Drata
Drata sells a security and compliance automation platform for SOC 2, ISO 27001 and other frameworks, plus the SafeBase trust center product.
Subprocessors (44)
Checked Oct 24, 2026 · source disclosure ↗
| vendor | purpose | evidence |
|---|---|---|
| Amazon Web Services United States, Ireland, Germany, Australia | Cloud hosting; stores, transmits and processes all customer data | “Amazon Web Services is a cloud service provider that stores, transmits, and processes all customer data. Customer databases, uploaded objects, and application servers are hosted a customer-specified r” |
| Amplitude United States | Product usage analytics | “Amplitude provides product usage analytics to help track user interactions, behavior, and engagement for the purpose of improving the user experience.” |
| Anthropic United States | LLM services for AI Agent Governance features | “Anthropic: Provides large language model services used to power AI-assisted features specific to the AI Agent Governance product.” |
| Apideck Germany | Opt-in integration with customer cloud storage services | “Apideck facilitates interactions with the configured cloud storage services” |
| MessageBird United States | Cloud communications for in-platform messages and notifications | “Bird provides a cloud communications platform that enables the sending of messages and notifications within the platform, enabling features like live updates and instant notifications.” |
| Birdie United States | Capturing and reproducing customer-reported issues for support | “Birdie is used to capture and share customer issues and feedback as part of handling customer support requests and issues and is used to track and reproduce issues reported by customers. Birdie is use” |
| Braintrust United States, European Union | Opt-in AI observability and evaluation for AI features | “Braintrust (braintrust.dev) provides an AI observability and evaluation platform that enables Drata to log, monitor, and evaluate AI workflows” |
| | Opt-in cloud browser infrastructure for AI agents | “Browserbase, Inc. provides cloud browser infrastructure that enables Drata's AI agents to perform browser-based tasks on behalf of the Customer” |
| Census United States | Reverse ETL syncing data warehouse data to business applications | “Census enables data synchronization by connecting business data sources to various other business tools for analysis, automation, and personalization. Census is used as a reverse ETL tool to sync data” |
| Chameleon United States | In-product user onboarding, surveys and product adoption | “Chameleon provides in-product digital adoption, user engagement micro surveys, and product awareness and onboarding activities, enabling the creation of personalized experiences.” |
| Cloudflare Global | Content distribution, WAF, abuse prevention and DNS | “Cloudflare provides content distribution, security (WAF, etc), abuse prevention, and DNS services for web traffic transmitted to and from the Services.” |
| Courier United States | Opt-in multi-channel notification infrastructure | “Courier facilitates the notification infrastructure that enables the sending of multi-channel messages to users.” |
| Datadog United States | Cloud monitoring and observability | “Datadog provides cloud monitoring and observability services, enabling the tracking and analyzing of application performance, infrastructure, and logs for debugging, troubleshooting, auditing, and rep” |
| dbt Labs United States | Data transformation and modeling in the data warehouse | “GetDBT provides a platform for data transformation, modeling, and analytics, allowing the build, test, and deploy of SQL-based data models within the data warehouse.Transformation and Modeling” |
| Decodable United States | ETL streaming of platform data to data warehouses | “Decodable is a real-time data streaming and processing solution and is utilized as an ETL solution to synchronize structured data from platform databases to data warehouses.” |
| Fivetran United States | ETL syncing business data to the data warehouse | “Fivetran offers real-time data streaming and processing solutions. Drata utilizes Fivetran as an ETL solution to synchronize data from Drata's business information systems to Drata's data warehouse.” |
| Front United States | Collaborative inbox for customer communications | “Front offers a collaborative inbox platform that helps customer success team members manage customer communications across multiple channels in a unified customer messaging platform.” |
| Google Cloud Platform United States | Cloud hosting; stores, transmits and processes all customer data | “Google Cloud Platform is a cloud service provider that stores, transmits, and processes all customer data. Customer databases, uploaded objects, and application servers are hosted a customer-specified” |
| Intercom United States | Customer messaging, support and engagement | “Intercom offers a customer messaging platform that helps manage customer support, engagement, and communication across multiple channels. These elements are used to manage and analyze customer interac” |
| Jam United States | Opt-in UI capture for customer issue reports | “Jam.dev allows customers to capture relevant UI and report feedback and issues” |
| Knock United States | Opt-in multi-channel notification infrastructure | “Knock facilitates the notification infrastructure that enables the sending of multi-channel messages to users.” |
| LaunchDarkly United States | Feature flagging and experimentation | “LaunchDarkly is a feature flagging and experimentation platform that enables the control and test of features and adoption.” |
