Snapshot 254219
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Vanta Vanta is the leading agentic trust platform that helps businesses earn and prove trust. Over 16,000 companies like Atlassian, Duolingo, Golden State Warriors, Icelandair, Ramp, and Synthesia rely on Vanta to earn and prove trust continuously. Founded in 2018, Vanta serves customers in 58 countries with offices in Dublin, New York, San Francisco, Sydney, and London. grc@vanta.com Privacy PolicyOpens in new tab AWS Marketplace listingOpens in new tab Compliance SOC 2 Type II FedRAMP 20x ISO 27001:2022 ISO/IEC 42001:2023 ISO 27701 ISO 27017 ISO 27018 GDPR CCPA Trusted Cloud Provider (CSA) AWS Security Competency PCI DSS 4.0.1 Resources View all Compliance Vanta SOC 2 Type 2 ISO/IEC 42001 Certificate ISO/IEC 27001:2022 and 27701:2019 Certificate View 5 more Penetration Testing Penetration Test Executive Summary Report incl. retest (Feb 2026) Penetration Test Status of Findings (Feb 2026) Penetration Test Executive Summary Report 2026 Penetration Test Status of Findings (Oct 2026) Questionnaires Vanta's AI Security Assessment 2026 Vanta CAIQv4.1.0 2026 Vanta VSA Full 2026 Vanta VSA Core Privacy SaaS Platform DPIA Vanta Transfer Impact Analysis (TIA) Vanta's Data Processing Agreement (DPA) Opens in new tab Miscellaneous (Security) Vanta Architecture Diagram Vanta MCP Architecture Vanta CMMC Shared Responsibility Matrix (CRM) View 2 more Miscellaneous (Financial) Vanta Certificate of Liability Insurance Vanta Vendor Form View 1 more FedRAMP 20x Class B (Low) Vanta - FedRAMP 20x KSI 3PAO Validation Workbook Final 05.30.2025 (Public)Opens in new tab Vanta - FedRAMP 20x KSI 3PAO Validations and Digital Hash Final 05.30.2025 (Public)Opens in new tab View 22 more Other resources Controls Updated less than a minute ago View all Infrastructure Security Production database access restricted Remote access encrypted enforced Production data segmented View 4 more Infrastructure Security controls Organizational Security Employee background checks performed Security awareness training implemented Production inventory maintained View 2 more Organizational Security controls Internal Security Procedures Incident response plan tested Incident response policies established Management roles and responsibilities defined View 7 more Internal Security Procedures controls AI Security & Compliance Determining the scope of the AI management system AI policy Product Security Data encryption utilized Vulnerability and system monitoring procedures established Data and Privacy Data retention procedures established Data classification policy established Data deletion requests handled View 5 more Data and Privacy controls Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all Amazon Web Services • Infrastructure Hosting US, EU or AUS Core Product Mongo DB Inc. • Database Hosting US, EU or AUS Core Product Chameleon Intelligent Tech, Inc. • Application notifications US Core Product Cloudflare • Hosting and Content Delivery US, EU Core Product FAQ View all Updates View all Security Vanta Response to Node.js Vulnerabilities. Published October 22, 2026 On Wednesday, October 21, Node.js released security updates for several vulnerabilities, including CVE-2026-111497. Vanta uses Node.js within the Vanta application, and when these patches were released, the Vanta security and engineering teams acted immediately to patch our production systems. As of Thursday, October 22, all necessary patches have been applied. Security Vanta Response to PHP Vulnerabilities Published October 21, 2026 Vanta does not use PHP within the Vanta application, and our production infrastructure is not affected by these vulnerabilities. We are monitoring our vendors for any impacts and will take measures as appropriate to secure Vanta and our customers. General Vanta Web App Accessibility Published June 17, 2026 At Vanta, we believe everyone deserves an equitable digital experience. Today, as Trust Center Resources, we're sharing our Accessibility Statement and Accessibility Conformance Report (ACR), which outline our commitment to conforming with WCAG 2.2 Level AA, the steps we're actively taking to get there, and how to reach us if you encounter any barriers on app.vanta.comOpens in new tab. This is an ongoing effort, and we welcome your feedback at accessibility@vanta.com. Compliance Vanta's Government Solution is FedRAMP 20x Moderate Authorized Published April 29, 2026 Vanta is happy to announce Vanta's Government Solution (Vanta Government Cloud) is FedRAMP 20x Moderate Authorized. The FedRAMP 20x program is grounded in public-private partnership to bring greater automation and efficiency to the FedRAMP authorization process. By using automation, machine-readable validation, and Key Security Indicators (KSIs), FedRAMP 20x is able to streamline compliance, enable continuous monitoring, compress evaluation timelines, and lower the costs of FedRAMP authorization, all while preserving security standards. Thank you to the FedRAMP®Opens in new tab team for their leadership and partnership during Phase Two of the 20x pilot. Vanta is proud to be an early 20x adopter – not just as a pilot participant, but as a platform helping other CSPs pursue their own 20x authorizations. Read about the lessons we learned along the way - from KSIs to cross-team collaboration - in our latest blogOpens in new tab.