← All integrations
Compliance controls, evidence, and risks.
You connect Drata once through its own sign-in screen, and every workflow you build can use it. Malleable never sees your password.
Use it in a workflow
Tell the architect, the AI that builds your workflows, what you want done in your own words. For example:
Each week, check Drata for failing compliance controls and assign each one to its owner.
Access and security
- You grant access on Drata's own consent screen, and Malleable stores the resulting token, never your password.
- Every run uses the connection the workflow's owner set up, so anyone who can run the workflow acts with that account's access in Drata. Connect an account or key with only the access the workflow needs.
- You can revoke access at any time in Drata's settings.
Malleable is SOC 2 Type II certified and doesn't train AI models on your data. More in Security & data handling and our Trust Center.
Connection details for IT
Drata publishes its own MCP server, which workflows connect to at https://mcp.drata.com/mcp/.