| Leen United States | Opt-in sync of data from customer security SaaS integrations | “Leen processes, stores, and transmits various data elements synced from these integrations with security SaaS providers.” |
| Matia United States | DataOps platform for data management and reverse ETL | “Matia.io provides a unified DataOps platform, including data ingestion, observability, cataloging, and reverse ETL. Drata utilizes Matia.io as a sub-processor for both data management and reverse ETL,” |
| Merge United States | Opt-in unified API for HRIS and other integrations | “Merge provides Drata with a unified API that allows the Drata Platform to integrate and sync data across multiple HR, finance, and productivity platforms.” |
| Obvious United States | Opt-in bulk import of data from CSV or Excel | “Obvious is used to enable administrative users in both Drata and SafeBase platforms to import data” |
| Auth0 United States | Identity and access management, login, MFA and SSO | “Auth0 (by Okta) provides identity and access management services used to authenticate users and manage secure access to our applications. It enables features such as secure login, multi-factor authent” |
| Omni United States | Reporting and analytics dashboards for platform users | “Omni: To create reporting and analytics views of data within the platform, including executive-level dashboards” |
| Postmark United States | Transactional email delivery | “Postmark provides transactional email delivery services used to send system-generated emails from the platform and helps ensure reliable and secure email delivery to users.” |
| Productboard United States | Product feedback collection and roadmap management | “Productboard provides a product management platform that helps businesses collect customer feedback, prioritize features, and align product roadmaps. ProductBoard is integrated into the platform to en” |
| Reducto United States | Opt-in document processing for AI features | “Reducto is used to process user-uploaded documents” |
| Salesforce Service Cloud United States | Customer support and case management | “Salesforce Service Cloud provides customer support and case management services used to handle user inquiries, track support requests, and manage customer interactions. It helps deliver efficient and” |
| Sigma Computing United States | Business intelligence and data analysis | “Sigma is a business intelligence and data analysis platform used to connect, analyze, and visualize data from various sources. It allows users to create interactive dashboards, generate reports, and c” |
| Snowflake United States | Centralized cloud data warehouse | “Snowflake provides a cloud-based data platform that stores, processes, and analyzes data securely, supporting scalable data warehousing, sharing, and analytics. Snowflake is used as the centralized da” |
| StackOne United States | Opt-in unified API for SaaS integrations | “StackOne provides a unified API that allows the integrations with and syncing data across multiple SaaS systems” |
| SurveySparrow United States | NPS and customer feedback surveys | “SurveySparrow provides an omnichannel survey platform that enables the collection, analyzing, and management of customer and employee feedback. SurveySparrow is used to collect and manage customer fee” |
| Totango United States | Customer success management and analytics | “Totango (dba Catalyst Software) supports customer success management and analytics solutions, helping track user engagement, manage customer relationships, and optimize retention.” |
| turbopuffer United States, European Union, Australia | Opt-in vector search and storage for AI features | “Turbopuffer, Inc. provides vector search and storage infrastructure that enables Drata to index, store, and retrieve document embeddings” |
| Segment United States | Customer data platform for collecting and routing data | “Twilio (dba Segment) provides a customer data platform (CDP) that enables the collection, cleansing, and routing of customer data to various tools for analytics and product usage.” |
| Typeform United States, Germany | Forms and surveys for vendor risk questionnaires and training | “Typeform provides an online form and survey platform that enables the creation, collection, and processing of responses to vendor risk management security questionnaires and employee responses to secu” |
| Vellum United States | Opt-in LLM application development and monitoring | “Vellum is a platform for development and management of large language model (LLM) applications and tools for prompt engineering” |
| | Opt-in data sync to customer data stores | “Prequel is used to facilitate this data sync between customer data in Drata and SafeBase databases and customer databases.” |
| Wiz United States | Data security posture management (Wiz DSPM) | “Wiz DSPM (Data Security Posture Management) helps Drata secure data by continuously monitoring and assessing Drata's data security posture, identifying vulnerabilities, misconfigurations, and complian” |
| WorkOS United States | Opt-in single sign-on integration | “WorkOS facilitate Single Sign-On (SSO) for its customers' users.” |
- Amazon Web ServicesUnited States, Ireland, Germany, Australia
Cloud hosting; stores, transmits and processes all customer data
“Amazon Web Services is a cloud service provider that stores, transmits, and processes all customer data. Customer databases, uploaded objects, and application servers are hosted a customer-specified r”
- AmplitudeUnited States
Product usage analytics
“Amplitude provides product usage analytics to help track user interactions, behavior, and engagement for the purpose of improving the user experience.”
