Authorized Sub-processors

Last Updated:
June 27, 2021


To support delivery of our Services, Drata may engage and use data processors with access to certain Customer Data (each, a "Subprocessor"). This page provides important information about the identity, location and role of each Subprocessor.

Drata currently uses third party Subprocessors to provide infrastructure services, and to help us provide customer support and email notifications. Prior to engaging any third party Subprocessor, Drata performs diligence to evaluate their privacy, security and confidentiality practices, and executes an agreement implementing its applicable obligations.

Infrastructure Sub-processors:

Drata may use the following Subprocessors to host Customer Data or provide other infrastructure that helps with delivery of our Services:

Sub-Processor Purpose Location
Amazon Web Services, Inc. Hosting & Infrastructure United States
Cloudflare, Inc. Content delivery network & WAF United States
Netlify, Inc. Content delivery network United States

Other Sub-processors:

Drata may use the following Subprocessors to perform other Service functions:

Sub-Processor Purpose Location
CKSource sp. z o.o. sp.k. WYSIWYG Poland
Datadog, Inc. Analytics on application and infrastructure logs for debugging, troubleshooting, auditing, and reporting United States
Drata Inc. Compliance Automation United States
Functional Software, Inc. Client-side error tracking for debugging, troubleshooting, auditing, and reporting United States
Google, Inc. Cloud-based Email Service Provider United States
HubSpot, Inc. CRM United States
Intercom, Inc. Cloud-based Customer Support Services United States
Merge API Inc. HRIS Integration Connector United States
MessageBird B.V. Socket Communication Layer Netherlands
Send Amply Inc. Cloud-based Email Delivery Services United States
Slack Technologies Cloud-based Team Chat Services United States
TYPEFORM SL Embedded Forms Spain
Vitally, Inc. Customer journey analysis and user notifications United States
WorkOS, Inc. SSO Integration Connector United States
Zapier Inc. Automation Workflow United States


As our business grows and evolves, the Sub-processors we engage may also change. We will endeavor to provide the owner of Customer's account with notice of any new Subprocessors to the extent required under the Agreement, along with posting such updates here. Please check back frequently for updates.