Drata's trust center, reviewed
For a Drata customer the built-in trust centre is the first thing to try. Its future is tied to Drata's purchase of SafeBase.
This site is operated by TrazTech Inc., which sets up and runs trust centres. We are not paid by this vendor and the link below is a plain link. Features and packaging change; confirm details with the vendor.
Drata Trust Center is the trust page connected to Drata, the compliance automation platform. It can present compliance status and host documents for buyers, drawing on the evidence Drata already collects. Drata announced its acquisition of SafeBase, a dedicated trust centre platform, in 2025, so ask how the two are packaged together now.
What does it do well?
- Connected evidence. Status reflects what Drata monitors for your audit.
- Fewer vendors. Your compliance platform and trust page in one place.
- A path to more. The SafeBase acquisition suggests deeper trust centre features within the same vendor.
What should we watch for?
- Which product you are buying. Confirm whether you are offered the built-in feature, SafeBase, or both.
- Plan inclusion and currency. Ask for CAD or confirm USD pricing.
- Operation. Requests and custom questions still need an owner.
Who is it for?
Drata customers. Compare alternatives in the comparison, and read the GetSOC2 Drata review for the compliance platform.
How do we set it up well?
- Choose the product. Confirm with Drata whether you are offered the built-in trust page, SafeBase, or both, and what each costs.
- Choose what status is public. Frameworks and dates at minimum. Live monitoring only if you are comfortable with failing tests being visible.
- Write what the platform cannot know. Subprocessors, data residency, privacy contact and incident commitments.
- Set approval rules for the SOC 2 report and other gated documents.
- Publish on your subdomain and give sales the link.
What should a Canadian customer check?
Where Drata hosts trust page content and viewer logs, the currency of the contract, and what happens to your trust page if products are consolidated after the SafeBase acquisition. Add a Canadian residency statement and Law 25 content where relevant; Canadian reviewers ask for those before anything else.
Who runs it?
The platform shows status; someone still answers custom questions and approves requests. If that is your CTO, compare the hours with a managed trust centre.
Common questions
Will Drata replace its trust centre with SafeBase?
Ask Drata. Acquisitions often lead to product consolidation, and your contract should say what happens if the product you buy is retired.
Can Drata customers use a managed trust centre?
Yes. A provider can operate your trust page on Drata or host a separate one fed by your Drata evidence.