Skip to main content

Annotate an event

You can add notes to an event to provide additional context for auditors or internal reviewers. Notes are attached directly to the event and become part of the event’s audit evidence.

⚠️ Select your experience

The steps depend on your interface version. Select a link to skip to the instructions for your version.

Customers who joined Drata on or after Feb 24, 2026 are automatically on the New Experience.

Instructions for the New Experience

Why add event notes

Event notes help you:

  • Explain why an event occurred

  • Document investigation or remediation details

  • Add auditor-facing context to automated activity

  • Attach supporting documentation to system events


Who can annotate events

The following Drata roles can add, edit, or remove event notes:

  • Admin

  • Information Security Lead


Add a note to an event

  1. Go to Events.

  2. Select an event in the table.

  3. Select the sidebar arrow.

  4. Enter your note.

  5. (Optional) Upload a supporting file.

  6. Save the note.

The note is saved immediately and is visible to other authorized users.


Manage event notes

You can also:

  • View the full history of notes for the event

  • Edit or delete notes you created

  • Upload files to provide additional evidence or context

Only the user who uploaded a file can delete that file.


How notes appear in audit evidence

  • Notes are included in the event PDF under the Notes section.

  • If files are attached, the download is provided as a ZIP file that includes:

    • The event PDF

    • All attached files

This ensures annotations and attachments are preserved for audit review.


Key behaviors to understand

  • Events remain read-only and cannot be modified

  • Notes are timestamped and attributed to the author

  • Notes do not affect monitoring results or control status

  • Notes persist with the event for audit history


Instructions for the Classic Experience

You may find it necessary to add context to an event, either for your auditor or for other teammates. The 'Notes' section on the event drawer enables you to do just that.

BEFORE DIVING IN

Only account administrators or information security leads have access to this section within Drata.

HERE'S HOW

Select an event from the 'Events Tracking' page to open the drawer, Go to the Notes section, and enter any notes relevant to the event.

A history of all notes related to that event will display in the drawer.

You can edit and remove any note(s) you've written. Additionally, you can upload files along with a note in order to provide more detailed context or evidence. The file can be deleted by the user who uploaded it.

The notes are included in the event PDF download under the 'Notes' section. When files are uploaded as well, the download converts to a zip file to include the file(s).

Did this answer your question?