⚠️ Select your experience
The steps to manage custom fields depend on your interface version. Select a link to skip to the instructions for your version.
Customers who joined Drata on or after Feb 24, 2026, are automatically on the New Experience.
Instructions for the New Experience
Follow these steps if you are using the New Experience UI.
The goal of custom fields is to support enterprise-scale compliance by enabling consistent data collection and reporting across your risks, controls, vendors, and personnel.
Prerequisites
Role: You must have an Drata Admin role.
Plan: Available on Advanced and Enterprise plans.
Total field limit (500): You can create a total of 500 custom fields. Every field you create counts toward this limit, including fields that are hidden.
Placement limit (50): By default, you can assign placements to 50 of your custom fields.
What is a placement? A placement is a specific area in the Drata interface where the field is visible.
Why create a field without a placement? You might create a field without a placement if you only intend to use it for API integrations or backend reporting rather than manual data entry in the UI.
Create a custom field
Where to go: Go to Settings > Fields and formulas.
Select Create field.
Enter and complete the form to create the custom field.
1. Details: Enter a unique Name and a Description to define the field's purpose.
2. Placement: Select the Location (the page) and the Section (the specific area on that page) where the field should appear.
3. Field: Choose how the data should be entered.
Drop-downs in the New Experience support up to 100 options.
If you mark a field as Required, users must provide a value before they can save any updates to items associated with that field.
Select Save.
After saving, the field type and currency code cannot be changed. This ensures your historical data remains consistent and accurate.
Edit, delete, or download the data from your custom fields
Where to find it: Go to Settings > Fields and formulas and select a field from the list.
Edit the field:
You can edit the details, placement, or field options by selecting the edit button on each.
Delete a field:
Select Delete field. This permanently removes the field and all stored data across your account. This action cannot be undone.
Download data:
Navigate to the page where the field is placed (such as the All risks page) and select Download CSV. Custom fields appear as their own columns in the spreadsheet.
Full Download: Exports all objects in that category.
Filtered View: Exports only the objects currently visible based on your active filters and selections.Instructions for the Classic Experience
Instructions for the Classic Experience
Follow these steps if you are using the Classic Experience UI.
Goal: Customize the data captured in your Drata instance to ensure your compliance reports include the specific details required by your auditors.
Prerequisites
Role: You must have a Drata Admin role.
Plan: This feature is available for Advanced and Enterprise plans.
Total field limit (500): You can create up to 500 custom fields. Every field counts toward this total, even if you have "hidden" it from the user interface.
Placement limit (50): You are limited to 50 placements by default.
What is a placement? A placement is the connection between a custom field and a specific page in Drata. Without a placement, the field exists in the system but will not be visible to your team for manual data entry.
Create a custom field
Where to find it: Select your User Account (bottom left) > Settings > Company Settings > Custom Fields and Formulas.
You can create up to 500 custom fields and 50 of the custom fields can have a placement. Each custom field created, whether hidden or added in multiple placements, is counted as one and goes toward the total amount of custom fields.
Go to the Settings page and select Custom Fields and Formulas under Company Settings.
Select Create custom field at the top right corner.
Enter the information for each field under Details.
Name: Enter the unique name.
Description: Enter a description.
Type: Select the type of input.
Short answer: The input must be less than 191 characters.
Dropdown: Create at least 2 options and have a maximum of 30 options.
💡 New Experience Note: Only in the New Experience, you can add up to 100 dropdown options. If you are on the classic experience, you can only add up to 30 options.
Number: The input must be less than
1,000,000,000and can be negative numbers.Currency: Select the desired currency type. The input must be less than
999,999,999,999,999.99, and can be a negative amount.Long answer: The input text must not exceed 30,000 characters.
URL: The input text must be a valid URL format.
Make this required field: Check the box to make the custom field a requirement. Uncheck the box to make the custom field optional.
For previous risks, if the custom field is required, when you edit the risks, you are required to enter the information for the required field.
Hide this field: Check the box to hide the custom field or uncheck the box to display the field. Hiding a field does not remove your data. The data from the field is restored when re-displaying the field.
Enter where to display the field under Placements by selecting the Add button next to Placements. You can always add the placement for a field at a later time. If you do not add a placement, the field will not be displayed.
Location: Select where you would like the custom field to be displayed in Drata.
Section: Enter the section that the custom field is displayed in. The custom field will be displayed at the bottom of that section.
Select Save to create your custom field.
Note: After creating the field, you cannot edit the input type (such as changing short answer to a number input type) or the currency code.
A success toast notifies you that the custom field was successfully made. You can also view the event in the Event Tracking page.
Example: Create custom risk status field
You can create a custom field to capture the risk status.
Go to the Settings page and select Custom Fields under Company Settings.
Select Create custom field at the top right corner.
Enter the information for each field under Details.
Name: Risk status
Description: [skipped. This is an optional field.]
Type: Dropdown
Open
In progress
Closed
Make this required field: [Checked]
Hide this field: [Not checked]
Location: Risks
Section: Details
Since the custom field has a placement, you can have 49 other custom fields with placements.
The following image showcases a risk drawer with the risk status custom field at the bottom of the details section.
Example: Create custom currency risk field
You can also create a custom field to capture the currency risks.
Go to the Settings page and select Custom Fields under Company Settings.
Select Create custom field at the top right corner.
Enter the information for each field under Details.
Name: Currency risks
Description: [skipped. This is an optional field.]
Type: Currency
Currency Type: USD
Make this required field: [Not Checked]
Hide this field: [Not checked]
Location: Risks
Section: Assessment
If you created the custom currency risk and risk status field with placements, you can create 48 other custom fields with placements.
The following image showcases a risk drawer with the Currency risk within the Assessment section, but before the Risk score (which is also a custom field). The Risk score is displayed after the Currency risk because it was created after the Currency risk was created.
Edit or view your custom field
Go to the Settings page and then the Custom Fields page to view the list of custom fields.
Select the custom field you would like to edit. You can update the drop down options, make the field optional or required, hide the field, or update the section to display the field.
Hide or display a dropdown option
Check mark the Hide option to hide the dropdown option. Un-check mark the Hide option to display the dropdown option.
If there are only two options, you cannot hide the options. You can have up to 20 options, regardless of whether the option is hidden or not.
Edit a dropdown field
Rename the desired dropdown option and save. The dropdown option is updated and renamed for all previous risks.
Delete a custom field
Deleting a custom field also deletes the related data. This action cannot be undone.
Select the custom field you would like to delete on the Custom Fields page from the Settings page.
Select the Delete Field to delete your custom field.
Confirm that you would like to delete the custom field on the double confirmation modal.
Download data from a custom field
A custom field must have a placement to download the data. Once a custom field has a placement, the custom field is added to the downloadable CSV file.
Example: Download data from a custom field
For example, the risk status custom field has the placement.
Go to the Risks Assessment or Risk Management page because the location for the custom field is risk.
Select the Download button and one of the options under DOWNLOAD CSV.
The downloaded CSV file contains the data for the custom field.