Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

C1Risk is a technology company and the leading cloud-based, AI, enterprise risk and compliance management platform. Ou vision is to demystify and take the complexity out of risk management. We aim to To simplify your risk and compliance management for you to build and maintain the trust of your stakeholders. C1Risk sets the standard for companies that lead with risk, to win, with a full suite of solutions for a single, affordable price. GRC Regulations and Standards Library Policy Management Compliance Automation Enterprise Asset Management Risk Register and Risk Management Auto-calculated inherent and residual risk scoring Issue Management Incident Management Internal Audit Vulnerability Management Vendor Onboarding and Security Review Vendor Risk Scorecards REST API Integrations

Description

Drata is an agentic trust management platform for automating governance, risk, compliance, security assurance, and third-party risk management processes. Its Enterprise GRC capabilities bring controls, risks, policies, and evidence into a centralized system while allowing organizations to map controls across multiple frameworks and reuse compliance work. Continuous compliance automation collects evidence, monitors controls, identifies issues, and provides guided remediation to help teams remain audit-ready as their environments change. Drata's Trust Center provides a secure location where prospects, customers, and other stakeholders can review an organization's security posture, request documents, and obtain answers to trust-related questions. AI-powered questionnaire automation supports the questionnaire lifecycle from intake and triage through processing and response generation, using an evolving knowledge base to draft consistent answers. Third-party risk management uses AI agents to create assessment criteria from existing questionnaires, collect documents from vendor Trust Centers, perform risk assessments, and conduct vendor follow-ups. Drata also provides AI Agent Governance capabilities designed to discover AI agents within an enterprise, enforce organizational policies before agent actions execute, and produce records of agent decisions for auditing. The platform supports frameworks and regulations including SOC 2, ISO 27001, ISO 42001, GDPR, HIPAA, PCI DSS, DORA, FedRAMP, CMMC, and custom frameworks. Drata is designed to support organizations ranging from startups establishing their first compliance programs to enterprises managing governance, risk, compliance, and trust requirements across multiple business units and regions.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Jira Yes 
Okta Yes 
5X No 
Adaptive Security No 
Auditive No 
Azure DevOps No 
Black Kite Yes 
Blink No 
Checkr No 
Google Yes 
Gusto No 
Jamf Pro No 
Microsoft 365 No 
Observe No 
Odella No 
Pinpoint No 
Qualys Container Security Yes 
Salesforce Yes 
Shortcut No 
XFA No 

Integrations

Jira Yes 
Okta Yes 
5X Yes 
Adaptive Security Yes 
Auditive Yes 
Azure DevOps Yes 
Black Kite No 
Blink Yes 
Checkr Yes 
Google No 
Gusto Yes 
Jamf Pro Yes 
Microsoft 365 Yes 
Observe Yes 
Odella Yes 
Pinpoint Yes 
Qualys Container Security No 
Salesforce No 
Shortcut Yes 
XFA Yes 

Pricing Details

$18,000 per year
Full platform pricing (not priced by module) based on small, medium, large, enterprise.
Free Trial No 
Free Version Yes 

Pricing Details

$10,000/year
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Vendor Details

Company Name

C1Risk

Founded

2015

Country

United States

Website

www.c1risk.com

Vendor Details

Company Name

Drata

Founded

2020

Country

United States

Website

drata.com

Product Features

Audit

Alerts / Notifications Yes 
Audit Planning Yes 
Compliance Management Yes 
Dashboard Yes 
Exceptions Management Yes 
Forms Management Yes 
Issue Management Yes 
Mobile Access Yes 
Multi-Year Planning Yes 
Risk Assessment Yes 
Workflow Management Yes 

Business Continuity

Backup Log Yes 
Backup Scheduling No 
Compression Yes 
Continuous Backup Yes 
Encryption Yes 
Incremental Backup Yes 
Local Server Options Yes 
Multiple System Support Yes 
Remote Server Options Yes 
Secure Data Storage Yes 
Web Access / Restoration Yes 

