# Drata

- Domain: drata.com · Category: security
- Status page: https://status.drata.com (polled every 10 minutes; now operational)
- Incidents archived: 51 (34 major/critical, 4 maintenances), history since 2025-07-21
- Last 90 days: 8 incidents; open now: 0
- Silently edited or deleted incidents: 0

## Incidents by year

| Year | Incidents | Major/critical | Maintenance | Median duration |
| --- | --- | --- | --- | --- |
| 2025 | 23 | 16 | 0 | 3.0 h |
| 2026 | 28 | 18 | 4 | 14 h |

## Recent notable changes

| When (UTC) | Change | Summary |
| --- | --- | --- |
| 2026-10-08 13:40 UTC | [Major incident: Delayed scheduled compliance checks and ticket synchronization in the US region](https://rewindex.com/change/ib2e399cc5ebbfb.md) | Drata reported a major degradation delaying scheduled compliance checks and ticket synchronization for some US-region customers, including expiration checks, compliance and vendor review reminders, and linked ticket status updates. It started 2026-10-08 13:40 UTC and was resolved 2026-10-09 23:30 UTC, lasting 33 h 49 min. The web application and API remained available; no data loss was reported. |
| 2026-10-05 19:28 UTC | [Major incident: Some Policy PDF Downloads Missing Appendix Page](https://rewindex.com/change/ia35a9ffae022fb.md) | Drata reported a major incident: some downloaded policy PDFs lacked the “Policy version history” page; policy content remained complete and no data was lost. It ran from 2026-10-05 19:28 UTC to 2026-10-10 00:01 UTC (4 days 4 h). Drata restored pages across all regions for Policy Builder and uploaded PDFs; customers who downloaded or shared affected PDFs should download again. |
| 2026-09-24 18:56 UTC | [Major incident: Cron service degraded](https://rewindex.com/change/i97765a2714f275.md) | Drata reported major cron service degradation affecting background tasks that flag expired reports, update approval statuses, apply policies, and recalculate control readiness, potentially leaving compliance data stale. It started at 2026-09-24 18:56 UTC and was resolved at 2026-09-25 16:37 UTC, lasting 21 h 40 min; a fix was deployed and monitored. |
| 2026-09-01 15:14 UTC | [Critical incident: Multiple products unavailable](https://rewindex.com/change/iec93fd0dde3664.md) | Drata reported a critical outage affecting Trust Center Pages, Trust Center Admin Page, AIQA, and Compliance Monitoring (AI Summary), caused by upstream provider network service degradation. It started at 2026-09-01 15:14 UTC and was resolved at 2026-09-01 19:29 UTC, lasting 4 h 14 min; all impacted services were operational at resolution. |
| 2026-08-26 13:32 UTC | [Major incident: Public API in US region degraded](https://rewindex.com/change/i5d07eba1396c56.md) | Drata’s major US Public API degradation caused request failures and potentially incorrect framework/control readiness data from 2026-08-26 13:32 UTC to 2026-08-28 23:58 UTC (2 days 10 h). No data was lost; EU and APAC were initially unaffected. Drata deployed fixes and reported normal operation at resolution, with no customer action required. |
| 2026-08-21 01:00 UTC | [Critical incident: Brief SafeBase App Request Failures](https://rewindex.com/change/i3a72ace9fd5fa3.md) | Drata reported critical SafeBase request failures: some requests errored or timed out because edge traffic filtering rules blocked legitimate traffic. Recorded start and resolution were both 2026-08-21 01:00 UTC (computed duration: 0 min), although the vendor described approximately six minutes of failures on August 20. |
| 2026-08-11 21:06 UTC | [Major incident: Report and export downloads not being delivered to some users](https://rewindex.com/change/id1c54f41d8c4e4.md) | Drata reported a major incident affecting in-app completion notifications for some report and export downloads, with no evidence that files failed to generate or were lost. It started 2026-08-11 21:06 UTC and was resolved 2026-08-14 19:44 UTC, lasting 2 days 22 h; a fix was deployed and validated. |
| 2026-06-22 18:01 UTC | [Major incident: Bulk Actions on Personnel Degraded](https://rewindex.com/change/ie2449b06194fa5.md) | Drata temporarily disabled the 'Bulk Actions' button on the Personnel page, preventing customers from using that functionality. The vendor rated the incident major; it began 2026-06-22 18:01 UTC and lasted 4 days 3 h, resolving at 2026-06-26 21:18 UTC. Drata reported an edge case during validation and deployed a fix before resolution. |
| 2026-06-08 22:38 UTC | [Major incident: SafeBase \<\> Salesforce integration degradation](https://rewindex.com/change/icc6ba67cb7c5d2.md) | Drata reported major SafeBase Salesforce integration degradation starting 2026-06-08 22:38 UTC, resolved 2026-06-09 22:07 UTC after 23 h 28 min. Salesforce data lookups intermittently failed for a subset of customers due to refresh token expiration at its integration provider; SafeBase remained operational and no customer data was affected. The integration was fully restored. |
| 2026-06-04 16:22 UTC | [Major incident: Degraded AIQA Performance](https://rewindex.com/change/ibb9a03ef09a052.md) | Drata reported a major incident isolated to AIQA, with elevated errors attributed to degraded performance of an upstream provider. It ran from 2026-06-04 16:22 UTC to 2026-06-04 17:29 UTC, lasting 1 h 7 min. Drata reported that the provider stabilized and a fix was implemented before marking the incident resolved. |

