Drata Customer Constellation Program Terms

1. Overview and acceptance

These Customer Constellation Program Terms (“Terms”) govern participation in the Drata Customer Constellation program (the “Program”). The Program is offered by Drata Inc., a Delaware corporation, together with its affiliates and subsidiaries (“Drata,” “we,” “us,” or “our”).

Customer Constellation is Drata’s customer advocacy program. It is designed to allow participating customers to opt into advocacy opportunities that match their interests, availability, and internal policies, while preserving transparency, flexibility, and appropriate guardrails.

By registering for, joining, or participating in the Program, you agree to these Terms as of the date you accept them or otherwise participate in the Program.

2. Eligibility

The Program is intended for business representatives of current Drata customers and other individuals expressly invited or approved by Drata.

The Program is not open to:

  • current employees, officers, directors, contractors, or agents of Drata or its parent, subsidiaries, or affiliates;

  • immediate family members or members of the same household of any such person;

  • any person professionally involved in the development, administration, or operation of the Program;

  • employees or representatives of governments, government agencies, state-owned entities, or government-affiliated organizations to the extent participation in the Program or acceptance of rewards would be restricted, inappropriate, or prohibited; 

  • any person whose employer policies, contractual obligations, or applicable law would prohibit participation in the Program or acceptance of any related reward or incentive; or

  • any person employed by or affiliated with a Drata competitor.

For clarity, a person is not ineligible solely because their company is also a vendor to Drata, provided that they are otherwise an eligible current customer representative or expressly invited participant and that their participation complies with these Terms and any applicable internal policies or legal restrictions.

By participating, you represent and warrant that:

  • you are at least 18 years old;

  • you have authority to participate on your own behalf and, where applicable, on behalf of your employer or organization for the specific activity involved;

  • your participation will not violate your employer’s policies, your contractual obligations, or any applicable laws, regulations, ethics rules, or procurement restrictions; 

  • you will participate only in activities that are appropriate for your role, organization, and jurisdiction; and

  • you will not participate in the Program to build a similar or competitive product or service or otherwise engage in competitive analysis or benchmarking.

Drata may deny, limit, or revoke participation at any time if participation would create legal, compliance, conflict-of-interest, sanctions, export-control, or brand-risk concerns. This clause is intended to mirror Drata’s standard sanctions and export-control approach reflected in its public Terms of Service - Subscription Agreement.

3. Nature of the Program

The Program is an opt-in advocacy program. Participation is voluntary, opportunity-based, and non-exclusive. Joining the Program does not obligate you to participate in any specific activity, and Drata is not obligated to offer any minimum number of opportunities.

Program opportunities may include, for example:

  • reference conversations;

  • case studies, testimonials, and written customer stories;

  • speaking engagements, webinars, panels, and events;

  • product feedback conversations, advisory participation, and beta-related discussions;

  • peer networking or community opportunities;

  • co-marketing initiatives; and

  • logo or brand participation, where separately approved.

Drata may decide, in its sole discretion,  which participants to invite for which opportunities based on factors such as fit, availability, advocate experience, prior participation, customer health, and internal business needs. Drata may also, in its sole discretion,  pause outreach or decline to invite a participant in order to prevent fatigue, protect the customer relationship, or comply with internal guardrails.

4. No obligation to participate

Every opportunity is optional. You may decline any request, set boundaries, request limitations, or opt out of future outreach at any time.

However, if Drata and your organization have separately agreed in a contract, order form, statement of work, case study approval, publicity consent, or other written agreement to a specific advocacy, publicity, reference, or similar commitment, that separate agreement will govern that specific commitment to the extent applicable. Participation in the Program does not by itself create any additional obligation beyond the scope of any such separately agreed commitment.

Drata may maintain internal participation preferences, engagement history, and similar program records in order to manage advocate fit, frequency, and experience in accordance with these Terms and Drata’s Privacy Notice.

