Why is Drata making this change?
Drata is migrating customers with published Drata Trust Centers to the SafeBase by Drata Trust Center as part of the plan to sunset the legacy Drata Trust Center experience in order to provide all customers with a better Trust Center Experience. The current plan targets completing these migrations by October 31, 2026.
New customers who joined Drata after the migration are provisioned directly on SafeBase and do not go through the migration process.
How is the SafeBase by Drata Trust Center a better experience?
The SafeBase Trust Center was actually the first Trust Center provider (the founders of the Trust Center term!). Feedback from customers like you includes that it's more customizable, has deeper integrations for more streamlined workflows, and is easier to consume and interact with (for your customers). Drata acquired SafeBase for this very reason, to bring you the best Trust Center experience to allow you to showcase the work you are doing to protect your customers data and to drive revenue while doing so.
What is changing?
Customers who use a published Drata Trust Center will be transitioned to the SafeBase by Drata Trust Center. The legacy Drata Trust Center is not included in the new Drata UI and is being deprecated as part of this migration program.
How much work will this be for me?
Our team will be transitioning your documentation that is currently published in the Drata Trust Center to SafeBase for you. We will then provide you with training resources to finalize your Trust Center and publish the new version.
As a brief overview you will need to:
Redirect your DNS to the SafeBase CNAME (less than 5 min)
Configure your NDA (5-10 min)
Update branding based on your desired look and feel (you can keep this simple, or go a bit further with the enhanced branding options on SafeBase) (5 min or less if you have your branding guidelines available; review what options you’ll have available here)
Does this mean my Drata Trust Center will be taken down?
No, you will redirect the DNS record to your new CNAME record on SafeBase when you are ready to publish. There may be a few seconds of downtime when you make that transition, but it should be very limited. Do note, if you do not redirect your DNS by the EOL date, your legacy Drata Trust Center will be taken down.
When will the legacy Drata Trust Center reach the end of life?
We are targeting October 31, 2026 as the end-of-life date for the legacy Drata Trust Center. You will no longer be able to access the legacy Drata Trust Center after that date. We will provide additional communications as we get closer to that day or if it changes.
When will my migration happen?
Customers will be contacted in waves. Drata plans a managed migration; meaning our team will be helping to move your content. Your exact timing will depend on your cohort, account setup, and any known limitations such as region, MSSP structure, or existing SafeBase configuration. In short, hang tight, we will be in touch with specific timing for your tenant!
Will I get advance notice?
Yes. We will be in touch with specific timing for your tenant!
What does the migration include?
Based on the current migration process, migration is intended to:
move published Drata policies into the SafeBase document library via the Drata sync (to SafeBase)
link any published policies or other documents to the forward facing Trust Center that you have currently showing in your Drata Trust Center
create subprocessors (if any are included in your current published Drata Trust Center)
enable evidence library sync for ongoing document pushes after setup
To summarize, we will replicate any content you have in your currently published Drata Trust Center within the SafeBase by Drata Trust Center.
Will my policies stay synced after migration?
The policy sync between Drata and SafeBase takes place once per day. So once per day, we will look to the Drata Policy Center to see if any new published policies have been created, and will sync them to the SafeBase Document library. From the SafeBase Document Library, any policies that are linked to your SafeBase Trust Center will be automatically updated.
What if I don’t want to be migrated?
Please reply to the email you received with details on why you would not like to be migrated. If you prefer to do it on your own, we can certainly provide you with resources and guidance to do so including using the Evidence Library Sync to sync Evidence from Drata to SafeBase and our Drata integration which pushes your published polishes to SafeBase.
Will my contract change as part of this migration?
Your contract will not change due to this migration. If you currently own the legacy Drata Trust Center, you will be given the equivalent of that offering on the SafeBase platform. When it comes time to renew your contract, your updated SafeBase entitlements will be included.
What SafeBase package will I receive?
Trust Center Essential customers will migrate to the SafeBase Foundation offering
Trust Center Pro customers will migrate to the SafeBase Advanced offering
Where is SafeBase hosted?
Yes, SafeBase differs from Drata hosting. Today, SafeBase is exclusively hosted in North America.
What if my Drata tenant is in the EU or APAC?
You still have the ability to take advantage of the SafeBase offering, but it is hosted in North America.
How will I access/login to my Trust Center after the migration is complete?
For those with Drata tenants hosted in EU or APAC, SSO from Drata into the SafeBase platform is not supported. You will login at app.safebase.io directly. Post migration, those with Drata tenants hosted in the US will access SafeBase via the left navigation within Drata (SSO from Drata into SafeBase).
What if I am a new Drata customer — how do I get started with SafeBase?
For new customers, the Trust Center is now integrated with SafeBase. To enable and use it:
Ensure that Trust Center is enabled for your tenant, as per your Drata plan.
Follow the documented setup steps within SafeBase to integrate Drata with your SafeBase Trust Center.
Complete the integration process within SafeBase to finalize the setup.
What if I already have both a Drata Trust Center and a published SafeBase Trust Center?
That’s not a problem. We simply want you to be aware that the legacy Drata Trust Center will no longer be functional after October 31, 2026. You should make arrangements to move any content that you will want to continue to host from your Drata Trust Center into SafeBase.
Who can help me during migration?
Your Account Team is here to provide guidance. We will also be providing you additional resources in future communications about your cohort. Feel free to reply to the communications you have received/receive and our support team will be happy to help clarify any questions you may have.
Are there any features in the legacy Drata trust center not supported in SafeBase?
Today, the Continuous Monitoring section in the Legacy Drata Trust Center is not available within the SafeBase Trust Center. Our product team has not prioritized the addition of this functionality within the SafeBase Trust Center. If it is something that you find important/valuable, please let us know by submitting a feature request here.
How will my security program benefit from this migration?
Your security program will benefit from moving to the new Trust Center experience in a few important ways:
You’ll have stronger control over how sensitive information is shared, with better approval workflows, NDA handling, and more flexible access settings for different buyers and stakeholders.
You’ll be able to tailor the experience more easily, including support for multiple products and multiple languages, so your Trust Center can better match your business and your buyers’ needs.
Your customers and prospects will get a cleaner, easier experience when reviewing your security posture, which can make diligence faster and reduce friction during reviews.
You’ll gain better visibility into engagement and performance, with stronger analytics that help connect Trust Center usage to security reviews, sales activity, and revenue impact.
You’ll be on the version of the product where Drata is continuing to invest, expand integrations, and build new capabilities over time.