Your policies already live in Drata. The Drata integration brings the ones you choose into Evident’s Knowledge Base and keeps them in sync, so when a buyer asks how you handle access reviews or incident response, the answer cites the policy you actually approved, not a copy someone pasted in last year.
What does the Drata integration do?
It reads the Drata policies you pick, adds them to your Knowledge Base, and keeps them current. It never changes anything in Drata.
- You choose the policies. After you connect, pick which policies to sync. Leave out anything that shouldn’t inform answers.
- They stay current. Evident checks Drata on a schedule and picks up new versions of the policies you chose.
- Answers cite them. Questionnaire answers drawn from a synced policy show that policy as the source, like any other document in your Knowledge Base.
- Read-only. Evident reads policies through Drata’s public API and never writes back.
- You decide what happens on disconnect. When you disconnect Drata, you can keep the synced policies in your Knowledge Base or remove them.
How do I connect Drata?
Generate an API key in Drata, paste it into Evident along with your Drata region, then choose which policies you want to sync.
Create an API key in Drata
In Drata’s API settings, generate a key with access to your policies.
Paste it into Evident
In Evident, open Settings, then Integrations, then Drata. Paste the key and choose your Drata region (North America, Europe or Asia Pacific).
Choose the policies to sync
Pick the policies Evident should use. You can change the selection at any time.
If Drata stops accepting the key, the policies you already synced stay in your Knowledge Base, and Evident tells you to reconnect.
What about questionnaires sent through Drata?
Evident opens Drata’s Vendor Hub portal and fills it like any other portal, drafting answers from your evidence for your team to approve.
How does this fit with the rest of Evident?
Drata keeps your controls and policies audit-ready. Evident answers what buyers send, using Drata policies alongside your other sources.
That covers security questionnaires, RFIs, RFPs and vendor portals. Other sources include Google Drive, Confluence, Notion and GitHub, and every answer shows which one it came from.
Comparing tools? See Evident vs Drata (SafeBase) and the SOC 2 questionnaire guide.
Answer from the policies you already keep in Drata
Connect Drata once, choose your policies, and every questionnaire answer cites the version you approved.