Compliance

Archiving & Retention Yes 
Artificial Intelligence (AI) No 
Audit Management Yes 
Compliance Tracking Yes 
Controls Testing Yes 
Environmental Compliance Yes 
FDA Compliance Yes 
HIPAA Compliance Yes 
ISO Compliance Yes 
Incident Management Yes 
OSHA Compliance Yes 
Risk Management Yes 
Sarbanes-Oxley Compliance Yes 
Surveys & Feedback Yes 
Version Control Yes 
Workflow / Process Automation Yes 

GRC

Auditing Yes 
Disaster Recovery Yes 
Environmental Compliance No 
IT Risk Management Yes 
Incident Management Yes 
Internal Controls Management Yes 
Operational Risk Management Yes 
Policy Management Yes 

Integrated Risk Management

Audit Management Yes 
Compliance Management Yes 
Dashboard Yes 
Disaster Recovery Yes 
IT Risk Management Yes 
Incident Management Yes 
Operational Risk Management Yes 
Risk Assessment Yes 
Safety Management Yes 
Vendor Management Yes 

PCI Compliance

Access Control Yes 
Compliance Reporting Yes 
Exceptions Management Yes 
File Integrity Monitoring Yes 
Intrusion Detection System Yes 
Log Management Yes 
PCI Assessment Yes 
Patch Management Yes 
Policy Management Yes 

Policy Management

Approval Process Control Yes 
Attestation Yes 
Audit Trails Yes 
Policy Creation Yes 
Policy Library Yes 
Policy Metadata Management Yes 
Policy Training Yes 
Reporting / Analytics Yes 
Version Control Yes 
Workflow Management Yes 

Risk Management

Alerts/Notifications Yes 
Auditing Yes 
Business Process Control Yes 
Compliance Management Yes 
Corrective Actions (CAPA) Yes 
Dashboard Yes 
Exceptions Management Yes 
IT Risk Management Yes 
Internal Controls Management Yes 
Legal Risk Management Yes 
Mobile Access Yes 
Operational Risk Management Yes 
Predictive Analytics Yes 
Reputation Risk Management Yes 
Response Management Yes 
Risk Assessment Yes 

Product Features

Audit

Alerts / Notifications Yes 
Audit Planning Yes 
Compliance Management Yes 
Dashboard Yes 
Exceptions Management Yes 
Forms Management No 
Issue Management No 
Mobile Access Yes 
Multi-Year Planning Yes 
Risk Assessment Yes 
Workflow Management Yes 

Cloud Security

Antivirus No 
Application Security No 
Behavioral Analytics No 
Encryption No 
Endpoint Management No 
Incident Management No 
Intrusion Detection System No 
Threat Intelligence No 
Two-Factor Authentication No 
Vulnerability Management No 

Compliance

Archiving & Retention No 
Artificial Intelligence (AI) No 
Audit Management Yes 
Compliance Tracking Yes 
Controls Testing Yes 
Environmental Compliance No 
FDA Compliance No 
HIPAA Compliance No 
ISO Compliance No 
Incident Management No 
OSHA Compliance No 
Risk Management Yes 
Sarbanes-Oxley Compliance No 
Surveys & Feedback No 
Version Control Yes 
Workflow / Process Automation Yes 

GRC

Auditing Yes 
Disaster Recovery No 
Environmental Compliance No 
IT Risk Management Yes 
Incident Management No 
Internal Controls Management Yes 
Operational Risk Management Yes 
Policy Management Yes 

Integrated Risk Management

Audit Management No 
Compliance Management No 
Dashboard No 
Disaster Recovery No 
IT Risk Management No 
Incident Management No 
Operational Risk Management No 
Risk Assessment No 
Safety Management No 
Vendor Management No 

Alternatives

Alternatives

Onspring Reviews

Onspring

Onspring GRC Software