Drata Trust Center Terms of Use

Date Last Updated: August 12, 2025

PLEASE READ THESE TERMS OF USE CAREFULLY, AS IT CONTAINS IMPORTANT INFORMATION REGARDING YOUR RIGHTS, REMEDIES, AND OBLIGATIONS.

Drata Inc., including its affiliates and subsidiaries (collectively, “Drata,” “Company,” “we,” “us,” “our”) provides its trust center services (described below) to the entity or person accessing the trust center services ("you") through its applications and related services (collectively, the “Service”), subject to this Trust Center Terms of Use (as amended from time to time, the “Terms of Use”). By accessing, browsing, or otherwise using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms of Use. If you are using the Service on behalf of any entity, you represent and warrant that you are authorized to accept these Terms of Use on such entity’s behalf. If you do not accept the terms and conditions of these Terms of Use, you will not access, browse, or otherwise use the Service. We reserve the right, at our sole discretion, to change or modify portions of these Terms of Use at any time. Your continued use of the Service after the date any such changes become effective constitutes your acceptance of the new Terms of Use. You should periodically visit this page to review the current Terms of Use so you are aware of any revisions. If you do not agree to abide by these or any future Terms of Use, you will not access, browse, or use (or continue to access, browse, or use) the Service.

You may be subject to any additional terms applicable to such services that may be posted in the Service from time to time, including, without limitation, the Privacy Notice located at https://drata.com/privacy. All such terms are hereby incorporated by reference into these Terms of Use.

Services Description: The Service includes allows your organization to proactively share and upload information about their security program in a secure manner, and to optionally subscribe to, and to view other vendors' security portals; and, if you are participating in our third party risk management program, a platform that allows you to upload security-related information from third parties for processing and analysis. In addition, the Service allows you to access or request access to information about their security program in a secure manner, and in certain cases agree to non-disclosure terms and download such information.

Your Registration Obligations: You may be required to register for access to the Service. If you choose to register for the Service, you agree to provide and maintain true, accurate, current, and complete information about yourself as prompted by the registration form such as your name, business email address and company/employer name. Registration data and certain other information about you are governed by our Privacy Notice. If you are under 13 years of age, you are not authorized to use the Service, with or without registering. In addition, if you are between 13 and 18 years of age, you may use the Service, with or without registering, only with the approval of your parent or guardian. If you wish to have your personal information and/or access removed, you should contact our customer.

Account, Password, and Security: You are responsible for maintaining the confidentiality of your password and account, if any, and are fully responsible for any and all activities that occur under your password or account. You agree to (i) immediately notify us of any unauthorized use of your password or account or any other breach of security by emailing privacy@drata.com; and (ii) ensure that you exit from your account at the end of each session when accessing the Service.

Modifications to Service: The Company reserves the right to modify or discontinue, temporarily or permanently, the Service (or any part thereof) with or without notice. You agree that the Company will not be liable to you or to any third party for any modification, suspension or discontinuance of the Service.

General Practices Regarding Use and Storage: You acknowledge that the Company may establish general practices and limits concerning use of the Service, including without limitation the maximum period of time that data or other content will be retained by the Service and the maximum storage space that will be allotted on Company’s servers on your behalf. You agree that the Company has no responsibility or liability for the deletion or failure to store any data or other content maintained or uploaded by the Service. You acknowledge that the Company reserves the right to terminate accounts that are inactive for an extended period of time. You further acknowledge that the Company reserves the right to change these general practices and limits at any time, in its sole discretion, with or without notice.

Conduct: You are solely responsible for all code, video, images, information, data, text, software, music, sound, photographs, graphics, messages or other materials (“content”) that you upload, post, publish or display (hereinafter, “upload”) or email or otherwise use via the Service. We reserve the right to investigate and take appropriate legal action against anyone who, in our sole discretion, violates this provision, including without limitation, removing the offending content from the Service, suspending or terminating the account of such violators and reporting you to the law enforcement authorities, and you expressly agree that you have all necessary rights to upload and process all such information as intended by the Services and that in no event will we have liability or responsibility for obtaining such rights or processing such information. You agree to not use the Service to: email or otherwise upload any content that (i) infringes any intellectual property or other proprietary rights of any party; (ii) you do not have a right to upload under any law or under contractual or fiduciary relationships; (iii) contains software viruses or any other computer code, files or programs designed to interrupt, destroy or limit the functionality of any computer software or hardware or telecommunications equipment; (iv) poses or creates a privacy or security risk to any person; (v) constitutes unsolicited or unauthorized advertising, promotional materials, commercial activities and/or sales, “junk mail,” “spam,” “chain letters,” “pyramid schemes,” “contests,” “sweepstakes,” or any other form of solicitation; (vi) is unlawful, harmful, threatening, abusive, harassing, tortious, excessively violent, defamatory, vulgar, obscene, pornographic, libelous, invasive of another’s privacy, hateful racially, ethnically or otherwise objectionable; or (vii) in the sole judgment of the Company, is objectionable or which restricts or inhibits any other person from using or enjoying the Service, or which may expose us or its users to any harm or liability of any type; interfere with or disrupt the Service or servers or networks connected to the Service, or disobey any requirements, procedures, policies or regulations of networks connected to the Service; or violate any applicable local, state, national or international law, or any regulations having the force of law; impersonate any person or entity, or falsely state or otherwise misrepresent your affiliation with a person or entity; solicit personal information from anyone under the age of 18; harvest or collect email addresses or other contact information of other users from the Service by electronic or other means for the purposes of sending unsolicited emails or other unsolicited communications; advertise or offer to sell or buy any goods or services for any business purpose that is not specifically authorized; further or promote any criminal activity or enterprise or provide instructional information about illegal activities; or obtain or attempt to access or otherwise obtain any materials or information through any means not intentionally made available or provided for through the Service.

