{"id":"FR2600167032","name":"Drata Trust Management Platform","provider":"Drata","providerSlug":"drata","status":"FedRAMP Authorized","impact":"20x Low","authType":"Program","authDate":"2025-12-05","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":["Cybersecurity & Risk Management","Data Management","Governance, Risk, and Compliance (GRC)","Operations Management"],"assessor":"Schellman Compliance, LLC","assessorId":"136571","smallBusiness":false,"website":"https://drata.com/","description":"The Drata Trust Management Platform automates and centralizes governance, risk, compliance (GRC) and trust management for over 8,000 organizations worldwide, from emerging startups to large enterprises across technology, government, financial services, and healthcare. The platform supports the following capabilities: automated compliance monitoring and evidence collection for 26+ frameworks including FedRAMP 20x KSIs; policy management and automated policy distribution and acknowledgement; risk management, providing end-to-end automation and visibility for risk identification, assessment, treatment, and monitoring; Vendor Risk Management (VRM) including centralized vendor onboarding, monitoring, risk scoring, and reporting; cross-mapping of controls across multiple frameworks and Drata’s Control Framework (DCF); Audit Hub to consolidate auditor communication and facilitate real-time audit feedback from a 3PAO; open API for integrations, custom workflows, and support for custom GRC engineering; compliance-as-code (CaC); User Access Reviews (UAR); dashboards for compliance and risk metrics; available integrations with 300+ major SaaS, cloud, and productivity tools to monitor controls compliance; enterprise Trust Center providing public/private portals for sharing security and compliance posture with customers and prospects, and a modern GRC (Governance, Risk, Compliance) platform with scalable enterprise features supporting public- and private-sector needs. The company was founded in 2020 and is headquartered in San Diego, CA.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Drata%20Logo.png","inMarketplace":true,"agencies":["22-092"],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2025-10-02","to":"Initial Program Review","certType":"20x Pilot"},{"date":"2025-11-21","to":"Final Program Review","certType":"20x Pilot"},{"date":"2025-12-05","to":"FedRAMP Certified","certType":"20x Pilot"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Schellman Compliance, LLC"},"sponsor":"22-092","trustCenterCheck":null}