a full export of all evidence, it provides a centralized package of evidence relevant to a specific timeframe.
To use the Audit Hub:
Go to Compliance > Audit
Select an audit.
Select the ellipse > Pre-Audit package > Request package.
The Pre-Audit package includes evidence associated with the audit and date range, primarily sourced from the Evidence Library and linked controls. It may not include all evidence types stored elsewhere in Drata.