⚠️ Select your experience
The steps to manage your tasks depend on your interface version. Select a link to skip to the instructions for your version.
Customers who joined Drata on or after Feb 24, 2026 are automatically on the New Experience.
Instructions for the New Experience ⬇️
The Tasks page helps you track and manage work that supports audit readiness and day-to-day compliance workflows, including:
Policy renewals
Control approvals
Evidence reviews
Vendor management
Risk-related remediation
In the New Drata Experience, Tasks are designed to reduce workflow friction by keeping actions consistent and easy to complete across modules.
Tasks timeline and organization
The Tasks page displays a monthly timeline of tasks grouped by month and type.
Overdue tasks are highlighted for visibility
Select a month to view detailed task lists
Use filters to organize tasks by owner, type, or timeframe
This consistent task surface supports enterprise-scale programs by helping teams prioritize work across large datasets and multiple stakeholders.
How tasks are created
Tasks in Drata are created in two ways:
Automated tasks → Created by Drata when compliance events occur
Custom tasks → Created manually by users
If a task is not completed by its due date, it is marked as Past due until resolved.
Automated tasks
Automated tasks are generated by Drata to support predictable compliance workflows. Users cannot create these manually.
Common automated task types include:
Policy renewals
Assigned to the policy owner to ensure policies are reviewed on schedule.Control approvals
Assigned when a control requires approval as part of audit readiness.Evidence tasks
Assigned when evidence reaches an expiration or review date.Vendor reviews
Assigned when a vendor assessment or update is due. In some cases, vendor tasks may not have an assigned owner.
Custom tasks
Custom tasks are created manually to support workflows specific to your organization. When creating a custom task, you define:
Task owner
Due date
Recurrence (optional)
Examples include:
General tasks: Internal audits, training assignments, or compliance review meetings.
Risk tasks: Remediation actions mapped directly to risks.
Control tasks: Follow-up actions linked to specific controls.
Mapped tasks (in-context workflows)
Mapped tasks are custom tasks linked directly to a risk or control, improving traceability and reducing navigation backtracking.
Risk tasks
Linked to risks and reviewed from the Risk Management experience. Only users with the Risk Manager role can manage these tasks.Control tasks
Linked to controls and reviewed directly from the Controls experience.
You can create mapped tasks in two ways:
From the Tasks page, map the task during creation
From the Risk Management or Controls detail page, create a task in context
Create, edit, or delete custom tasks
To create a custom task:
Go to the Tasks page
Select Create task
Enter a title and description
Assign an owner
Set a due date
(Optional) Enable recurrence and configure frequency
For existing tasks, you can:
Update task details, owner, or due date
Change recurrence settings
Map tasks to risks or controls
Delete tasks that are no longer needed
Complete tasks
To complete a task:
Go to the Tasks page
Expand the task to view details
Completion actions vary depending on task type:
If a checkmark appears, select it to mark the task complete
If a Review button appears, select it to open the related object detail page in Drata
Instructions for the Classic Experience ⬇️
The Tasks page helps you track, create, and manage tasks that support your compliance posture. Use it to stay on schedule for policy renewals, control approvals, evidence reviews, vendor management, and risk-related activities.
Tasks page overview
The Tasks page shows a monthly timeline of tasks grouped by month and type.
Overdue tasks are highlighted in red.
Select any month to view detailed tasks.
Use filters to organize tasks by type, owner, or timeframe.
Tasks in Drata are created in two ways:
Automated tasks → Created by Drata when compliance events occur.
Custom tasks → Created manually by users.
If a task isn't completed on time, it is marked as Past due until completed.
Automated tasks
Automated tasks are created by Drata. You can't create these manually.
Policy renewals: Assigned to the policy owner to remind a owner of the renewal dates.
Control approvals: Assigned to control approvers when a control requires approval.
Evidence: Assigned to the evidence owner when evidence reaches its expiration or review date.
Vendors: Assigned to the vendor owner when a vendor review or update is due. In some cases, a vendor task may not have an assigned owner.
Custom tasks
Custom tasks are created manually by users. When creating a custom task, you choose the owner, due date, and recurrence.
Examples include:
General: General custom tasks you create, such as scheduling an internal audit, assigning training, or tracking a compliance review meeting.
Risks: Tasks you create and map to risks.
Controls: Tasks you create and map to controls.
Mapped tasks
Mapped tasks are custom tasks linked directly to a risk or a control.
Risk tasks: Created when you map a task to a risk. Selecting Review opens the Risk Management page. Only users with the Risk Manager role can view and manage these tasks.
Control tasks: Created when you map a task to a control. Selecting Review opens the Controls page.
You can create mapped tasks in two ways:
From the Tasks page, choose to map the task to a risk or control during creation.
From the Risk Management or Controls page, create a task in context. The task is automatically linked to that risk or control.
Creating, editing, and deleting custom tasks
To create a custom task:
Go to the Tasks page and select Create task.
Add a title and description.
Assign a task owner.
Set a due date.
(Optional) Make the task recurring. Set how often it repeats and when it should end.
For existing tasks, you can:
Update details, owner, or due date.
Change recurrence settings.
Map the task to risks or controls.
Delete the task if it's no longer needed.
Complete tasks
To complete a task:
Go to the Tasks page.
Expand the task to view details.
If a checkmark appears, select it to mark the task complete.
If a Review button appears, select it to open the related page in Drata. Complete the action, and the task will be marked as complete.
Next steps
Task Notification: Learn when Drata sends task reminders by email and how to manage them.
Tasks and workspaces: Understand how tasks behave across multiple workspaces.