Vendor onboarding, standardized assessments, and risk tracking.
by Drata · drata.com · source ↗
Drata Third-Party Risk Management helps organizations make defensible vendor risk decisions using criteria-based reviews, agentic AI, and centralized evidence. It enables security and GRC teams to evaluate inherent and residual risk, maintain a centralized vendor inventory and risk register, and conduct recurring reviews with automated reassessment cadences. The product supports audit-ready records with full traceability and lets reviewers drive assessments using natural language.
Criteria-based, evidence-driven vendor risk decisions with full traceability Centralized system of record for vendor inventory, risk tiers, assessments, and evidence Agentic AI evaluates third parties against internal standards and flags gaps automatically Recurring reviews, tailored follow-up questionnaires, and automated reassessment cadences Natural language interface to launch reviews, surface vendor context, and log risk decisions Risk register with owners, status, and mitigation details for remediation and audit reporting
No datasheets, whitepapers, case studies, videos, or demos linked yet.