Full timeline: [Drata changes](https://rewindex.com/company/drata/changes.md)
## Silent edits and deletions

_None._

## Page change history

| Page | URL | Versions | Last changed (UTC) | History |
| --- | --- | --- | --- | --- |
| Pricing | [https://drata.com/pricing](https://drata.com/pricing) | 0 |  |  |

_No page changes since the first snapshot._

## Latest 51 incidents

| Started (UTC) | Incident | Impact | Duration | Edited |
| --- | --- | --- | --- | --- |
| 2026-10-08 13:40 UTC | [Delayed scheduled compliance checks and ticket synchronization in the US region](https://stspg.io/tq2npvppk6wg) | major | 34 h |  |
| 2026-10-05 19:28 UTC | [Some Policy PDF Downloads Missing Appendix Page](https://stspg.io/mdy6zqrkprk7) | major | 4 d |  |
| 2026-09-24 18:56 UTC | [Cron service degraded](https://stspg.io/6bv6bkkkwrvs) | major | 22 h |  |
| 2026-09-19 18:43 UTC | [MSSP / Multi-Instance Management Client List Unavailable](https://stspg.io/zlq6ts3f0dqc) | minor | 1.6 h |  |
| 2026-09-01 15:14 UTC | [Multiple products unavailable](https://stspg.io/gzg3mb8znv9w) | critical | 4.3 h |  |
| 2026-08-26 13:32 UTC | [Public API in US region degraded](https://stspg.io/27p7vgjld6gk) | major | 2 d |  |
| 2026-08-21 01:00 UTC | [Brief SafeBase App Request Failures](https://stspg.io/kpn10gslk8hq) | critical | 0 min |  |
| 2026-08-11 21:06 UTC | [Report and export downloads not being delivered to some users](https://stspg.io/s5tgpxwm2tqk) | major | 3 d |  |
| 2026-06-22 18:01 UTC | [Bulk Actions on Personnel Degraded](https://stspg.io/jw7hkcp0ccr9) | major | 4 d |  |
| 2026-06-08 22:38 UTC | [SafeBase \<\> Salesforce integration degradation](https://stspg.io/8cdgcmkqvxn5) | major | 23 h |  |
| 2026-06-04 16:22 UTC | [Degraded AIQA Performance](https://stspg.io/5wljhg0t33hn) | major | 1.1 h |  |
| 2026-05-22 16:56 UTC | [Some service users and auditors unable to access their own tenant](https://stspg.io/85rzqkbvf1w4) | major | 7 d |  |
| 2026-05-22 14:49 UTC | [Policy Approvals Experiencing Disruptions](https://stspg.io/j1336yccd9wm) | minor | 3 d |  |
| 2026-05-20 17:56 UTC | [MSSP Tenant Access Issue](https://stspg.io/3ns7hzclwtts) | major | 2 d |  |
| 2026-05-14 10:54 UTC | [US Public API unavailable](https://stspg.io/hsgl3wtbx5tk) | critical | 2.7 h |  |
| 2026-05-08 15:54 UTC | [Real-time notifications delayed or not appearing](https://stspg.io/63808m608h0h) | minor | 3.4 h |  |
| 2026-05-08 00:54 UTC | [Salesforce Authentication Issue](https://stspg.io/y63mxffr81dk) | none | 5 d |  |
| 2026-05-07 17:07 UTC | [Salesforce Authentication Issue](https://stspg.io/gwh9jhn3fgt4) | minor | 1.3 h |  |
| 2026-04-28 17:09 UTC | [Completed Security Trainings Not Reflected Properly in Personnel Records](https://stspg.io/f2cqmnm9vdb1) | major | 6 d |  |
| 2026-04-23 16:34 UTC | [Some Automatic Compliance tests are delayed](https://stspg.io/dypz0bvxhtzw) | major | 2.1 h |  |
| 2026-04-16 18:08 UTC | [Drata API Magic Link Timeouts](https://stspg.io/c1vb97wyzcs4) | none | 3.6 h |  |
| 2026-04-02 02:02 UTC | [\[Scheduled\] DB Scheduled Maintenance](https://status.drata.com/incidents/lmgz0csc37v7) | none | 11 min |  |
| 2026-03-31 16:30 UTC | [Restricted Control Managers and Restricted Risk Managers Unable to Log In](https://stspg.io/rqpwtbr73vyq) | minor | 7.0 h |  |
| 2026-03-30 10:35 UTC | [Drata US, EU and APAC API planned maintenance](https://stspg.io/wc8d06b9hh59) | none | 37 h |  |
