Drata

A guide to Drata's FedRAMP Readiness Framework

FedRAMP 20x: A Modernized Path to Federal Cloud Security Overview

Resources and instructions for meeting FedRAMP requirements with Drata.

FedRAMP

Product Updates

Support

Academy

No tickets or conversations found

Try selecting a different creation date range.

Tickets and conversations you've started through the messenger will appear here.

No tickets or conversations created by you

Try using different keywords or checking for typos.

Try selecting a different update date range.

Find answers and get help from Intercom Support and Community Experts

Conversations you've started through the messenger will appear here.

No conversations created by you

No conversations found

AI title

Title

This site employs cookies and other technologies that we and our third party vendors use to monitor and record personal information about you and your interactions with the site (including content viewed, cursor movements, screen recordings, and chat contents) for the purposes described in our Cookie Policy. By continuing to visit our site, you agree to our {websiteTermsLink}, {privacyPolicyLink} and {cookiePolicyLink}.

This site uses cookies and similar technologies ("cookies") as strictly necessary for site operation. We and our partners also would like to set additional cookies to enable site performance analytics, functionality, advertising and social media features. See our {cookiePolicyLink} for details. You can change your cookie preferences in our Cookie Settings.

We use cookies to make our site work and also for analytics and advertising purposes. You can enable or disable optional cookies as desired. See our {cookiePolicyLink} for more details.

Advertising cookies are set by our advertising partners to collect information about your use of the site, our communications, and other online services over time and with different browsers and devices. They use this information to show you ads online that they think will interest you and measure the ads' performance. Social media cookies are set by social media platforms to enable you to share content on those platforms, and are capable of tracking information about your activity across other online services for use as described in their privacy policies.

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

These cookies are necessary for the website to function and cannot be switched off in our systems.

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

You have the right to opt out of the sale of your personal information. See our {cookiePolicyLink} for more details about how we use your data.

Your Privacy Choices

We use cookies to enhance your experience. You can customize your cookie preferences below. See our {cookiePolicyLink} for more details.

Cookie Settings

Empty Help Center

Uh oh. That page doesn’t exist.

Home

Search results

Disappointed

Neutral

Smiley

Thinking...

Searching through sources...

Analyzing...

Tickets submitted through the messenger or by a support agent in your conversation will appear here.

No tickets created by you

No tickets found

Conversations and tickets in {topic}

Conversations and tickets in {topic} // {subtopic}

Volume, creators and topics for your company.

Insights

Top creators

AI topics

Track the progress of all tickets and conversations related to your company.

Customer Portal.

Track the progress of all tickets related to your company.

Tickets portal.

{assigneeName} needs more information from you

Tickets

No access to tickets portal

Search

Skip the search. Describe what you’re trying to do and get a grounded answer.

Browse articles and guides in this topic.

Create your workspace and invite the people you work with.

Set up your account

Build your first workflow and watch it run end to end.

Ship something

Connect the tools your team already uses to bring data in.

Connect your stack

A quick lap of the product so you know where everything lives.

{appName} in 60 seconds

This prototype demo is aware that you are reading “{title}”. It can point you back to the current article, but a production article-aware Fin contract is still follow-up work.

Prototype article-aware answer

Because you already asked about invitations, this prototype demo can add the follow-up: use the role selector before sending each invite to limit access to the teammate responsibilities.

Prototype role-limiting follow-up

This prototype demo suggests starting with your workspace profile, inviting the team members who need access, and then connecting the integrations you use.

Prototype getting-started answer

In this prototype demo, integrations are configured from workspace settings. Choose the integration, connect the account, and review the enabled permissions.

Prototype integrations answer

In this prototype demo, invite teammates from workspace settings, then choose the access each teammate needs before sending the invitation.

Prototype invite-team answer

This prototype demo does not have a scripted answer for that question yet. Try asking how to invite your team or open a source article. No production Fin API was called.

Prototype answer unavailable

I’ve got this page open. Ask me anything about it and I’ll answer from the docs.

