capabilities.work

What you can do with Drata

Every task in plain language. Pick one, and we can help you get access.

238 things you can do

Drata

Drata is a continuous security and compliance automation platform supporting SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, and more, with policies, evidence, and trust center. Drata exposes a public REST API plus the SafeBase Trust API (acquired) and a Custom Connections framework for evidence collection.

Compliance Management

Rename, describe or disable a monitoring testList monitoring testsGet a monitoring testList a monitoring test's exclusionsList a monitoring test's failuresList resources passing a monitoring test

Customer Security Questionnaire Management

Add a knowledge base entryUpdate a knowledge base entryUpload a security questionnaireSearch the knowledge baseGet a download link for a completed questionnaire

Enterprise Risk Management

Create a risk registerUpdate a risk registerDelete a risk registerUpload documents to a riskDelete a risk documentAdd a note to a riskEdit a risk noteDelete a risk noteList risk registersGet a risk registerList documents on a riskGet a risk documentList notes on a riskGet one risk note

Policy Management

Create a new policy with a draft versionCreate a new version of a policyEdit a policy's settingsChange who owns a policyAdd a review group tier to a policyUpdate one review tier of a policyRemove a review tier from a policySubmit, approve, publish or discard a policyRecord a user's policy acknowledgmentList published policiesList the versions of a policyGet one published policyGet a policy's approval workflowSee which actions I can take on a policyGet one version of a policyList configured policy languagesList policy version language variantsGet a policy language variantList a user's assigned policies

Regulatory Compliance Management

Create a custom compliance frameworkSet requirement custom fields (legacy)Add requirements to a custom frameworkUpdate a custom framework requirementUpdate a custom frameworkCreate an evidence library item (legacy)Update an evidence library item (legacy)Delete an evidence library itemImport controls from library templatesCreate an evidence item with artifactsPre-upload a file for evidenceUpdate an evidence item and its artifactsPermanently delete an evidence itemRename an artifact or change its filed dateDelete one artifact and its historyArchive or restore an evidence artifactCreate a custom controlEdit a controlReset controls to template mappingsMark a control in or out of scopeList compliance frameworksList requirements workspace-wide (legacy)List one framework's requirementsList controls mapped to a requirementList evidence library items (legacy)Get an evidence library item (legacy)Get a version of an evidence library itemBrowse control library templatesGet one control templateList evidence items in a workspaceGet one evidence itemList the artifacts on an evidence itemList controls in a workspaceGet a control's full detailList the requirements a control maps toCompare control mappings with templates

Risk Identification & Assessment

Create a risk in a registerUpdate a riskDelete a riskCopy library risks into a registerList risks in a registerSearch risks within one registerSearch risks across all registersGet a risk's detailsGet risk register insightsBrowse the risk libraryGet a risk library item

Service Attestation Management

List auditsGet an auditList an audit's requestsGet an audit request

Supplier Management

Upload a vendor documentList a vendor's documentsGet one vendor document

Supplier Risk Management

Start a vendor security reviewCreate a vendor review with an attached fileUpdate a vendor security reviewUpload a questionnaire to a vendorUpload a questionnaire to a security reviewFinalize or reopen a security reviewAdd a vendorUpdate a vendorRemove a vendorEmail a questionnaire to a vendorList a vendor's security reviewsList security reviews across all vendorsGet one vendor security reviewList questionnaires on a security reviewList available actions for a security reviewList vendorsGet vendor statisticsGet a vendor's detailsList questionnaires sent to a vendorGet a questionnaire sent to a vendor

Talent Acquisition Management

Record a manual background check

Trust Portal & Public Disclosure

Create a Trust Center update topicDelete a Trust Center topicUpdate a Trust Center topicPost an update to a Trust Center topicDelete a Trust Center updateEdit the message of a Trust Center updateApprove an access requestDecline an access requestList Trust Center update topicsGet a Trust Center topicGet one Trust Center updateList Trust Center access requests

Other things you can do

Start a PDF export of an eventCreate or update a device via custom connectionDelete a device from a custom connectionUpload a device compliance documentDelete a device documentReplace all owners of a controlAdd an owner to a controlRemove an owner from a controlUpload a document for a userDelete a user documentUpdate a procurement vendor mappingUpdate a person's employment detailsReset personnel IdP/HRIS syncReplace a workspace's scoped personnel groupsAdd a group to a workspace's personnel scopeRemove a group from a workspace's personnel scopeRequest a presigned upload URLCreate or update HRIS user identitiesDelete an HRIS user identityCreate a vendor typeRename a vendor typeDelete a vendor typeCreate a taskUpdate a taskComplete or reopen a taskAdd an asset manuallyUpdate an assetRemove an assetDelete a trust center documentUpdate a document's detailsCreate a document from an uploaded fileRequest a presigned document upload URLCreate a custom connectionUpdate a custom connectionDelete a custom connectionAdd a note to a controlEdit a control noteDelete a control noteCreate a trust accountDelete an accountChange an existing account's access expirationAdd members to an accountRemove members from an accountEmail an invitation to account membersUpsert custom data recordsUpload a batch of records in a sessionAct on a custom data upload sessionUpdate one custom data recordDelete one custom data recordGet the current organizationGet the organization's NDA settingsGet organization settingsGet my own organization member recordList workspacesList activity eventsGet one eventCheck an event PDF export jobGet company settingsList all devices across the companyList a person's devicesGet one deviceList devices reported by a connectionList apps installed on a deviceList a device's compliance documentsGet a device documentList a control's ownersList a user's documentsGet one user documentGet a procurement vendor mappingList custom field definitionsGet one custom field definitionList tagsList personnel recordsSearch personnel across all workspacesSearch personnel within one workspaceGet one person's personnel recordList groups in a workspace's personnel scopeCount personnel in a workspace's scopeList HRIS user identitiesGet an HRIS user identityList vendor typesList personnel groupsList rolesGet one roleList users who have a roleList usersGet one userList tasks in a workspaceGet one taskList upcoming Drata-assigned tasksList assetsGet an assetList the products in the Trust Center portalGet a trust center documentList trust center documentsList allowed document typesList custom connectionsGet a custom connectionList notes on a controlGet one control noteFind trust accountsGet an account by IDGet an account's private page URLSearch account membersList productsList records for a custom connection resourceList upload sessions for a resource