Fishladder

Compliance Frameworks

The Compliance section in Trust & Safety gives you a live view of your SOC 2, ISO 27001, and other compliance framework readiness — powered by your Drata data.

Prerequisites

  • A Drata account with API access enabled
  • Drata integration connected in Trust & Safety > Settings

Dashboard

The compliance dashboard at Trust & Safety > Compliance shows:

  • SOC 2 Type 2 timeline — Five phases from Policy Completeness through Audit Complete, with progress percentages
  • Framework overview — Summary cards for each connected compliance framework
  • Audit milestones — Track auditor engagement, firm name, start/completion dates, and certification expiry
  • AI compliance advisor — Chat panel with live Drata data context for SOC 2 guidance

Control Action Items

The Controls page lists every Drata control that needs attention. Each control shows a readiness checklist:

  • Evidence linked — Upload or link evidence artifacts
  • Policy linked — Associate a security policy document
  • Owner assigned — Assign a responsible team member
  • Monitoring enabled — Set up automated monitoring tests

Each item has a Fix in Drata link that takes you directly to the relevant section in Drata. The Open in Drata button links to the full control detail page.

Filter controls by status (Needs Work, Ready, Missing Evidence, Missing Policy, Missing Owner, Missing Monitoring) and search by name or code.

Evidence Collection

The Evidence page shows all Drata evidence items with:

  • Status indicators (implemented, not implemented, not applicable)
  • Related controls for each evidence item
  • Renewal dates and schedule types
  • Team member assignment — Assign evidence collection to specific team members
  • Direct links to Drata evidence detail pages

Audit Milestones

Track your audit progress by adding milestones for each phase:

  • Auditor name and firm
  • Start and completion dates
  • Certification expiry date
  • Notes for each milestone

Data Freshness

Drata data is cached for 5 minutes to avoid excessive API calls. Click the Refresh button on any compliance page to clear the cache and pull fresh data from Drata.