| 2026-03-16 16:55 UTC | [Guest Admin Access](https://stspg.io/2f94vsn4wsb8) | major | 2.4 h |  |
| 2026-02-28 23:00 UTC | [Database Maintenance](https://stspg.io/9jr1t18qsqr8) | none | 0 min |  |
| 2026-02-03 19:06 UTC | [Drata app not loading correctly](https://stspg.io/bxwh71nvs9n0) | critical | 5.0 h |  |
| 2026-02-02 21:10 UTC | [Notification outage](https://stspg.io/z81bnsy1x6zv) | major | 55 min |  |
| 2025-12-16 00:24 UTC | [Background tasks delayed](https://stspg.io/j3tjw86rbhzt) | major | 3.0 h |  |
| 2025-12-11 13:36 UTC | [SafeBase AI Questionnaire Service (AIQA) Down](https://stspg.io/vvl6k81x8871) | critical | 9.1 h |  |
| 2025-12-09 05:52 UTC | [Risk Management displaying outdated data](https://stspg.io/ctptv0sdp7rc) | minor | 17 h |  |
| 2025-12-05 09:11 UTC | [Issues loading Drata sites due to upstream provider outage](https://stspg.io/bpplldh2mqv0) | critical | 9 min |  |
| 2025-12-04 10:36 UTC | [Connectivity issues with EU API](https://stspg.io/h9rfg0krh6ss) | critical | 13 min |  |
| 2025-11-18 14:09 UTC | [Issues loading Drata sites due to upstream provider outage](https://stspg.io/4lxl792g9sq3) | major | 1.1 h |  |
| 2025-11-13 00:59 UTC | [Security Training Failures](https://stspg.io/bf8nmmdnspt8) | minor | 21 h |  |
| 2025-11-04 03:51 UTC | [Some customers unable to login](https://stspg.io/z01q2mfl9z5v) | critical | 23 h |  |
| 2025-10-31 03:08 UTC | [Intermittent Login Issues](https://stspg.io/61fytbrkhq8s) | major | 2 min |  |
| 2025-10-31 00:18 UTC | [Partial Outage for AI Answering](https://stspg.io/jzh3xd54t4yn) | major | 47 min |  |
| 2025-10-29 08:33 UTC | [Some device monitoring tests not progressing for some customers](https://stspg.io/nsr0zhzfggpb) | major | 3.2 h |  |
| 2025-10-21 19:13 UTC | [Some Okta users unable to login](https://stspg.io/92bbv8hrc1v5) | major | 3 min |  |
| 2025-10-20 09:02 UTC | [AWS Increased Error Rates and Latencies causing degradation to multiple services and support access.](https://stspg.io/hv1bc0x82jbc) | major | 3.0 h |  |
| 2025-09-30 23:04 UTC | [Intermittent issues in provisioning frameworks and policy approvals](https://stspg.io/wfb16r1pk1f7) | minor | 19 h |  |
| 2025-09-26 14:44 UTC | [Subset of compliance tests are not running](https://stspg.io/4wqrq60hrvcg) | critical | 5.3 h |  |
| 2025-09-18 14:10 UTC | [Multiple Policy ack. emails are being sent for archived policies.](https://stspg.io/rcgq9f4tr1v5) | major | 3.8 h |  |
| 2025-09-16 18:53 UTC | [Unable to complete approval process for a policy.](https://stspg.io/4hjgp129pxml) | minor | 2 d |  |
| 2025-08-27 19:29 UTC | [Some users can not download Control Evidence packages from Audit Hub](https://stspg.io/nzwfy6mc04x0) | minor | 1.7 h |  |
| 2025-08-14 19:08 UTC | [People Ops Role unable to login](https://stspg.io/355w2wm24kfk) | major | 43 min |  |
| 2025-08-14 16:14 UTC | [Email outage 08/14/2025](https://stspg.io/xktwzrn65mrl) | major | 20 min |  |
| 2025-08-12 11:22 UTC | [Some 'future hire' employees not transitioning to 'current'](https://stspg.io/1py8y8ctcmbz) | minor | 6.3 h |  |
| 2025-08-08 18:45 UTC | [Policy Approvals are blocking some policies from being published.](https://stspg.io/gp13dx977s4z) | minor | 6 d |  |
| 2025-07-21 19:41 UTC | [AIQA Processing](https://stspg.io/g846kbjcclxt) | major | 37 min |  |


