What's New

Product Updates

SEPTEMBER 18, 2026
Feature EnhancementAI Questionnaire Assistance

Question Classification and Subject Matter Expert Assignment is now in Early Access

AI Questionnaire Assistance now routes security questionnaire questions to the right Subject Matter Expert automatically, cutting down on manual coordination.

Read More
SEPTEMBER 16, 2026
Feature EnhancementAI Questionnaire Assistance

Add Notes to Questionnaires

Questionnaire submitters, owners, and collaborators can now add a short context note directly to a questionnaire, so anyone answering or managing it has the details they need.

Read More
SEPTEMBER 14, 2026
Feature EnhancementAI Questionnaire Assistance

Multi-Product Questionnaires in AIQA (Early Access)

Answer one security questionnaire for multiple products in a single AIQA run, instead of duplicating the work or merging separate answers by hand. Multi-product Questionnaires reduces repetitive work while preserving human review. AIQA helps security teams produce clearer, more consistent responses for complex customer due diligence requests without manually merging separate answer sets.

Read More
SEPTEMBER 09, 2026
Major ReleaseThird-Party Risk Management

Agentic TPRM

Drata Third-Party Risk Management (TPRM) automates the vendor review lifecycle—from intake and inherent-risk tiering to evidence collection, criteria-based assessment, residual-risk evaluation, and decision tracking—in one workflow. It helps teams expand review coverage, apply consistent standards, and make evidence-backed vendor decisions with less manual work.

Read More
SEPTEMBER 02, 2026
Drata AICompliance AutomationEnterprise GRC

Custom Control Mapping Agent is now available for all

Customers can now use AI to connect their custom controls to the Drata objects that make their compliance programs complete and actionable—without manually identifying every downstream mapping or waiting for support with the process.

Read More
AUGUST 29, 2026
Integration

Connect Socket to Drata

Socket is now available in Drata—connect your account to import supply-chain security findings, track severity-based remediation SLAs, and strengthen compliance evidence within existing Vulnerability workflows.

Read More

Chart Your Course

Navigate to new worlds of trust with Drata.