Drata StrawberryThe vendor work, done and queued for one look
One sentence in, and a companion has been through the Drata vendors, put them where you can read them, and marked the ones it was not sure about.
Open the vendor. Check it against something else. Write the change. Move to the next one. That is the Drata afternoon nobody can hand off, and a companion does the whole pass and gives you back the batch, with nothing landing on a vendor until you approve it.
What it can do is exactly what Drata exposes to an account you authorise and nothing beyond it: 10 operations, 3 reads and 7 writes. In practice that means it can upload an user compliance document, upload a device compliance document and upload a background check, and work across the vendors, controls and assets.
The Drata API stops at Drata. A companion does not. The same run opens the customer's website, the supplier portal, the internal tool somebody built in 2019, because it is working the browser you are already signed into rather than calling in from outside it.
What does it already know about your controls?
3 of the 10 operations are reads.
Your account, not a guess at it: a companion can find vendors, find a personnel and find controls, and the full list below is the whole list, with nothing inferred from Drata's documentation.
The vendors are what most of this inventory is about, alongside the controls. A companion can hold all 10 of these operations and forty open tabs in the same pass, which is how an afternoon of Drata admin becomes a queue you review.
- Find Vendors
- Find Personnel
- Find Controls
Who signs off on a new control?
All 7 write operations wait for you.
A companion can upload an user compliance document, upload a device compliance document and upload a background check, and each one is staged on an approval card first: you see the vendor, the field and the new value before it lands in Drata.
Nothing in Drata is sent, changed or deleted on your behalf without that click, and a rejected card leaves the vendor exactly as it was. The gate is the same one on every surface, described at security.
- Upload User Compliance Document
- Upload Device Compliance Document
- Upload Background Check
- Update Vendor
- Create Vendor
- Create Control
- Create Asset
Can it find vendors every morning by itself?
Yes.
Saved as a routine, the Drata vendors pass runs at the hour you pick: the Monday sweep, the overnight refresh, the Friday check. Keep Awake holds the machine awake for the length of a run, so a scheduled pass finishes with the lid closed.
The operations playbook catalogues the other recurring shapes of the operations, the Drata vendors sweep among them, and finished runs are published at real runs.
Experience Strawberry for free
DownloadTrusted by fast-growing companies worldwide
Frequently asked questions
Strawberry is free to download and includes AI credits to start. Paid plans begin at $20/month. See pricing. · Reviewed · Canonical facts for AI agents