5. Recognition, gifts, and incentives

Drata may offer participants reasonable recognition, thank-you items, event access, gifts, swag, or other limited incentives in connection with certain Program activities, subject to applicable law, Drata policy, and availability. Not all opportunities will involve any reward or compensation, and Drata may modify, substitute, cap, suspend, or discontinue any incentive or reward offering at any time.

Unless expressly stated otherwise, rewards are non-transferable, not redeemable for cash, have no cash value and subject to availability. Drata is not obligated to replace lost, stolen, expired, or unavailable rewards except to the extent required by law.

You are solely responsible for determining whether you are permitted to accept any gift, benefit, reimbursement, or other item of value. Drata may require additional approvals, confirmations, or documentation before offering or providing any incentive.

You are also solely responsible for any taxes, duties, reporting obligations, disclosure obligations, or similar liabilities associated with the receipt or use of any reward or incentive. If required by law, Drata may issue tax documentation or request information needed to administer or report a reward or incentive.

You agree to comply with all laws, regulations, employer policies, professional rules, procurement restrictions, and government or ethics requirements that apply to your participation in the Program or your acceptance of any reward or incentive.

If Drata requests a review, testimonial, endorsement, or similar public-facing statement in connection with any incentive, Drata does not require that the statement be positive, and participation must not be conditioned on providing a favorable opinion. Where applicable, participants must make any legally required disclosures of their relationship with Drata or of any incentive received, and Drata may provide instructions for doing so.

6. Customer content, quotes, testimonials, and recordings

Participation in the Program does not by itself grant Drata a blanket right to use your name, image, voice, likeness, job title, company name, quote, testimonial, presentation, recording, or other materials in marketing, sales, advertising, or other public-facing content.

However, when you choose to participate in a specific advocacy activity and approve a related asset for publication or use, such as a case study, customer story, testimonial, webinar, panel appearance, recording, or similar content, Drata may use the approved asset and may reasonably reuse approved excerpts or components of that asset in connection with Drata’s marketing, sales, advertising, social, event, and outreach efforts, so long as that use is consistent with the substance of what you approved and is not misleading.

For example, if you approve a published case study, Drata may also reuse approved quotes, excerpts, screenshots, recordings, or similar approved materials from that story in other channels unless you communicate a narrower limitation and Drata agrees to that limitation.

If a specific activity is subject to additional written limits, approval language, release terms, or email-confirmed scope restrictions, those activity-specific terms will control.

You represent that you have the rights and permissions necessary to provide any materials you submit and to authorize the approved use of those materials.

7. Customer names, logos, and brand assets

Participation in the Program does not by itself give Drata blanket permission to use any customer logo, trademark, service mark, trade name, or other brand asset in any manner Drata chooses.

However, if you agree to participate in an approved case study, customer story, or similar published advocacy asset, Drata may use your company name and logo in that asset and in the reasonable promotion and distribution of that asset, including on Drata-owned properties, sales materials, advertising, and outreach, unless you specifically ask that such use be limited, for example, to the case study itself only, and Drata agrees to that limitation.

Drata may also offer separate opt-in opportunities, missions, or approvals for broader logo or brand usage. If a separate logo permission, campaign-specific approval, or other written limitation applies, that more specific permission or restriction will control.

8. Confidentiality

In connection with the Program, either party may share non-public information, including roadmap details, product plans, business information, or other confidential materials. Each party agrees to use the other party’s confidential information only for the relevant Program activity and not to disclose it to third parties except as authorized or required by law.

If a specific activity involves deeper information sharing, Drata may require a separate NDA, customer agreement, event release, speaker form, or other supplemental terms.

9. Participant responsibilities

You agree that you will:

  • provide accurate and current information in any Program intake or profile;

  • participate honestly and in good faith;

  • make statements only about your own genuine experience and opinions;

  • avoid making false, misleading, or unsubstantiated claims about Drata or any third party;

  • follow any applicable platform rules, community rules, or event requirements for a given activity; and

  • notify Drata if your availability, permissions, or willingness to participate materially changes.