- AnthropicUnited States
LLM services for AI Agent Governance features
“Anthropic: Provides large language model services used to power AI-assisted features specific to the AI Agent Governance product.”
- ApideckGermany
Opt-in integration with customer cloud storage services
“Apideck facilitates interactions with the configured cloud storage services”
- MessageBirdUnited States
Cloud communications for in-platform messages and notifications
“Bird provides a cloud communications platform that enables the sending of messages and notifications within the platform, enabling features like live updates and instant notifications.”
- BirdieUnited States
Capturing and reproducing customer-reported issues for support
“Birdie is used to capture and share customer issues and feedback as part of handling customer support requests and issues and is used to track and reproduce issues reported by customers. Birdie is use”
- BraintrustUnited States, European Union
Opt-in AI observability and evaluation for AI features
“Braintrust (braintrust.dev) provides an AI observability and evaluation platform that enables Drata to log, monitor, and evaluate AI workflows”
- BrowserbaseEurope, United States, Asia-Pacific
Opt-in cloud browser infrastructure for AI agents
“Browserbase, Inc. provides cloud browser infrastructure that enables Drata's AI agents to perform browser-based tasks on behalf of the Customer”
- CensusUnited States
Reverse ETL syncing data warehouse data to business applications
“Census enables data synchronization by connecting business data sources to various other business tools for analysis, automation, and personalization. Census is used as a reverse ETL tool to sync data”
- ChameleonUnited States
In-product user onboarding, surveys and product adoption
“Chameleon provides in-product digital adoption, user engagement micro surveys, and product awareness and onboarding activities, enabling the creation of personalized experiences.”
- CloudflareGlobal
Content distribution, WAF, abuse prevention and DNS
“Cloudflare provides content distribution, security (WAF, etc), abuse prevention, and DNS services for web traffic transmitted to and from the Services.”
- CourierUnited States
Opt-in multi-channel notification infrastructure
“Courier facilitates the notification infrastructure that enables the sending of multi-channel messages to users.”
- DatadogUnited States
Cloud monitoring and observability
“Datadog provides cloud monitoring and observability services, enabling the tracking and analyzing of application performance, infrastructure, and logs for debugging, troubleshooting, auditing, and rep”
- dbt LabsUnited States
Data transformation and modeling in the data warehouse
“GetDBT provides a platform for data transformation, modeling, and analytics, allowing the build, test, and deploy of SQL-based data models within the data warehouse.Transformation and Modeling”
- DecodableUnited States
ETL streaming of platform data to data warehouses
“Decodable is a real-time data streaming and processing solution and is utilized as an ETL solution to synchronize structured data from platform databases to data warehouses.”
- FivetranUnited States
ETL syncing business data to the data warehouse
“Fivetran offers real-time data streaming and processing solutions. Drata utilizes Fivetran as an ETL solution to synchronize data from Drata's business information systems to Drata's data warehouse.”
- FrontUnited States
Collaborative inbox for customer communications
“Front offers a collaborative inbox platform that helps customer success team members manage customer communications across multiple channels in a unified customer messaging platform.”
- Google Cloud PlatformUnited States
Cloud hosting; stores, transmits and processes all customer data
“Google Cloud Platform is a cloud service provider that stores, transmits, and processes all customer data. Customer databases, uploaded objects, and application servers are hosted a customer-specified”
- IntercomUnited States
Customer messaging, support and engagement
“Intercom offers a customer messaging platform that helps manage customer support, engagement, and communication across multiple channels. These elements are used to manage and analyze customer interac”
- JamUnited States
Opt-in UI capture for customer issue reports
“Jam.dev allows customers to capture relevant UI and report feedback and issues”
- KnockUnited States
Opt-in multi-channel notification infrastructure
“Knock facilitates the notification infrastructure that enables the sending of multi-channel messages to users.”
