The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Drata announced an agreement to acquire SafeBase on February 11, 2025. SecurityWeek reported the transaction value at $250 million, but Drata’s announcement did not disclose a purchase price. Current Drata materials show SafeBase operating within Drata’s product portfolio, combining compliance automation with trust centers and AI-assisted security-questionnaire workflows.
What happened
Drata said on February 11, 2025, that it had entered into a definitive agreement to acquire SafeBase. The announcement described a strategic combination, not a detailed transaction filing. On February 12, SecurityWeek reported that the deal was valued at $250 million.
The distinction matters: Drata’s official announcement confirmed the agreement but did not state the price. The $250 million figure should therefore be attributed to SecurityWeek’s report, rather than described as a company-confirmed purchase price.
Free tools Windows power users keep installed
One-click scans. No signup required.
As of 2026, Drata markets SafeBase products as part of its portfolio and describes a unified Drata and SafeBase trust-management platform. That makes “to acquire” historical wording, although no specific public closing date should be inferred from the product pages alone.
The timeline
| Date | What was reported |
|---|---|
| February 11, 2025 | Drata announced a definitive agreement to acquire SafeBase. |
| February 12, 2025 | SecurityWeek reported a transaction value of $250 million. |
| February 18, 2025 | Drata told customers that services, contracts, pricing and existing contacts would remain unchanged at that time. |
| 2026 | Drata’s product and help-center materials presented SafeBase trust-center functionality as part of the broader Drata experience. |
What each company contributed
| Drata | SafeBase |
|---|---|
| Compliance automation and continuous control monitoring | Public and private trust centers |
| Evidence collection and audit preparation | Customer-facing security and compliance disclosure |
| Vendor-risk and governance workflows | AI-assisted security-questionnaire completion |
Drata’s platform is primarily inward-facing: it helps an organization monitor controls, collect evidence and prepare for audits. SafeBase is primarily outward-facing: it helps a company explain its security posture to prospects, customers and third parties.
The strategic thesis is that the same controlled evidence should be reusable across audits, trust-center documents, sales security reviews and vendor-risk assessments. That is an analysis of the product fit, not a reported post-deal financial result.
Why the deal matters to GRC and security teams
From audit preparation to continuous trust management
Compliance software traditionally focuses on proving that controls exist and that evidence is ready for an auditor. Trust-center software focuses on distributing selected evidence to external audiences. Joining those functions can reduce duplicate work, provided the underlying documents remain accurate, approved and within scope.
Security reviews are part of the revenue process
Enterprise buyers often require questionnaires, certifications, policies and reports before signing a contract. A trust center can provide self-service access to approved material, while questionnaire assistance can accelerate first drafts. Drata has described SafeBase as connecting trust-center activity with revenue and security-review workflows.
Drata said SafeBase had more than 1,000 customers and that its trust centers had been linked to $15 billion in transactions over four years. Those are company-reported figures, not independently audited measures of revenue or transaction value. Drata also said its platform served more than 7,000 customers at the time of the announcement.
Third-party risk becomes part of the same workflow
Drata’s current documentation describes a SafeBase integration with its third-party-risk-management agent. The agent can collect publicly available documents from a vendor’s SafeBase Trust Center, request private access when necessary and use the material in a security assessment. Public documents and gated documents are treated differently, so access to a trust center is not automatically a complete risk review.
Is the $250 million price official?
Not in the public Drata announcement reviewed for this article. The defensible wording is: “SecurityWeek reported that the transaction was valued at $250 million.”
Recommended Free Tools
The available sources do not establish whether the reported value consisted of cash, stock, earn-outs, retention payments or other consideration. They also do not provide a public financing structure, closing conditions or a definitive closing date. Those details should not be invented or inferred from the headline figure.
What existing customers were told
In its February 18, 2025 customer guidance, Drata said:
- Existing services would continue without interruption.
- Existing contracts, terms and pricing would remain in place at that time.
- Sales, service, billing and payment contacts would not immediately change.
- Drata Trust Center Essential and Pro would not be immediately discontinued.
- Customers would eventually have the option to migrate to SafeBase Trust Center and/or SafeBase AI Questionnaire Assistance.
