Snapshot 36666
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Vanta Vanta is the leading agentic trust platform that helps businesses earn and prove trust. Over 16,000 companies like Atlassian, Duolingo, Golden State Warriors, Icelandair, Ramp, and Synthesia rely on Vanta to earn and prove trust continuously. Founded in 2018, Vanta serves customers in 58 countries with offices in Dublin, New York, San Francisco, Sydney, and London. grc@vanta.com Privacy PolicyOpens in new tab AWS Marketplace listingOpens in new tab Compliance SOC 2 Type II FedRAMP 20x ISO 27001:2022 ISO/IEC 42001:2023 ISO 27701 ISO 27017 ISO 27018 GDPR CCPA Trusted Cloud Provider (CSA) AWS Security Competency PCI DSS 4.0.1 Resources View all Compliance Vanta SOC 2 Type 2 ISO/IEC 42001 Certificate ISO/IEC 27001:2022 and 27701:2019 Certificate View 5 more Penetration Testing Penetration Test Executive Summary Report incl. retest (Feb 2026) Penetration Test Status of Findings (Feb 2026) Questionnaires Vanta's AI Security Assessment 2026 Vanta CAIQv4.1.0 2026 Vanta VSA Full 2026 Vanta VSA Core Privacy SaaS Platform DPIA Vanta Transfer Impact Analysis (TIA) Vanta's Data Processing Agreement (DPA) Opens in new tab Miscellaneous (Security) Vanta Architecture Diagram Vanta MCP Architecture Vanta CMMC Shared Responsibility Matrix (CRM) View 2 more Miscellaneous (Financial) Vanta Certificate of Liability Insurance Vanta Vendor Form View 1 more FedRAMP 20x Class B (Low) Vanta - FedRAMP 20x KSI 3PAO Validation Workbook Final 05.30.2025 (Public)Opens in new tab Vanta - FedRAMP 20x KSI 3PAO Validations and Digital Hash Final 05.30.2025 (Public)Opens in new tab View 14 more Controls View all Infrastructure Security Production database access restricted Remote access MFA enforced Production network access restricted View 9 more Infrastructure Security controls Organizational Security Employee background checks performed Password policy enforced Security awareness training implemented View 3 more Organizational Security controls Internal Security Procedures Incident response plan tested Incident response policies established Management roles and responsibilities defined View 8 more Internal Security Procedures controls AI Security & Compliance Determining the scope of the AI management system Monitoring, measurement, analysis Continual improvement View 14 more AI Security & Compliance controls Product Security Data encryption utilized Vulnerability and system monitoring procedures established Data and Privacy Privacy policy established Data retention procedures established Privacy compliant procedures established View 10 more Data and Privacy controls Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all Amazon Web Services • Infrastructure Hosting US, EU or AUS Core Product Mongo DB Inc. • Database Hosting US, EU or AUS Core Product Chameleon Intelligent Tech, Inc. • Application notifications US Core Product Cloudflare • Hosting and Content Delivery US, EU Core Product FAQ View all Updates View all General Vanta Web App Accessibility Published June 17, 2026 At Vanta, we believe everyone deserves an equitable digital experience. Today, as Trust Center Resources, we're sharing our Accessibility Statement and Accessibility Conformance Report (ACR), which outline our commitment to conforming with WCAG 2.2 Level AA, the steps we're actively taking to get there, and how to reach us if you encounter any barriers on app.vanta.comOpens in new tab. This is an ongoing effort, and we welcome your feedback at accessibility@vanta.com. Compliance Vanta's Government Solution is FedRAMP 20x Moderate Authorized Published April 29, 2026 Vanta is happy to announce Vanta's Government Solution (Vanta Government Cloud) is FedRAMP 20x Moderate Authorized. The FedRAMP 20x program is grounded in public-private partnership to bring greater automation and efficiency to the FedRAMP authorization process. By using automation, machine-readable validation, and Key Security Indicators (KSIs), FedRAMP 20x is able to streamline compliance, enable continuous monitoring, compress evaluation timelines, and lower the costs of FedRAMP authorization, all while preserving security standards. Thank you to the FedRAMP®Opens in new tab team for their leadership and partnership during Phase Two of the 20x pilot. Vanta is proud to be an early 20x adopter – not just as a pilot participant, but as a platform helping other CSPs pursue their own 20x authorizations. Read about the lessons we learned along the way - from KSIs to cross-team collaboration - in our latest blogOpens in new tab. General New Resource Uploaded - Vanta CMMC Shared Responsibility Matrix (CRM) Published January 8, 2026 We have published a CMMC Shared Responsibility Matrix to provide transparency into how security responsibilities are shared between our organization and our customers. This document outlines responsibility boundaries across applicable CMMC practices and helps customers understand their role when using our software. You can view and download the matrix in Vanta’s Trust Center under Resources. Please let us know if you have any questions. Compliance Vanta's Latest SOC 2 Type II Report is Available Published December 12, 2025 We are excited to announce that Vanta has successfully completed another System and Organization Controls (SOC) 2 Type II audit without any noted exceptions. A SOC 2 Type II report describes a service organization's systems, whether the design of specified controls meets the relevant trust services categories, and assesses the effectiveness of those controls over a specified period of time. You can now view and download our SOC 2 report in Vanta's Trust Center Resources. Please let us know if you have any questions.