⚠️ Select your experience
The steps to map control information and evidence across Workspaces depend on your interface version. Select a link to skip to the instructions for your version.
Customers who joined Drata on or after Feb 24, 2026 are automatically on the New Experience.
Instructions for the New Experience ⬇️
What mapping controls across Workspaces does
Mapping controls across Workspaces lets you share control information, policies, and evidence for the same control across multiple Workspaces.
This is useful when:
You manage multiple products or business units
The same control applies across Workspaces
You want to avoid duplicating evidence and policies
When controls are mapped, updates made in one place apply everywhere that control is mapped.
What can be mapped
Only the following control sections can be mapped across Workspaces:
Control info
Policies
Evidences
Important: Miscellaneous Evidence cannot be mapped across Workspaces.
Prerequisites
Workspaces must be enabled.
You must have one of the following roles:
Admin
Workspace Manager
Control Manager
Information Security Lead
Workspace Manager limitations
Workspace Managers have additional restrictions:
Workspace Managers assigned to only one Workspace cannot map controls across Workspaces.
Workspace Managers can map or unmap only the Workspaces they’re assigned to.
How control mapping works
Controls can be mapped only if the same control code exists in multiple Workspaces.
Mapping creates a control group. Within that group, you can:
Share control info
Map policies
Map evidence
Unmap a Workspace later to make the control independent again
Map controls across Workspaces
Go to the Controls page.
Select a control that exists in multiple Workspaces.
Add or remove Workspaces in the Mapped Workspaces section.
Result: The control info is now mapped across the selected Workspaces.
Policies can only be mapped across Workspaces after the control itself has been mapped (grouped).
Map evidence across multiple workspaces
Use this workflow to ensure a single piece of evidence satisfies controls in multiple workspaces simultaneously.
Go to the Evidence page in Workspace 1 and upload your artifact.
Navigate to the Controls page and select the specific control in Workspace 1.
Verify that the control is associated with multiple workspaces in the Linked Workspaces section.
Select the Evidence tab and click Map Evidence.
Choose the Evidence Library (recommended) option.
Select the desired evidence in the modal, click Next, and select the additional workspaces to link.
Result: The evidence is shared and reusable across all mapped Workspaces.
How shared evidence behaves
When evidence is mapped across Workspaces:
It can be reused indefinitely in those Workspaces
Updates apply to all mapped controls
It behaves similarly to shared policies
Important: Updates to shared evidence may impact the readiness of all controls mapped to it.
Update evidence mapped across Workspaces
You can update mapped evidence either:
From a control, or
Directly from the Evidence Library
Update from a control
Go to the Controls page.
Select a control that exists in multiple Workspaces.
Expand Evidence Library under Control evidence.
Select the Update icon.
Save your changes.
New Monitoring & Controls experience (Early Access)
If you’re using the new Monitoring & Controls experience:
The Update icon isn’t available on the Control page.
To update evidence manually:
Open the Control page.
Select the Evidence tab.
Select the evidence.
Choose Update dates.
Update the Creation or Renewal date.
Unmap a Workspace from a control
At any time, you can remove a Workspace from a control group.
When you unmap a Workspace:
The control becomes its own independent instance
Previously shared updates no longer apply
Summary
Mapping controls across Workspaces helps you:
Reduce duplication
Maintain consistency
Update evidence and policies once instead of multiple times
This feature is designed for teams managing shared compliance requirements across multiple Workspaces.
Instructions for the Classic Experience ⬇️
The ability to link controls information and evidence across Workspaces is integral for those managing compliance across Workspaces. This feature allows for applicable users to link control content (such as info), evidence, and policies across workspaces for the same control, which saves copious amounts of time when managing and maintaining controls for multiple business units, product lines, and the like.
There are a few limitations:
Workspace Managers that have only 1 assigned Workspace cannot link a control to another Workspace
Workspace Managers cannot link or unlink Workspaces that they are not assigned to.
Miscellaneous Evidence is not included in workflow.
Prerequisites
Workspaces must be enabled.
You must have an Admin, Workspace Manager, Control Manager, or Information security lead role.
Workspace Managers have some restrictions in certain use cases.
Link control info and evidences across workspaces
As long as a control code exists in multiple workspaces, the control’s info section can be linked across workspaces, creating a linked group. Based on this linked group a user can also link policies and evidence from the Evidence Library across Workspaces with just a few clicks.
Additionally, the user can unlink a Workspace from the grouped controls, making the control its own instance once again.
Controls that have the same control code can be linked across workspaces.
For example, Drata Control DCF-1 in multiple workspaces.
For example, Custom Control ABC-10 in multiple workspaces.
Only the following sections of a control can be linked across Workspaces:
Control Info
Policies
Evidence from Evidence Library
When Evidence is shared across workspaces, that evidence can then be used indefinitely within those shared workspaces and acts very similar to Drata policies. This means that updates applied to a shared piece of evidence will apply to any linked control across the platform.
Link controls
Note: When linking evidence to a control, you can only link existing evidence already within Drata. You cannot add or create a new evidence during the linking process. Ensure the evidence you need has been added beforehand.
Go to the Controls page and select a control that exists in multiple workspaces.
A control drawer is displayed. Within the CONTROL INFO section, there is a field for Linked workspaces. Select Manage button.
Enter or remove workspaces and save.
Link a policy
Once you’ve created a control group within control info, you can link a policy to the control within those workspaces as well.
Go to the Controls page and select a control that exists in multiple workspaces.
A control drawer is displayed. Within the CONTROL EVIDENCE section, select Add for Link policies within Drata.
Select a policy and continue.
Select the desired workspaces and save. You can also remove or add workspaces here.
Link evidence from Evidence Library
Once you’ve created a control group within Control info, you can link a piece of evidence from the Evidence Library to the control within those workspaces as well. This workflow is similar to linking a policy.
Go to the Controls page and select a control that exists in multiple workspaces.
A control drawer is displayed. Within the CONTROL EVIDENCE section, select Add for Evidence Library.
Select the evidences and continue.
Select the desired workspaces and save. You can also remove or add workspaces here.
Update evidence that is linked across workspaces
Once you've linked evidence to a control across workspaces, you can update it either within the control or directly from the Evidence Library page. Any updates will automatically apply to all controls linked to that evidence.
Go to the Controls page and select a control that exists in multiple workspaces.
A control drawer is displayed. Within the CONTROL EVIDENCE section, expand Evidence Library.
Select the update icon (
) to update the evidence.
Once evidence is linked to a control in any workspace, it can be mapped to any control within that workspace. Any updates to this evidence may impact the readiness of all mapped controls across the platform.
If you’re using the new Monitoring & Controls experience (Early Access):
The Update icon is not available directly from the Control page.
To manually update evidence:











