Do you sell AI governance or compliance software?Founding Vendor Placement — $499 for 12 months →
EU AI Act · Article 4 active · Article 50 from 2 Aug 2026 · high-risk rules transition through 2027–2028
Directory/Drata AI GRC
Source reachable — verification limited

SOFTWARE INTELLIGENCE PROFILE

Drata AI GRC

Compliance Automation

Continuous compliance platform providing automated control monitoring for ISO 42001 and organizational AI policies.

HeadquartersSan Diego, USA
Starting price$750/mo
Last verified9 Oct 2026Source reachable — verification limited
Source evidence2 recordsAutomated monitoring
PROFILE SNAPSHOT

What this platform provides

2 source records available

Continuous compliance platform providing automated control monitoring for ISO 42001 and organizational AI policies.

DEPLOYER$750/mo

Visit official website ↗

CUSTOMER FIT

Deployment & technical profile

Hosting / residency signalEU-Hosted
DeploymentMulti-Tenant SaaS
APIAvailable
Python SDKNot recorded
On-premiseNot recorded
Customer fitEnterprise Security & GRC Teams

Recorded export formats: Trust Center Report, CSV

PROFILE QUALITY

Profile completeness & evidence signals

93/100 completeness
Evidence completeness100%
Technical readiness signalModerate
Requirement mappings3
Editorial stateNo review flag recorded

These are transparent catalogue signals used for discovery and prioritisation. They do not establish legal compliance, procurement suitability or endorsement.

CAPABILITIES

Operational capabilities

ai-literacyai-system-inventoryrisk-management
REGULATORY MAPPING

Relevant compliance capabilities

These are Navigator's recorded capability mappings, not a statement that the vendor itself makes an AI Act compliance guarantee.

  • Article 4 (AI Literacy Checks)
  • Article 9 (Risk Controls)
  • Shadow AI Monitoring

Recorded active / current scope

  • Staff AI Policy Monitoring
  • Vendor Contract Risk

Recorded prepare / transition scope

  • Article 9 Automated Risk Control Evidence
LIMITATIONS

Recorded limitations

  • No model-level algorithmic bias testing capabilities
ASSURANCE SIGNALS

Evidence & standards

Labels below are separated by evidence type. A standard, framework, product capability or hosting note is not presented as a certification.

Certifications & attestations

SOC 2 Type IIISO 27001ISO 42001

Standards & frameworks

No standards/framework evidence recorded.

Other recorded evidence

No other evidence labels recorded.
Verification methodTechnical Documentation Review
ConfidenceMedium-High
Source records2
PROVENANCE

Evidence trail

Source reachable — verification limited

Automated monitoring records source availability and change signals. Non-material changes may be automatically assured; material regulatory, certification, commercial or technical changes remain subject to editorial confirmation.

  • Source reachable — verification limited — https://drata.com/ (checked 2026-10-09)
View recorded source URLs
Editorial & legal scope

This profile is informational and based on source information recorded in the Navigator dataset. “Source-checked” describes the Navigator's editorial/data process; it is not a legal certification, conformity assessment, endorsement, or guarantee of regulatory compliance.

Framework reference: Regulation (EU) 2024/1689 · Profile reviewed: 9 Oct 2026

Read the methodology →