Question 1

Is Drata (drata.com) SOC 2 certified and where is their Trust Center?

Accepted Answer

Drata operates a SafeBase Trust Center (https://trust.drata.com) with a Trust Score of 100/100 and disclosed certifications: CCPA / CPRA, CSA STAR, FedRAMP, GDPR, HIPAA, ISO 27001, ISO 42001 (AI), NIST CSF / 800-53, SOC 2 Type II, SOC 3.

Question 2

Does Drata use OpenAI or Anthropic as a sub-processor?

Accepted Answer

Public Trust Center & security page scan for drata.com detected the following AI and cloud sub-processors: Amazon Web Services (AWS), Anthropic, Auth0, Cloudflare, Datadog, Google Cloud Platform (GCP), HubSpot, Intercom, Okta, OpenAI, Salesforce, SendGrid / Twilio, Sentry, Snowflake, Stripe, Vercel.

Question 3

Does Drata charge an Enterprise SSO Tax for SAML / Okta?

Accepted Answer

Drata uses a Enterprise Quote model (starting paid tier: Custom) and Enterprise SSO gating was detected as: No / Included.

Trust Platform	SafeBase
Trust Center URL	https://trust.drata.com
SPF + DMARC	✅ Enforced
Status Page	NONE (All Systems Operational)

Pricing Model	Enterprise Quote
Starting Paid Tier	Custom Quote
Free Tier Available	No
SSO Tax (SAML Gated)	No / Included
AI Sub-Processors	OpenAI, Anthropic

Drata (drata.com)

🛡️ Trust Center & Posture

💸 Pricing & Enterprise SSO Tax

✅ Verified Compliance Certifications (10)

🤖 Disclosed Cloud & AI Sub-Processors (16)

🔑 Public DNS Identity & Security Stack (5)

⚡ Audit Any Custom Domain or Enrich 10,000+ Leads in Clay.com & n8n