- LaunchDarklyUnited States
Feature flagging and experimentation
“LaunchDarkly is a feature flagging and experimentation platform that enables the control and test of features and adoption.”
- LeenUnited States
Opt-in sync of data from customer security SaaS integrations
“Leen processes, stores, and transmits various data elements synced from these integrations with security SaaS providers.”
- MatiaUnited States
DataOps platform for data management and reverse ETL
“Matia.io provides a unified DataOps platform, including data ingestion, observability, cataloging, and reverse ETL. Drata utilizes Matia.io as a sub-processor for both data management and reverse ETL,”
- MergeUnited States
Opt-in unified API for HRIS and other integrations
“Merge provides Drata with a unified API that allows the Drata Platform to integrate and sync data across multiple HR, finance, and productivity platforms.”
- ObviousUnited States
Opt-in bulk import of data from CSV or Excel
“Obvious is used to enable administrative users in both Drata and SafeBase platforms to import data”
- Auth0United States
Identity and access management, login, MFA and SSO
“Auth0 (by Okta) provides identity and access management services used to authenticate users and manage secure access to our applications. It enables features such as secure login, multi-factor authent”
- OmniUnited States
Reporting and analytics dashboards for platform users
“Omni: To create reporting and analytics views of data within the platform, including executive-level dashboards”
- PostmarkUnited States
Transactional email delivery
“Postmark provides transactional email delivery services used to send system-generated emails from the platform and helps ensure reliable and secure email delivery to users.”
- ProductboardUnited States
Product feedback collection and roadmap management
“Productboard provides a product management platform that helps businesses collect customer feedback, prioritize features, and align product roadmaps. ProductBoard is integrated into the platform to en”
- ReductoUnited States
Opt-in document processing for AI features
“Reducto is used to process user-uploaded documents”
- Salesforce Service CloudUnited States
Customer support and case management
“Salesforce Service Cloud provides customer support and case management services used to handle user inquiries, track support requests, and manage customer interactions. It helps deliver efficient and”
- Sigma ComputingUnited States
Business intelligence and data analysis
“Sigma is a business intelligence and data analysis platform used to connect, analyze, and visualize data from various sources. It allows users to create interactive dashboards, generate reports, and c”
- SnowflakeUnited States
Centralized cloud data warehouse
“Snowflake provides a cloud-based data platform that stores, processes, and analyzes data securely, supporting scalable data warehousing, sharing, and analytics. Snowflake is used as the centralized da”
- StackOneUnited States
Opt-in unified API for SaaS integrations
“StackOne provides a unified API that allows the integrations with and syncing data across multiple SaaS systems”
- SurveySparrowUnited States
NPS and customer feedback surveys
“SurveySparrow provides an omnichannel survey platform that enables the collection, analyzing, and management of customer and employee feedback. SurveySparrow is used to collect and manage customer fee”
- TotangoUnited States
Customer success management and analytics
“Totango (dba Catalyst Software) supports customer success management and analytics solutions, helping track user engagement, manage customer relationships, and optimize retention.”
- turbopufferUnited States, European Union, Australia
Opt-in vector search and storage for AI features
“Turbopuffer, Inc. provides vector search and storage infrastructure that enables Drata to index, store, and retrieve document embeddings”
- SegmentUnited States
Customer data platform for collecting and routing data
“Twilio (dba Segment) provides a customer data platform (CDP) that enables the collection, cleansing, and routing of customer data to various tools for analytics and product usage.”
- TypeformUnited States, Germany
Forms and surveys for vendor risk questionnaires and training
“Typeform provides an online form and survey platform that enables the creation, collection, and processing of responses to vendor risk management security questionnaires and employee responses to secu”
- VellumUnited States
Opt-in LLM application development and monitoring
“Vellum is a platform for development and management of large language model (LLM) applications and tools for prompt engineering”
- PrequelUnited States
Opt-in data sync to customer data stores
“Prequel is used to facilitate this data sync between customer data in Drata and SafeBase databases and customer databases.”
- WizUnited States
Data security posture management (Wiz DSPM)
“Wiz DSPM (Data Security Posture Management) helps Drata secure data by continuously monitoring and assessing Drata's data security posture, identifying vulnerabilities, misconfigurations, and complian”
- WorkOSUnited States
Opt-in single sign-on integration
“WorkOS facilitate Single Sign-On (SSO) for its customers' users.”