Bulk CSV Import for Evidence

OCTOBER 06, 2026

Feature EnhancementCompliance AutomationEnterprise GRC

Drata now supports bulk import for Evidence Library items, so teams can create or update many evidence records at once, each with its own file and URL artifacts, using a guided, spreadsheet-style import.

Much of the evidence compliance teams rely on — pen test reports, vulnerability scans, attestation reports, certificates, architecture diagrams — is generated outside Drata and collected from multiple owners. Importing that evidence one record at a time doesn't scale once it spans dozens or hundreds of items.

What's New

  • Bulk create and update: Add new evidence or update existing items in the same import; Drata matches rows to existing evidence by name.
  • Multiple artifacts per item: Attach one or more files and URL links to each evidence item, including ZIP files that Drata expands automatically.
  • Real-time validation: Errors and warnings surface as you type, so issues get fixed before submission, not after.
  • Flexible data entry: Upload a CSV, paste from an existing spreadsheet, or enter rows directly — the same import experience already used for Assets, Risks, Controls, Tasks, and Policy Acknowledgements.

Learn more at: Bulk Import Evidence

Chart Your Course

Navigate to new worlds of trust with Drata.