What SOC 2 provider does Drata use?

Sensiba

Sensiba appears in Drata's public security materials.

e Drata Trust Center (trust.drata.com) as of October 18, 2026: - **SOC 2 Status:** Listed as 'SOC 2 Type 2'. - **Report Type:** SOC 2 Type 2 (and SOC 3). - **Auditor / CPA Firm:** Sensiba (explicitly listed for SOC 3, ISO/IEC 27018:2025, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 42001:2023, and HIPAA). - **Compliance Automation Platform:** Drata (the platform itself is described as helping companies 'build and maintain the trust of their

SafeBase

SafeBase appears in Drata's public security materials.

* Drata (the platform itself is described as helping companies 'build and maintain the trust of their users' with 'automated remediation'). - **Trust-Center Provider:** Powered by SafeBase by Drata. - **Frameworks:** SOC 2 Type 2, SOC 3, ISO/IEC 27018:2025, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 42001:2023, HIPAA, CCPA, GDPR, CISA: Secure-by-Design Pledge, VPAT, and AWS Qualified Software. - **Dates:** SOC 3 report is titled '2026 - Dr

Drata

Drata appears in Drata's public security materials.

Based on the Drata Trust Center (trust.drata.com) as of October 18, 2026: - **SOC 2 Status:** Listed as 'SOC 2 Type 2'. - **Report Type:** SOC 2 Type 2 (and SOC 3). - **Auditor / CPA Firm:** Sensiba (explicitly listed for SOC 3, ISO/IEC 27018:2025, ISO/IEC 27001:2022, ISO/IEC 2

enter Provider:** Powered by SafeBase by Drata. - **Frameworks:** SOC 2 Type 2, SOC 3, ISO/IEC 27018:2025, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 42001:2023, HIPAA, CCPA, GDPR, CISA: Secure-by-Design Pledge, VPAT, and AWS Qualified Software. - **Dates:** SOC 3 report is titled '2026 - Drata Inc. SOC 3 Report.pdf'. - **Named Provider Relationships:** - Auditor: Sensiba - Platform provider: SafeBase by Drata - Cloud/Security Partner:

pe:** SOC 2 Type 2 (and SOC 3). - **Auditor / CPA Firm:** Sensiba (explicitly listed for SOC 3, ISO/IEC 27018:2025, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 42001:2023, and HIPAA). - **Compliance Automation Platform:** Drata (the platform itself is described as helping companies 'build and maintain the trust of their users' with 'automated remediation'). - **Trust-Center Provider:** Powered by SafeBase by Drata. - **Frameworks:** SOC

Based on the Drata Trust Center (trust.drata.com) as of October 18, 2026: - **SOC 2 Status:** Listed as 'SOC 2 Type 2'. - **Report Type:** SOC 2 Type 2 (and SOC 3). - **Auditor / CPA Firm:** Sensiba (explicitly listed for SOC 3, ISO/IEC 27018:2025, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 42001:2023, and HIPAA). - **Compliance Automat

Based on the Drata Trust Center (trust.drata.com) as of October 18, 2026: - **SOC 2 Status:** Listed as 'SOC 2 Type 2'. - **Report Type:** SOC 2 Type 2 (and SOC 3). - **Auditor / CPA Firm:** Sensiba (explicitly listed for SOC 3, ISO/IEC 27018:2025, ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 42001:2023, and HIPAA). - **Compliance Automation Platform:** Drata (the platform itself is described as helping companies 'b