10. Privacy

Drata may collect and process personal information related to Program participation in accordance with Drata’s Privacy Notice, available at Drata Privacy Notice. Drata’s Privacy Notice explains how Drata handles personal data when individuals register for or participate in Drata events, programs, marketing, and promotional activities.

If you provide Drata with information about another individual in connection with the Program, you represent that you have any required permission to do so.

11. Third-party platforms and review sites

Some Program activities may take place on third-party platforms, including event systems, webinar tools, social media platforms, review sites, advocacy tools, or community platforms. Your use of those platforms may be subject to their separate terms, privacy notices, and community rules.

If Drata invites you to post a review, testimonial, or endorsement on a third-party platform, you remain responsible for complying with that platform’s rules and any applicable disclosure requirements. Drata reserves the right not to use, repost, or amplify content that appears misleading, non-compliant, or inconsistent with these Terms.

12. Modification, suspension, and termination

Drata may modify, pause, or discontinue the Program or any part of it at any time. Drata may also suspend, limit, or end an individual’s participation if Drata believes doing so is necessary for customer protection, compliance, legal, operational, or brand reasons.

You may opt out of the Program at any time by notifying Drata. Any activity-specific approvals already granted for published or in-progress materials will continue according to their terms unless the parties agree otherwise or applicable law requires a different outcome.

13. Disclaimers

The Program is offered on an as-available basis. To the fullest extent permitted by law, Drata disclaims any guarantee that any opportunity, reward, event slot, or promotional outcome will be available, offered, or achieved.

Nothing in the Program guarantees publicity, pipeline impact, business opportunities, speaking opportunities, product influence, or any specific result for any participant.

14. Limitation of liability

To the fullest extent permitted by law, Drata will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages arising out of or relating to the Program, even if advised of the possibility of such damages. This clause is intended to mirror Drata’s standard limitation-of-liability approach reflected in its public Terms of Service - Subscription Agreement.

15. Governing law and venue

These Terms are governed by the laws of the State of California, without regard to conflict-of-laws principles, and any dispute arising out of or relating to these Terms will be brought in the appropriate courts located in San Francisco County, California. This language is intended to mirror Drata’s current public Terms of Service structure.

16. Notices

Legal notices to Drata under these Terms should be sent to:

Drata Inc.
Attn: Legal Department
4660 La Jolla Village Drive, Suite 100
San Diego, CA 92122
Email: [email protected] 

This notice structure is intended to mirror Drata’s public Terms of Service. Please let us know if Legal would prefer a different notice approach for this program.

17. Entire agreement; supplemental terms

These Terms govern general participation in the Program. Certain activities may also require separate approvals, releases, event terms, speaker agreements, recording consents, case study approvals, logo permissions, or other supplemental terms. If there is a conflict between these Terms and an activity-specific approval or signed agreement, the more specific document will control for that activity.

18. Force Majeure

Drata will not be liable for any delay or failure to perform under these Terms to the extent caused by events beyond Drata’s reasonable control, including acts of God, natural disasters, public health events, labor disputes, civil unrest, war, terrorism, governmental actions, internet or telecommunications failures, or other similar events.

19. No waiver

A failure by either party to enforce any provision of these Terms will not constitute a waiver of that provision or any other provision.

20. Severability

If any provision of these Terms is found to be invalid, illegal, or unenforceable, that provision will be enforced to the maximum extent permitted by law, and the remaining provisions will remain in full force and effect.

21. Relationship of the parties

Nothing in these Terms creates any partnership, joint venture, agency, fiduciary, or employment relationship between the parties, and neither party has authority to bind the other.

22. Survival

Any provisions of these Terms that by their nature should survive termination or expiration of participation in the Program will survive, including provisions relating to confidentiality, approved use rights, limitations of liability, governing law, notices, and any accrued rights or obligations.

23. Contact

Questions about the Program may be directed to Drata’s customer advocacy team or any other contact designated by Drata.