Commercial Use: Unless otherwise expressly authorized herein or in the Service, you agree not to display, distribute, license, perform, publish, reproduce, duplicate, copy, create derivative works from, modify, sell, resell, exploit, transfer or upload for any commercial purposes, any portion of the Service, use of the Service, or access to the Service.

Intellectual Property Rights: Service Content, Software and Trademarks: You acknowledge and agree that the Service may contain content or features (“Service Content”) that are protected by copyright, patent, trademark, trade secret or other proprietary rights and laws. Except as expressly authorized by the Company, you agree not to modify, copy, frame, scrape, rent, lease, loan, sell, distribute or create derivative works based on the Service or the Service Content. In connection with your use of the Service you will not engage in or use any data mining, robots, scraping or similar data gathering or extraction methods. If you are a user blocked by us or one of our customers from accessing the Service (including by blocking your IP address), you agree not to implement any measures to circumvent such blocking (e.g., by masking your IP address or using a proxy IP address). Any use of the Service or the Service Content other than as specifically authorized herein is strictly prohibited.

The Company’s name and logos are trademarks and service marks of Company (collectively the “Company Trademarks”). Other company, product, and service names and logos used and displayed via the Service may be trademarks or service marks of their respective owners who may or may not endorse or be affiliated with or connected to Company. Nothing in this Terms of Use or the Service should be construed as granting, by implication, estoppel, or otherwise, any license or right to use any of Company Trademarks displayed on the Service, without our prior written permission in each instance. All goodwill generated from the use of Company Trademarks will inure to our exclusive benefit.

Third Party Material: Under no circumstances will we be liable to you in any way for any content or materials of any third parties, including, but not limited to, for any errors or omissions in any content, or for any loss or damage of any kind incurred as a result of the use of any such content. You acknowledge that we do not pre-screen content, but that we and our designees will have the right (but not the obligation) in our sole discretion to refuse or remove any content that is available via the Service. Without limiting the foregoing, we and our designees will have the right to remove any content that violates these Terms of Use or is deemed by us, in our sole discretion, to be otherwise objectionable. You agree that you must evaluate, and bear all risks associated with, the use of any content, including any reliance on the accuracy, completeness, or usefulness of such content.

User Content: With respect to the content or other materials that you upload through the Service or share with our customers (collectively, “User Content”), you represent and warrant that you own all right, title, and interest in and to or otherwise have the rights to use for intended purposes of the Services such User Content, including, without limitation, all copyrights and rights of publicity contained therein. By uploading any User Content you hereby grant and will grant Company and its affiliated companies a nonexclusive, worldwide, royalty free, fully paid up, transferable, sub licensable, license to copy, display, upload, perform, distribute, store, modify and otherwise use your User Content in connection with the operation of the Service. You assume all risk associated with your User Content and the transmission of your User Content, and you have sole responsibility for the accuracy, quality, legality and appropriateness of your User Content.

You hereby authorize us and our third-party service providers to derive statistical and usage data relating to your use of the Service (“Usage Data”). We may use Usage Data for any purpose in accordance with applicable law and our Privacy Notice.

You acknowledge and agree that we may preserve content and may also disclose content if required to do so by law or in the good faith belief that such preservation or disclosure is reasonably necessary to: (i) comply with legal process, applicable laws or government requests; ii) enforce these Terms of Use; (iii) respond to claims that any content violates the rights of third parties; or (iv) protect the rights, property, or personal safety of the Company, its users and the public. You understand that the technical processing and transmission of the Service, including your content, may involve (a) transmissions over various networks; and (b) changes to conform and adapt to technical requirements of connecting networks or devices.