## Charts

### Chart data: Drata status incidents per year
Grey: all non-maintenance incidents. Orange: major or critical. Years before Oct 2026 come from the vendor’s own status history.

| Year | Incidents | Major/critical |
| --- | --- | --- |
| 2025 | 23 | 16 |
| 2026 | 28 | 18 |

### Chart data: Incidents per month, last 36 months
By impact as reported by the vendor. Maintenance excluded.

| Month | Impact | Incidents |
| --- | --- | --- |
| 2025-07 | major | 1 |
| 2025-08 | major | 2 |
| 2025-08 | minor | 3 |
| 2025-09 | critical | 1 |
| 2025-09 | major | 1 |
| 2025-09 | minor | 2 |
| 2025-10 | major | 5 |
| 2025-11 | critical | 1 |
| 2025-11 | major | 1 |
| 2025-11 | minor | 1 |
| 2025-12 | critical | 3 |
| 2025-12 | major | 1 |
| 2025-12 | minor | 1 |
| 2026-02 | critical | 1 |
| 2026-02 | major | 1 |
| 2026-02 | none | 1 |
| 2026-03 | major | 1 |
| 2026-03 | minor | 1 |
| 2026-03 | none | 1 |
| 2026-04 | major | 2 |
| 2026-04 | none | 2 |
| 2026-05 | critical | 1 |
| 2026-05 | major | 2 |
| 2026-05 | minor | 3 |
| 2026-05 | none | 1 |
| 2026-06 | major | 3 |
| 2026-08 | critical | 1 |
| 2026-08 | major | 2 |
| 2026-09 | critical | 1 |
| 2026-09 | major | 1 |
| 2026-09 | minor | 1 |
| 2026-10 | major | 2 |

---
Canonical: https://rewindex.com/company/drata · Markdown: https://rewindex.com/company/drata.md · JSON: https://rewindex.com/api/v1/companies/drata · Generated 2026-10-18T00:37:03.270Z