Some organizations already manage policies, distribution, and employee acknowledgment in BambooHR. This workflow lets you:

Keep policy creation and acknowledgment in BambooHR
Avoid collecting acknowledgments in Drata
Use Drata to map policies to controls and sync signed evidence for audits

If BambooHR is the source of truth for policy content and acknowledgments, Drata can import the policy file, maps it to controls, and syncs acknowledgment evidence daily.

How policy management works with BambooHR

When you use BambooHR as your policy manager:

Policies are created and updated in BambooHR
Acknowledgment happens only in BambooHR
Drata does not send acknowledgment prompts in My Drata
Approval workflows in Drata are bypassed
Imported policies are published immediately in Drata
Drata runs a daily sync to collect signed acknowledgment evidence

Prerequisites

BambooHR is connected to Drata.
You have Admin permissions in both Drata and BambooHR.
Policies must be created in BambooHR first; you cannot create policies in Drata and sync them back to BambooHR.
The files uploaded to BambooHR must have one file extension. Files with multiple extensions will fail to import.
Employees acknowledge policies in BambooHR, not in Drata. Employees do not receive acknowledgment tasks in My Drata, even if the policy is assigned to them.
BambooHR does not support draft or approval states. Every policy imported from BambooHR is published immediately in Drata.

Import a policy from BambooHR

Only the policy owner can import or sync files from BambooHR.

Open Governance → Policies.
Select Import policy.
Enter the policy details:
- Policy name
- Policy owner
- Personnel groups
Confirm your selection.

The policy is published immediately in Drata as Version 1 (new policy) or the next version (existing policy update). Drata skips drafts, approvals, and tiered workflows. The policy is available for control mapping immediately

How acknowledgment data syncs

Drata runs a daily sync with BambooHR to collect acknowledgment evidence. When an employee signs a BambooHR policy:

The signed file is saved to the employee’s Signed Documents folder in BambooHR
Drata pulls acknowledgment evidence only from this folder

Replace Drata templates with a BambooHR policy

Some BambooHR documents (such as a Company Handbook) may satisfy multiple policy requirements. In these cases, replace all applicable Drata policy templates with the single imported BambooHR policy to avoid duplicate coverage.

Open Governance → Policies.
Select the BambooHR policy that will replace Drata templates.
Select Edit in the details section.
For Should this policy replace any Drata default policies?, select Yes.
Select all applicable policy templates the BambooHR policy replaces. Examples include:
- Acceptable Use Policy
- Code of Conduct
- Information Security Policy
Save your changes.