Who uses Drata?
Agentic trust management platform that automates compliance evidence, GRC, vendor risk and security questionnaires. drata.com
24
companies use Drata
24 companies use Drata. 13% are in Cybersecurity. Confirmed or observed customers include OpenAI, T-Mobile, and Instacart. 18 of them are confirmed by a published case study, quote or press release.Latest check Oct 7, 2026: 24 of 24 companies checked, from 19 public sources.
- Category
- Compliance Automation
- Customers by proof
- 18 confirmed, 6 observed
- Top industry
- Cybersecurity, 13% of customers
- Security
- SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, ISO 42001, HIPAASource: trust.drata.com, checked Oct 7, 2026
- Most similar
- Vanta, no shared customer yet
- Website
- drata.com
What Drata does
Drata automates security compliance and governance with AI agents that collect evidence, monitor controls continuously and answer security questionnaires. It covers frameworks such as SOC 2, ISO 27001, ISO 42001, GDPR, HIPAA, PCI DSS, DORA and FedRAMP, with a trust center, third-party risk management and AI agent governance. Drata reports more than 8,500 customers.
Written by usedby from drata.com.
Main features
Common uses
24 companies use Drata
Every company below links to the public page that shows it uses Drata. Open a row to see the dated capture.
Customers over time: appears once we have six months of archived captures.
| Company | Industry | Proof |
|---|---|---|
 OpenAI | Artificial Intelligence | |
 T-Mobile | Telecommunications | |
 Instacart | Logistics & Supply Chain | |
 Brex | Fintech & Payments | |
 GitLab | DevTools & Infrastructure | |
 Okta | Cybersecurity | |
 UIPath | Artificial Intelligence | |
| Insurance & InsurTech | ||
 Wiz | Cybersecurity | |
 Mural | DevTools & Infrastructure |
Is Drata right for your company?
See what companies in your industry use, from the companies we track. Pick your industry.
Of the 74 Cybersecurity companies on usedby, 3 are listed as Drata customers. 1 uses only another Compliance Automation tool.
- Drata only, 4%
- Drata and another tool in Compliance Automation, 0%
- Another tool in Compliance Automation only, 1%
- No Compliance Automation tool we can see, 95%
These are companies usedby tracks because a public page names them, often Drata's own customer page. It is not a market share. A company counts once, whatever the number of tools it uses.
What customers report
Results as published by Drata and its customers. Each one links to its dated source. We quote, we do not score.
hundreds of hourseffort saved on compliance
JitterbitVendor case studyPublished Jan 27, 2026
70%Share of active customers who visited the Trust
SyncronVendor case studyPublished Jan 27, 202610–14 DayFaster sales cycles
GitLabVendor case studyPublished Feb 9, 2026
75%reduction in SOC 2 audit duration
Connective Broker ServicesVendor case studyPublished Feb 11, 2026
2xEfficiency improvement in vendor evaluations and ongoing assessments
Timeless Medical SystemsVendor case studyPublished Apr 17, 2026
700+ hoursSaved annually across 234 compliance controls
ZelloVendor case studyPublished May 5, 2026
3 minutesProcessing time per 100 questions with AIQA
OcrolusVendor case studyPublished May 12, 2026
2–3 hourssaved per week on manually filling out and processing inbound questionnaires
JellyfishVendor case studyPublished Jul 28, 2026
Read the story
FortinetVendor case studyPublished Jan 9, 2026Read the story
MuralVendor case studyPublished Apr 2, 2026Read the story
UIPathVendor case studyPublished May 27, 2026Read the story
BrexVendor case studyPublished Aug 14, 2026Continuing to build on Fortinet trusted processes, we wanted a platform where customers could self-serve and access our policies, certifications, and reports safely. SafeBase made that effortless.Trust and compliance go hand in hand. Customers now more than ever look at who they can trust with their data.Before you buy Drata
What Drata publishes on the points buyers check first, each with its source and check date.
| Security | SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, ISO 42001, HIPAA | trust.drata.com, checked Oct 7, 2026 |
|---|---|---|
| Data processing terms | A data processing agreement is available. | trust.drata.com, checked Oct 7, 2026 |
Questions to ask in your demo
- Which of your customers look like us, by industry and size?
- What does a pilot cost, and what decides the move to a full contract?
- Where is our data stored, who can access it, and is it used to train models?
- How does Drata work with the tools we already use?
Drata alternatives
Tools compared with Drata most often, with the customers they share.
| Tool | Customers | Shared with Drata | Compare |
|---|---|---|---|
 Vanta43 customers, 0 shared | 43 | 0 | Drata vs Vanta |
Questions about Drata
Who uses Drata?
24 companies use Drata, including OpenAI, T-Mobile, and Instacart.
Which industries use Drata?
The industries with the most Drata customers are Cybersecurity (3), Artificial Intelligence (2), and DevTools & Infrastructure (2).
What are the alternatives to Drata?
The tools compared with Drata most often are Vanta (43 customers, 0 shared). See all Drata alternatives.
How does usedby know who uses Drata?
Each company is linked to a public page that names it: Drata's customer page, a published case study, a press release or a job post. We save each page with a dated capture and check it again on each run. A company leaves the list only after three checks in a row that no longer find it, and at least 14 days after it was last seen. A company with a published case study or quote is never removed automatically.
What do confirmed, observed and signal mean?
Confirmed (18): a case study, a named quote or a press release. Observed (6): Drata shows the company on its own pages, for example a logo wall. Signal (0): a job post shows the company’s employees use Drata, the weakest proof. Every level counts as a customer, and each line shows its level.
How current is this list?
The most recent check was on October 7, 2026, and 24 of 24 companies on this list have been checked so far. A company leaves the list only after three checks in a row that no longer find it, and at least 14 days after it was last seen. A company with a published case study or quote is never removed automatically.
Changes and sources
New customers
We have not started tracking changes for this tool yet.