⚠️ Select your experience
The steps to download audit evidence depend on your interface version. Select a link to skip to the instructions for your version.
Customers who joined Drata on or after Feb 24, 2026 are automatically on the New Experience.
Instructions for the New Experience ⬇️
Use a Download-only audit when you plan to complete your audit outside of Drata, but still want to download control evidence and audit data from Drata.
This option lets you create an audit, select evidence samples yourself, and generate downloadable evidence packages—without inviting an auditor to work directly in Drata.
When to use a Download-only audit
Your auditor works outside of Drata
You need evidence packages for external audit tools or offline review
You want to control sample selection yourself
Prerequisites
You must have Admin or Information Security Lead permissions
Your framework and audit period must be defined before downloading evidence
Create a Download-only audit
Go to the Compliance > Audit page.
Select Create audit.
Choose Download only.
Download control evidence
Open the audit.
In Audit resources, select Download or Request evidence for Control evidence.
Download the generated
.zipfile.
The evidence package includes all control evidence, audit metadata and mappings, and an interactive evidence manifest.
Instructions for the Classic Experience ⬇️
Use the Download-Only Audit Experience if you plan to complete your audit outside of Drata but still want to access your control evidence and audit data through Audit Hub.
Prerequisite
You must have Administrator or Information Security Lead permissions.
Confirm that your framework and audit period are defined before creating your audit.
Step 1: Create a Download-Only Audit
Go to Audit Hub in Drata.
Select Create Audit.
Choose Download only when prompted.
Step 2: Download Control Evidence
Open your audit in Audit Hub.
Under Audit resources section, select Download or Request evidence for Control evidence.
Drata creates a single
.zipfile that includes all control evidence, audit metadata and mappings, and an interactive evidence manifest.
You'll receive a download link by email when your evidence package is ready.