# Who uses Drata?

24 companies use Drata on usedby: 18 confirmed, 6 observed and 0 signals. 13% of them are in Cybersecurity. Confirmed or observed customers include OpenAI, T-Mobile and Instacart. Latest check 2026-10-07: 24 of 24 companies checked, from 19 public sources.

> Agentic trust management platform that automates compliance evidence, GRC, vendor risk and security questionnaires.

- Category: [Compliance Automation](https://www.usedby.ai/tools/category/compliance-automation.md)
- Website: [drata.com](https://drata.com/)

## Customers

Every line is a customer, at one of three proof levels: confirmed (a case study, a named quote or a press release), observed (the vendor shows the company on its own pages) or signal (a job post shows the company's employees use the tool, the weakest proof). The first public proof is the first public page we found, not an adoption date.

| Company | Industry | Proof | First public proof | Source |
|---|---|---|---|---|
| [OpenAI](https://www.usedby.ai/companies/openai.md) | Artificial Intelligence | Observed | — | [drata.com](https://drata.com/customers), captured 2026-10-07 |
| [T-Mobile](https://www.usedby.ai/companies/t-mobile.md) | Telecommunications | Observed | — | [drata.com](https://drata.com/customers), captured 2026-10-07 |
| [Instacart](https://www.usedby.ai/companies/instacart.md) | Logistics & Supply Chain | Confirmed | — | [drata.com](https://drata.com/customers/instacart), captured 2026-10-07 |
| [Brex](https://www.usedby.ai/companies/brex.md) | Fintech & Payments | Confirmed | — | [drata.com](https://drata.com/customers/brex-tprm), captured 2026-10-07 |
| [GitLab](https://www.usedby.ai/companies/gitlab.md) | DevTools & Infrastructure | Confirmed | — | [drata.com](https://drata.com/customers/gitlab), captured 2026-10-07 |
| [Okta](https://www.usedby.ai/companies/okta.md) | Cybersecurity | Confirmed | — | [drata.com](https://drata.com/customers/okta), captured 2026-10-07 |
| [UIPath](https://www.usedby.ai/companies/uipath.md) | Artificial Intelligence | Confirmed | — | [drata.com](https://drata.com/customers/uipath), captured 2026-10-07 |
| [Nationwide](https://www.usedby.ai/companies/nationwide.md) | Insurance & InsurTech | Observed | — | [drata.com](https://drata.com/customers), captured 2026-10-07 |
| [Wiz](https://www.usedby.ai/companies/wiz.md) | Cybersecurity | Observed | — | [drata.com](https://drata.com/customers), captured 2026-10-07 |
| [Mural](https://www.usedby.ai/companies/mural.md) | DevTools & Infrastructure | Confirmed | — | [drata.com](https://drata.com/customers/mural), captured 2026-10-07 |
| [Connective Broker Services](https://www.usedby.ai/companies/connective-broker-services.md) | — | Confirmed | — | [drata.com](https://drata.com/customers/connective), captured 2026-10-07 |
| [Crossbeam](https://www.usedby.ai/companies/crossbeam.md) | — | Confirmed | — | [drata.com](https://drata.com/customers/crossbeam), captured 2026-10-07 |
| [EAB](https://www.usedby.ai/companies/eab.md) | — | Confirmed | — | [drata.com](https://drata.com/customers/eab), captured 2026-10-07 |
| [Fortinet](https://www.usedby.ai/companies/fortinet.md) | Cybersecurity | Confirmed | — | [drata.com](https://drata.com/customers/fortinet), captured 2026-10-07 |
| [Jellyfish](https://www.usedby.ai/companies/jellyfish.md) | — | Confirmed | — | [drata.com](https://drata.com/customers/jellyfish), captured 2026-10-07 |
| [Jitterbit](https://www.usedby.ai/companies/jitterbit.md) | — | Confirmed | — | [drata.com](https://drata.com/customers/jitterbit), captured 2026-10-07 |
| [MyOutDesk](https://www.usedby.ai/companies/myoutdesk.md) | — | Confirmed | — | [drata.com](https://drata.com/customers), captured 2026-10-07 |
| [Ocrolus](https://www.usedby.ai/companies/ocrolus.md) | — | Confirmed | — | [drata.com](https://drata.com/customers/Ocrolus), captured 2026-10-07 |
| [PCBB](https://www.usedby.ai/companies/pcbb.md) | — | Confirmed | — | [drata.com](https://drata.com/customers), captured 2026-10-07 |
| [Syncron](https://www.usedby.ai/companies/syncron.md) | — | Confirmed | — | [drata.com](https://drata.com/customers/syncron), captured 2026-10-07 |
| [Timeless Medical Systems](https://www.usedby.ai/companies/timeless-medical-systems.md) | — | Confirmed | — | [drata.com](https://drata.com/customers/timeless-medical), captured 2026-10-07 |
| [Zello](https://www.usedby.ai/companies/zello.md) | — | Confirmed | — | [drata.com](https://drata.com/customers/zello), captured 2026-10-07 |
| [Lemonade](https://www.usedby.ai/companies/lemonade.md) | Insurance & InsurTech | Observed | — | [drata.com](https://drata.com/customers), captured 2026-10-07 |
| [Tenable](https://www.usedby.ai/companies/tenable.md) | — | Observed | — | [drata.com](https://drata.com/customers), captured 2026-10-07 |

