Skip to main content
Drata logo

Drata

ISO/IEC 27001 evidence

Drata’s AI-native compliance automation & agentic trust management platform powers GRC and assurance (GRC +A) for startups, mid-size

drata.comCompliance and GRCLast verified 2 Nov 2026
Request the report Are you Drata?
ISO/IEC 27001 mark, CertReports state Vendor-stated as of 2 Nov 2026Vendor-stated

Drata and ISO/IEC 27001

Drata states it holds an ISO/IEC 27001 certificate. CertReports captured this on 2 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor states ISO/IEC 27001:2022 on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026ISO/IEC 27001:2022
Live page Snapshotsha256 32b863fb4d
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 257bdc4dd6
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 42d21666d8
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 372a269010
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 3c152066c6
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 38d298353e
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 0b4770188c
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 94d9e5d837
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 f5d72290a8
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 f314853efe
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 56823a70f3
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 7acb0aa487
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 faf250cb51
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 7f487a3e85
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 ed218fded1
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 961b9132ce
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026ISO/IEC 27001:2022
Live page Snapshotsha256 8ec05bbb56
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026ISO/IEC 27001:2022
Live page Snapshotsha256 8c4820ee22
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026ISO/IEC 27001:2022
Live page Snapshotsha256 af8be11579
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026ISO/IEC 27001:2022
Live page Snapshotsha256 b825f4421e
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026ISO/IEC 27001:2022
Live page Snapshotsha256 499817bcbc
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
17 Sep 2026ISO/IEC 27001:2022
Live page Snapshotsha256 cc367178b7
This is wrong
Vendor-statedVendor states ISO/IEC 27017:2015 on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026ISO/IEC 27017:2015
Live page Snapshotsha256 32b863fb4d
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 257bdc4dd6
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 42d21666d8
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 372a269010
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 3c152066c6
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 38d298353e
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 0b4770188c
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 94d9e5d837
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 f5d72290a8
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 f314853efe
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 56823a70f3
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 7acb0aa487
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 faf250cb51
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 7f487a3e85
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 ed218fded1
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 961b9132ce
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026ISO/IEC 27017:2015
Live page Snapshotsha256 8ec05bbb56
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026ISO/IEC 27017:2015
Live page Snapshotsha256 8c4820ee22
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026ISO/IEC 27017:2015
Live page Snapshotsha256 af8be11579
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026ISO/IEC 27017:2015
Live page Snapshotsha256 b825f4421e
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026ISO/IEC 27017:2015
Live page Snapshotsha256 499817bcbc
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
17 Sep 2026ISO/IEC 27017:2015
Live page Snapshotsha256 cc367178b7
This is wrong
Vendor-statedVendor states ISO/IEC 27018:2025 on its trust centre
as of 2 Nov 2026 · confidence 80%
SourceCapturedQuoteLinks
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026ISO/IEC 27018:2025
Live page Snapshotsha256 32b863fb4d
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 257bdc4dd6
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 42d21666d8
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 372a269010
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 3c152066c6
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 38d298353e
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 0b4770188c
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 94d9e5d837
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 f5d72290a8
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 f314853efe
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 56823a70f3
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 7acb0aa487
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 faf250cb51
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 7f487a3e85
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 ed218fded1
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026ISO/IEC 27018:2025
Live page Snapshotsha256 961b9132ce
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026ISO/IEC 27018:2019
Live page Snapshotsha256 8ec05bbb56
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026ISO/IEC 27018:2019
Live page Snapshotsha256 8c4820ee22
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026ISO/IEC 27018:2019
Live page Snapshotsha256 af8be11579
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026ISO/IEC 27018:2019
Live page Snapshotsha256 b825f4421e
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026ISO/IEC 27018:2019
Live page Snapshotsha256 499817bcbc
Drata trust centre (Drata)
Vendor trust centre · HTTP 200
17 Sep 2026ISO/IEC 27018:2019
Live page Snapshotsha256 cc367178b7
This is wrong

What is not public

  • The certificate expiry and scope statement are not in a public source yet; the state will move to Verified when a certification body register or the IAF CertSearch API confirms them.
What ISO/IEC 27001 means, and what it does not

Certified by an accredited certification body on a three-year cycle with annual surveillance. Scope statements matter and expiry drives the state. Any certificate still citing ISO/IEC 27001:2013 is treated as lapsed because the IAF transition deadline of 31 October 2025 has passed.

Read the ISO/IEC 27001 guide and browse all vendors with evidence

Questions buyers ask

Is Drata ISO 27001 certified?

Drata states it holds an ISO/IEC 27001 certificate as of 2 Nov 2026. Scope statements matter; check the certificate scope covers the product you are buying.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 17 Sep 2026ISO/IEC 27001 evidence addedA ISO/IEC 27001 row entered the index with state Vendor-stated.

Alternatives with ISO 27001 evidence

Similar vendors (shared product tags or the Compliance and GRC category) whose ISO 27001 row is verified or vendor-stated, ranked by similarity.

Vanta logo

Vanta

Compliance and GRC

Vanta—the proven leader in automated compliance helping startups…

SOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state VerifiedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
3 verified · 9 stated2 Nov 2026
Diligent logo

Diligent

Compliance and GRC

Diligent's trusted GRC software helps boards and leaders clarify risk, elevate governance, and manage compliance in one secure, AI-powered

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state VerifiedISO 27001 mark, CertReports state Vendor-statedSOC 1 mark, CertReports state Vendor-stated
2 verified · 10 stated2 Nov 2026
Complif logo

Complif

Compliance and GRC

Compliance tools & AI agents for financial entities

SOC 2 mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27017 mark, CertReports state Vendor-statedISO 27018 mark, CertReports state Vendor-statedISO 9001 mark, CertReports state Vendor-stated
5 stated21 Sep 2026

Understand ISO 27001 evidence

All articles