The FAQ said migration details were expected within 90 days, but the available source does not prove that every customer reached a migration milestone on that timetable. It also said exclusive packages for Drata customers were being developed without publishing SafeBase package pricing.
Rank #3
By May 2026, Drata help documentation said customers using the “New Drata experience” might manage their Trust Center through SafeBase, while Classic Drata customers continued to use the older Trust Center Essential and Pro documentation. Customers should therefore confirm their product experience, plan and migration path directly with Drata rather than assume that every account has the same features.
What the combined platform looks like now
Drata’s current SafeBase materials describe three connected layers:
- SafeBase Trust Center: a customer-facing portal for publishing security and compliance materials, separating public from private information and supporting self-service reviews.
- AI Questionnaire Assistance: a drafting and acceleration tool for security questionnaires using approved trust content.
- Drata compliance and GRC: continuous monitoring, evidence collection, audit readiness, vendor-risk management and governance workflows.
AI assistance should not be treated as autonomous approval. A generated answer can rely on outdated evidence, overstate a control or apply the wrong scope to a customer’s question. Security, compliance, legal and evidence owners still need to review material before it is sent.
Risks and unresolved questions
Migration and product naming
Combining legacy Drata Trust Center plans with SafeBase workflows can create duplicate settings, unfamiliar navigation and permission problems. A customer may also assume that an acquisition automatically migrates every trust center; it does not.
Pricing and contract scope
The acquisition FAQ did not disclose SafeBase pricing. A desired feature may depend on a plan, an upgrade or an enterprise package. Buyers should obtain written confirmation of included capabilities, migration services, renewal effects and data-export rights.
Freshness and document control
A trust center is only as reliable as its source material. Expired certifications, superseded policies or documents with the wrong organizational scope can undermine a security review. Organizations need named owners, review dates, approval workflows and expiration rules.
Public versus private evidence
Public trust-center content may be intentionally limited. Sensitive reports and details can require an access request, and that process may delay a review. Buyers should check which documents are available publicly and which require approval.
Vendor concentration
Using one provider for compliance automation, trust-center publishing, questionnaire assistance and third-party-risk workflows may improve efficiency while increasing dependence on that provider. Exit planning, exports, integrations and contractual service commitments deserve attention.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What this means for buyers
The combined offering is most relevant to B2B companies that handle frequent enterprise security reviews and want compliance evidence to feed customer-facing workflows. Before selecting it, compare:
- Whether approved compliance evidence can feed the trust center automatically.
- How questionnaire AI is grounded, reviewed and audited.
- Support for public, gated and private documents.
- Third-party-risk, CRM and sales-workflow integrations.
- Framework coverage, including SOC 2, ISO 27001, HIPAA and GDPR where relevant.
- Migration support for Classic Drata customers.
- Data export, contract flexibility and implementation requirements.
- Total cost compared with buying compliance, trust-center and questionnaire tools separately.
Drata and SafeBase are presented through a demo-led enterprise sales motion, and the available materials do not provide generally accessible public pricing for the combined packages. Alternatives such as Vanta, Secureframe, OneTrust and Whistic address overlapping but not identical needs; current prices and feature coverage should be verified directly.
Best Value
Bottom line
Drata’s SafeBase transaction is best understood as a product-convergence deal. Drata brought compliance evidence and GRC workflows; SafeBase brought the trust center and questionnaire layer that turns that evidence into customer-facing assurance. SecurityWeek reported a $250 million valuation, but Drata did not state that price in its official announcement. For customers, the practical story is a gradual move from separate legacy trust-center products toward an integrated Drata and SafeBase experience, with pricing, migration, AI governance and document freshness still requiring careful verification.
Frequently Asked Questions
Did Drata officially announce a $250 million purchase price for SafeBase?
No. Drata announced the acquisition agreement but did not state a price in its announcement. SecurityWeek reported the transaction value as $250 million.
Were Drata customers required to migrate to SafeBase immediately?
No. Drata’s February 2025 guidance said migration was initially optional and that existing Trust Center products would not be immediately discontinued. Current account-specific options may differ by product experience and plan.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsDoes SafeBase AI complete security questionnaires without human review?
It is described as AI assistance for drafting or accelerating responses. Organizations should review every answer against current, approved evidence before sending it.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
