Drata AI is designed to help customers accelerate compliance workflows, reduce manual work, and respond faster to trust and security requests — while maintaining strong privacy, security, and responsible AI practices.
This article provides transparency into how Drata AI works, what data it uses, and how customer information is protected.
What is Drata AI?
Drata AI provides assistive features within the Drata platform that help teams summarize vendor security documents, extract key compliance insights, and accelerate security questionnaire workflows.
Does Drata Train AI Models Using Customer Data?
No. Drata does not currently train or fine-tune AI models using customer data.
Is Customer Data Isolated Across Tenants?
Yes. Drata AI does not pull or mix information across customer accounts. Each tenant’s data remains logically separated.
Can Customers Opt Out of Drata AI?
Yes. Customers can opt out anytime within Drata by accessing Settings → AI Settings.
How Does Drata Handle Customer Feedback?
Drata AI includes thumbs up/down feedback and logs edits or accepted suggestions to improve outputs over time.
Responsible AI Practices
Drata is committed to building AI responsibly. Learn more here: https://drata.com/blog/our-ai-philosophy
Subprocessors Used for Drata AI
Drata uses authorized subprocessors. More information: https://drata.com/sub-processors
Frequently Asked Questions
Does Drata AI use my data to train models? No.
Can Drata AI access other customers’ data? No.
Can I disable Drata AI? Yes.
Is Drata building its own ChatGPT? No.