Drata: Some Policy PDF Downloads Missing Appendix Page
Drata reported a major incident: some downloaded policy PDFs lacked the “Policy version history” page; policy content remained complete and no data was lost. It ran from 2026-10-05 19:28 UTC to 2026-10-10 00:01 UTC (4 days 4 h). Drata restored pages across all regions for Policy Builder and uploaded PDFs; customers who downloaded or shared affected PDFs should download again.
Machine-written from the archived incident (Sol). Check the timeline before relying on it.
Timeline of updates
- investigating
We are currently investigating this issue.
- investigating
We identified an issue where some policy PDFs downloaded from Drata were missing the "Policy version history" page. This page lists versions, dates, owner, approvers, and publisher. It affected some policy versions published between late March and September 21, 2026. The policy content itself is complete and accurate, and no data was lost. Only the version history page was missing from the downloaded PDF. Policies published after September 21 include it correctly. We are working to restore the missing page for the affected policies. If you need a complete copy of a policy for an audit, please contact Support and we'll help. We'll post another update when the work is complete.
- investigating
We have restored the missing version history page for the large majority of affected policies created in Policy Builder, across all regions. During validation, we found that some restored pages left out earlier draft versions that had been discarded. These are older drafts removed before our approvals feature existed. We have fixed this, and we are now regenerating affected versions
- investigating
We have restored the missing version history page in policy PDFs for all affected builder policies. The history now matches the version History tab in Drata. What this means for you 1. The policy content was never affected, and no data was lost. 2. Downloaded PDFs for Policy Builder policies now include a complete and accurate version history page. No action is needed on your side. 3. If you downloaded a policy PDF earlier (before today), download it again to get the accurate version history page. 4. Uploaded policies (PDFs you uploaded to Drata) are still being restored. We will post an update here once that is complete.
- investigating
The missing "Policy version history" page has been restored in policy PDFs, for both policies created in Policy Builder and PDFs uploaded to Drata. We have verified the results across all regions, and this incident is now resolved. What this means for you 1. You don't need to do anything in Drata. 2. If you downloaded or shared an affected policy PDF before today, for example with an auditor, download it again to get the restored page. 3. Your policy content was never affected, and no data was lost. No new policy versions were created, and employees were not asked to accept policies again.
- resolved
This incident has been resolved.
Rewindex changes for this incident
- Major incident: Some Policy PDF Downloads Missing Appendix Page 2026-10-05 19:28 UTC
Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab). Drata profile · Recent Drata incidents · Markdown · JSON