Case Study: UiPath accelerates criteria-driven third-party risk management with Drata

UiPath aims to cut critical vendor reviews from days to minutes with Drata

UiPath, an enterprise automation platform company, faced significant challenges in managing third-party risk due to its expanding ecosystem of vendors and the rapid pace of technological change, particularly with AI. Their GRC team struggled with time-consuming, inconsistent, and point-in-time reviews that created bottlenecks in vendor onboarding. To address this, they partnered with Drata to work on its new TPRM Agent.

Through the design partnership with Drata, UiPath helped shape a criteria-driven, evidence-first approach to third-party risk management. The Drata TPRM Agent automates the review of vendor documentation, validates claims against evidence, and maps findings back to UiPath's requirements. This solution is transforming their process, with the goal of shortening critical vendor reviews from days to minutes, reducing manual effort, and allowing the team to focus on higher-value risk evaluation rather than administrative back-and-forth.

UiPath