Copyright Complaints: We respect the intellectual property of others, and we ask our users to do the same. If you believe that your work has been copied in a way that constitutes copyright infringement, or that your intellectual property rights have been otherwise violated, you should notify us of your infringement claim in accordance with the procedure set forth below.

We will process and investigate notices of alleged infringement and will take appropriate actions under the Digital Millennium Copyright Act (“DMCA”) and other applicable intellectual property laws with respect to any alleged or actual infringement. A notification of claimed copyright infringement should be emailed to Company’s copyright agent at legalnotices@drata.com (Subject line: “DMCA Takedown Request”).

To be effective, the notification must be in writing and contain the following information: an electronic or physical signature of the person authorized to act on behalf of the owner of the copyright or other intellectual property interest;

a description of the copyrighted work or other intellectual property that you claim has been infringed;
a description of where the material that you claim is infringing is located on the Service, with enough detail that we may find it on the Service;
your address, telephone number, and email address;
a statement by you that you have a good faith belief that the disputed use is not authorized by the copyright or intellectual property owner, its agent, or the law;
a statement by you, made under penalty of perjury, that the above information in your Notice is accurate and that you are the copyright or intellectual property owner or authorized to act on the copyright or intellectual property owner’s behalf.

Counter-Notice: If you believe your User Content that was removed (or to which access was disabled) is not infringing, or that you have the authorization from the copyright owner, the copyright owner’s agent, or pursuant to the law, to upload and use the content in your User Content, you may send a written counter-notice containing the following information to the copyright agent:

your physical or electronic signature;
identification of the content that has been removed or to which access has been disabled and the location at which the content appeared before it was removed or disabled;
a statement that you have a good faith belief that the content was removed or disabled as a result of mistake or a misidentification of the content; and
your name, address, telephone number, and email address, a statement that you consent to the jurisdiction of the federal court located within Northern District of California and a statement that you will accept service of process from the person who provided notification of the alleged infringement.

If a counter-notice is received by the copyright agent, we will send a copy of the counter-notice to the original complaining party informing that person that it may replace the removed content or cease disabling it in ten (10) days. Unless the copyright owner files an action seeking a court order against the content provider, member or user, the removed content may be replaced, or access to it restored, in fourteen (14) days or more after receipt of the counter-notice, at our sole discretion.

Repeat Infringer Policy: In accordance with the DMCA and other applicable law, we have adopted a policy of terminating, inappropriate circumstances and at our sole discretion, users who are deemed to be repeat infringers. We may also at our sole discretion limit access to the Service and/or terminate the memberships of any users who infringe any intellectual property rights of others, whether or not there is any repeat infringement.

Indemnity and Release: You agree to release, indemnify, and hold the Company and its affiliates and their officers, employees, directors and agents (collectively, “Indemnitees”) harmless from any from any and all losses, damages, expenses, including reasonable attorneys’ fees, rights, claims, actions of any kind and injury (including death) arising out of or relating to your use of the Service, any User Content, your connection to the Service, your violation of these Terms of Use or your violation of any rights of another. Notwithstanding the foregoing, you will have no obligation to indemnify or hold harmless any Indemnitee from or against any liability, losses, damages or expenses incurred as a result of any action or inaction of such Indemnitee. Company will provide notice to you of any such claim, suit, or proceeding. The Company reserves the right to assume the exclusive defense and control of any matter which is subject to indemnification under this section, and you agree to cooperate with any reasonable requests assisting the Company’s defense of such matter. You may not settle or compromise any claim against the Indemnitees without the Company’s written consent. If you are a California resident, you waive California Civil Code Section 1542, which says: “A general release does not extend to claims that the creditor or releasing party does not know or suspect to exist in his or her favor at the time of executing the release and that, if known by him or her, would have materially affected his or her settlement with the debtor or released party.” If you are a resident of another jurisdiction, you waive any comparable statute or doctrine.

User Disputes: You agree that you are solely responsible for your interactions with any other user or customer of ours in connection with the Service and we will have no liability or responsibility with respect thereto. We reserve the right, but has no obligation, to become involved in any way with disputes between you and any other user of the Service.

General: These Terms of Use will be governed by the laws of the State of California without regard to its conflict of law provisions. With respect to any disputes or claims not subject to arbitration, as set forth above, you and Company agree to submit to the personal and exclusive jurisdiction of the state and federal courts located within San Francisco County, California. The failure of the Company to exercise or enforce any right or provision of these Terms of Use will not constitute a waiver of such right or provision. If any provision of these Terms of Use is found by a court of competent jurisdiction to be invalid, the parties nevertheless agree that the court should endeavor to give effect to the parties’ intentions as reflected in the provision, and the other provisions of these Terms of Use remain in full force and effect.