Reading along with you

English

url(https://downloads.intercomcdn.com/i/o/am69aeco/872474/ec2be026166d2118ba1f1524bc1b/681094e283735b42c0bf1774184c5924.png)

Getting Started

Section 1: Drata Rollout Toolkit Overview

Section 2: GRC Roles & Responsibilities

Section 3: Change Management Guide

Section 4: Team Briefs & Email Templates

Section 5: Control Owners

Section 5: Policy Owners

Section 5: Evidence Owners

Section 5: Drata for Auditors

Section 6: Implementation Roadmap + Success Metrics

Section 7: Common Adoption Blockers Guide

Section 8: Key Resources

Drata Rollout Toolkit

Welcome to Drata

Introducing the New Drata Experience

Getting Started with Drata: Key Resources

How to Access the New Drata Experience

Navigation Changes: Where Did Everything Go?

My Drata Overview: Complete Your Personal Compliance Tasks (New Experience)

Navigate the Drata Help Center

Access Drata as an auditor (New Experience)

Signing In to Drata (New Experience)

Supported Internet Browsers

How to Allowlist Drata Email Domains and IP Addresses

Compliance Program Migration Best Practices

Using AI Features in Drata

Working with an MSSP (Managed Security Service Provider)

The JSON Web Token (JWT) Security Standard

SafeBase Acquisition

Getting Started with the Drata Academy

Use Markdown formatting in supported text areas

Helpful Resources

How to Get Support at Drata

Introducing the updated Multi-instance Management Portal

MIM Dashboard

Understand Accounts, Workspaces, and MIM

Identify What Can Be Shared Workspace Resources

Create and Manage Workspaces

Configure Workspace Details, Frameworks, and Connections

Map Controls, Policies, and Evidence Across Workspaces

Navigate the Workspaces Dashboard (Beta)

Track Workspace-Aware Events

Create and Manage Workspace Tickets

Workspaces

Understand the Drata Platform

Training Videos

Third-Party Risk Management (TPRM) Training Videos

Training Videos (New Experience)

Training Videos (SafeBase) 

Training Videos (Classic Drata Experience)

Quick Start Guide

Complete the Provide Basic Info task in Quick Start

Quick Start

Dashboard overview

Dashboard

AI-Assisted Custom Control Mapping to GRC Objects

Recommendation

Understanding Connections in Drata

Integrate Multiple Identity and HRIS Connections

How Drata Uses HRIS Data

Multiple MDM Support (New Experience)

Partner Connections: Expanding Compliance with External Tools

Manage connected infrastructure accounts

Manage connected version control

Map accounts to personnel in Drata (New Experience)

Ad-hoc identity and account resync

Connect your HRIS to Drata

GitHub Access: Should I use my personal account or a new company account?

GitHub Rulesets

GitLab MFA configurations

Allowlist IP Addresses for WAF Configurations

Connections

Custom Connections and Tests

Mark Controls In or Out of Scope

Manage Scope and Exclusions in Drata

Apply Default Mappings for Controls

Create, Edit, and Manage Controls

Map evidence and policies to controls (New Experience)

Assess and Manage Individual Controls

Manage Required Approval and Control Readiness

Manage Notifications for Required Approvals and Control Updates

Import Controls in Bulk (New Experience)

Revert a Control to Drata's Latest DCF Template

Export Control-to-Requirement Mappings

Controls and Tests Updated Between January 2024 and October 2025

Annotate a Control

Early Access for Monitoring and Controls

Controls

The Drata Control Framework

Monitoring Overview

Understanding Test Provisioning and the Test Library (New Experience)

Test Library (New experience)

Filter and search tests in Monitoring (New Experience)

View and Manage Test Details (New Experience)

Manage Tests in Monitoring Page

Enable AI Summaries for Tests

Add tests from the Test Library to a workspace (New Experience)

Map Tests to Controls

Download Audit Evidence for a Custom Test (New Experience)

Disable a Test

Exclude Findings from Tests

Exclusions vs. Disabling a Test (Concept Guide)

Excluding Infrastructure resources

Exclusion labels within GCP

Exclusion tags within AWS

Exclusion tags within Azure

Identify and Add Missing Azure Permissions for Drata

Identify and Add Missing AWS Permissions for Drata

Identify and Add Missing GCP Permissions for Drata

Resolve SSL/TLS Compliance Testing Issues in Drata

Dratabot

Manually Running a Control Test

Conditions That Affect 'Fix Now' and 'Test Now' Button Visibility

Monitoring

Custom Tests

Evidence Overview

Evidence Renewal Date

Evidence