## Published results

Reviewed stories only. A figure is the vendor’s or the customer’s claim, quoted with its label; usedby did not measure it.

- [Jitterbit](https://www.usedby.ai/case-studies/jitterbit-drata.md): **hundreds of hours** effort saved on compliance (Vendor case study, published 2026-01-27)
- [Syncron](https://www.usedby.ai/case-studies/syncron-drata.md): **70%** Share of active customers who visited the Trust (Vendor case study, published 2026-01-27)
- [GitLab](https://www.usedby.ai/case-studies/gitlab-drata.md): **10–14 Day** Faster sales cycles (Vendor case study, published 2026-02-09)
- [Connective Broker Services](https://www.usedby.ai/case-studies/connective-broker-services-drata.md): **75%** reduction in SOC 2 audit duration (Vendor case study, published 2026-02-11)
- [Timeless Medical Systems](https://www.usedby.ai/case-studies/timeless-medical-systems-drata.md): **2x** Efficiency improvement in vendor evaluations and ongoing assessments (Vendor case study, published 2026-04-17)
- [Zello](https://www.usedby.ai/case-studies/zello-drata.md): **700+ hours** Saved annually across 234 compliance controls (Vendor case study, published 2026-05-05)
- [Ocrolus](https://www.usedby.ai/case-studies/ocrolus-drata.md): **3 minutes** Processing time per 100 questions with AIQA (Vendor case study, published 2026-05-12)
- [Jellyfish](https://www.usedby.ai/case-studies/jellyfish-drata.md): **2–3 hours** saved per week on manually filling out and processing inbound questionnaires (Vendor case study, published 2026-07-28)
- [Fortinet](https://www.usedby.ai/case-studies/fortinet-drata.md): story without a checked figure. (Vendor case study, published 2026-01-09)
- [Mural](https://www.usedby.ai/case-studies/mural-drata.md): story without a checked figure. (Vendor case study, published 2026-04-02)
- [UIPath](https://www.usedby.ai/case-studies/uipath-drata.md): story without a checked figure. (Vendor case study, published 2026-05-27)
- [Brex](https://www.usedby.ai/case-studies/brex-drata-3.md): story without a checked figure. (Vendor case study, published 2026-08-14)

12 of 18 stories shown. Every story: https://www.usedby.ai/case-studies

## Before you buy

Read on Drata’s own pages; the quote was found on the cited page.

| Fact | Value | Source | Checked |
|---|---|---|---|
| Security | SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, ISO 42001, HIPAA | [trust.drata.com](https://trust.drata.com/) | 2026-10-07 |
| Data processing terms | A data processing agreement is available. | [trust.drata.com](https://trust.drata.com/) | 2026-10-07 |

## Alternatives

- [Vanta](https://www.usedby.ai/tools/vanta.md): 43 public customers. Compare: https://www.usedby.ai/compare/drata-vs-vanta.md

More: https://www.usedby.ai/alternatives/drata.md

---
Source: https://www.usedby.ai/tools/drata · How we check: https://www.usedby.ai/methodology
