Vanta
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | unreachable | 0 / 8 |
| Privacy policy | 6 / 6 | |
| security.txt | 6 / 6 | |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | some unreachable this week | 0 / 8 |
| Total | 79 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Vanta's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/vanta"><img src="https://thirdpartyindex.com/badge/vanta.svg" alt="Vanta transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/vanta)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center failing | snapshot | ||
| Subprocessor list vanta | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| security.txt | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
39 third parties, 4 affiliates. CSV · Atom
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services | Core Product; Infrastructure Hosting | US, EU or AUS | |
| Anthropic | Application AI Functionality; Vanta AI | US | |
| Browserbase | Application AI Functionality; Vanta AI | US | |
| Chameleon Intelligent Tech, Inc. | Application notifications; Core Product | US | |
| Cloudflare | Core Product; Hosting and Content Delivery | US, EU | |
| Coefficient.io | Analytics & Reporting; Data and analytics | US | |
| Cohere | Monitoring and Evaluation of AI Product Features; Vanta AI | US | |
| Confluent | Core Product; Platform Data Streaming | US | |
| Courier | Core Product; Customer Notification Delivery | US | |
| Dagster Labs | Data and analytics; Data pipeline orchestration | US | |
| Datadog | Core Product; Logging & Monitoring | US | |
| e2b | Application AI Functionality; Vanta AI | US | |
| Finch | HR Platform Integration Tool (customer optional); Optional integrations and tools | US | |
| Fivetran | Data and analytics; Logging & Monitoring | US | |
| Application AI Functionality; Vanta AI | US | ||
| Hatchet.run | Vanta AI; Workflow Orchestration | US | |
| Heap Inc. | Application Analytics; Data and analytics | US | |
| Intercom | Customer Support Tool; Support and account management | US | |
| kernel.sh | Application AI Functionality; Vanta AI | US | |
| Lakera | AI Security; Vanta AI | US | |
| Langchain (using Langsmith product) | Monitoring and Evaluation of AI product Features; Vanta AI | US | |
| Merge.dev | Optional integrations and tools; Platform Integration Tool (customer optional) | US | |
| Microsoft | Application AI Functionality; Vanta AI | US | |
| Mongo DB Inc. | Core Product; Database Hosting | US, EU or AUS | |
| OneSchema | CSV Importer (customer optional); Optional integrations and tools | US | |
| OpenAI, LLC | Application AI Functionality; Vanta AI | US | |
| Polytomic | Data Integration and Streaming; Data and analytics | US | |
| Qlik | Analytics support; Data and analytics | US | |
| reducto.ai | Document Parsing Tool; Vanta AI | US | |
| Riskey Technologies Ltd. | Vanta affiliates | Region local Vanta entity | |
| Salesforce | Subscription Management; Support and account management | US | |
| Secoda.co | Data Cataloging and Analysis; Data and analytics | US | |
| Sigma | BI Analytics; Data and analytics | US | |
| Snowflake Inc. | Data Warehouse; Data and analytics | US | |
| Statsig | Data and analytics; Product Analytics | US | |
| svix | Core Product; Webhook Delivery | US | |
| Tableau | Data Visualization Platform; Data and analytics | US | |
| WorkOS | Optional integrations and tools; SCIM integration (customer optional) | US | |
| Zapier | Support and account management; Workflow Automation | US |
Vanta affiliates (4)
Listed as a subprocessor by (32)
Purposes as each company states them.
Akuity akuity.io
Anaconda anaconda.com Security and compliance
Applied Compute appliedcompute.com Continuous security and compliance monitoring; Security
Artie artie.com
Black Forest Labs bfl.ai Continuous security and compliance monitoring
Brave brave.com Continuous security and compliance monitoring
Bronto bronto.io Compliance
CodeRabbit coderabbit.ai Continuous security and compliance monitoring; Security
Conveo conveo.ai **Processing Activity Description** Continuous security and compliance monitoring, evidence collection, and audit management. **Data Residency / Processing Location** European Union (Frankfurt) **Headquarters Location** San Francisco, United States; Security
Data Zoo datazoo.com GRC Compliance Tool-
Double doublehq.com Continuous security and compliance monitoring
Dromo dromo.io Continuous security and compliance monitoring
Expensify expensify.com Continuous security and compliance monitoring; Security
Guesty guesty.com Continuous security and compliance monitoring
Hyperbolic hyperbolic.ai Continuous security and compliance monitoring
Inngest inngest.com Continuous security and compliance monitoring
Kickbox kickbox.com Continuous security and compliance monitoring; Security
KrakenD krakend.io Continuous security and compliance monitoring
Mason bymason.com Continuous security and compliance monitoring
Motion usemotion.com Security management platform
Paddle paddle.com Continuous security and compliance monitoring; Security
Posit posit.co Continuous security and compliance monitoring
Retell AI retellai.com
Serverless Framework serverless.com Continuous security and compliance monitoring; Security
SigNoz signoz.io
Upstash upstash.com Continuous security and compliance monitoring
Usercentrics usercentrics.com Continuous security and compliance monitoring
Userflow userflow.com
WebFX webfx.com Continuous security and compliance monitoring; Security
Zilliz zilliz.com Compliance monitoring and risk assessment
nodedata.io nodedata.io Continuous security and compliance monitoring
oapps oapps.io Continuous security and compliance monitoring
Service status
5 incidents in the last 90 days (2 major or critical, 2 minor, 1 with no stated impact) · typically resolved in 9 h 23 min · longest major: 25 h 39 min
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Vendor assessment product test failures | minor | 9 h 23 min evidence | |
| Some Vanta AI features are unavailable | major | 1 h 30 min evidence | |
| Sync operations failing for GCP Firestore | major | 25 h 39 min evidence | |
| Interruption to Programmatic Vanta Agent Installations | minor | 3 days evidence | |
| HIPAA incorrect default variant | none | 3 h 7 min evidence | |
| MCP Servers Unavailable | none | 20 h 10 min evidence | |
| MSP Console users cannot access MSP Customer Domains | minor | 1 h 13 min evidence | |
| Integrations page failing to load integrations | minor | 17 min evidence |
As Vanta's status page reports its own incidents (scheduled maintenance left out), read every few hours since .
Changes
None since tracking began.