What is the DRATA* AUDIT COMPLY charge?

Why it shows up like this

A line item showing DRATA* AUDIT COMPLY on your corporate credit card or bank statement stems from Drata Inc., a security software vendor providing the Drata Continuous Compliance & Audit Platform. Organizations use Drata to manage security audits across regulatory standards such as SOC 2 or ISO 27001. The service connects directly into cloud providers and identity platforms like Okta to gather continuous evidence for third-party auditors. Transactions regularly appear under merchant aliases like DRATA INC or DRATA COMPLIANCE.

Similar to competing automated compliance systems like Vanta, Drata charges represent enterprise-level B2B SaaS software contracts. If you see this billing line, someone on your engineering or security team committed your organization to an annual or multi-year subscription plan. The invoiced sum often varies depending on your company headcount and active compliance frameworks. In addition, these enterprise agreements generally feature automatic annual renewal clauses that charge your primary corporate payment method unless written non-renewal notice is submitted 30 to 60 days before the contract anniversary.

If you manage corporate finances and do not recognize this payment, verify whether your Chief Technology Officer or security lead procured the platform. You can access billing details by signing in to app.drata.com with your administrative credentials and reviewing the Billing & Plans section. If you need to adjust or cancel your contract terms, contact your assigned Drata customer success manager ahead of the auto-renewal deadline. For instances where a personal consumer card was billed with no connection to corporate IT infrastructure, your card number may have been stolen, and you should initiate a fraud dispute with your card issuer immediately.

Don’t recognize it? Common scenarios

Unexpected Drata charges typically occur when an engineering team signs an annual security agreement or an existing compliance contract auto-renews.

• A startup or enterprise security team onboarded Drata for continuous SOC 2, HIPAA, or ISO 27001 compliance.
• An annual contract for Drata Trust Center and compliance automation auto-renewed.
• Custom Frameworks or Continuous Control Monitoring modules were activated.

How to locate the invoice and cancel

Corporate administrators can access contract documents, employee licensing limits, and renewal dates within the Drata management portal.

1. Sign in to Drata Platform Go to app.drata.com and log in with your corporate SSO credentials.
2. Review Account Settings review to Settings > Billing & Plans to view registered headcount and active frameworks.
3. Manage Renewal Contact your assigned Drata Customer Success Manager to review upcoming contract terms.

Frequently Asked Questions

Read these key answers regarding Drata software commitments, audit integrations, and cancellation policies.

Dispute Rights & Fraud Prevention

Commercial cardholders should confirm software subscriptions with their internal IT department before initiating a formal bank chargeback.

If an unauthorized charge appears on an unrelated personal card, file a fraud report with your financial institution under the Fair Credit Billing Act.

Verified sources

Every claim on this page is checked against official sources — open them to confirm before you call your bank.

• Drata Continuous Compliance Platform https://drata.com
• CFPB: Disputing Unrecognized Charges https://www.consumerfinance.gov