# Vanta Vanta declares [37 subprocessors](https://thirdpartyindex.com/vendors/vanta#subprocessors), plus 4 of its own affiliates, in [its subprocessor list](https://trust.vanta.com/subprocessors), which we last checked on 2026-11-11 ([evidence](https://thirdpartyindex.com/evidence/233660)). They include [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services), [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud) and [OpenAI](https://thirdpartyindex.com/vendors/openai). No published changes since we first read it on 2026-09-22. [145 tracked vendors](https://thirdpartyindex.com/vendors/vanta#used-by) name Vanta as a subprocessor, including [Hyperdoc (a.k.a. Recall.ai)](https://thirdpartyindex.com/vendors/hyperdoc-a-k-a-recall-ai), [Paddle](https://thirdpartyindex.com/vendors/paddle) and [Upstash](https://thirdpartyindex.com/vendors/upstash). Vanta (vanta.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index. - Page: https://thirdpartyindex.com/vendors/vanta - Documents last verified: 2026-11-11 - Transparency rating: 95/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 12/12; Trust center 8/8; Privacy policy 6/6; security.txt 6/6; Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8 - Supply chain: relies on 33 tracked vendors directly, 183 within two hops, 478 within three; 145 tracked vendors rely on it directly, 378 within two hops, 2100 within three - Cite as: Vanta, Third Party Index, https://thirdpartyindex.com/vendors/vanta (data CC BY 4.0) ## Documents | Document | URL | Last verified | Last changed | |---|---|---|---| | Trust center | https://trust.vanta.com/ | 2026-11-11 | 2026-11-11 | | Subprocessor list | https://trust.vanta.com/subprocessors | 2026-11-11 | 2026-11-07 | | Data processing addendum | https://www.vanta.com/legal/dpa | 2026-11-11 | 2026-09-22 | | Privacy policy | https://www.vanta.com/legal/privacy | 2026-11-11 | 2026-09-22 | | Terms | https://www.vanta.com/legal/terms | 2026-11-11 | 2026-09-22 | | Security page | https://www.vanta.com/company/security | 2026-11-11 | 2026-10-09 | | security.txt | https://www.vanta.com/.well-known/security.txt | 2026-11-11 | 2026-09-22 | | Status page | https://status.vanta.com/ | 2026-11-11 | 2026-11-11 | ## Subprocessors (37) As its own list states them. | Subprocessor | Purpose | Location | Listed since | |---|---|---|---| | [Amazon Web Services](https://thirdpartyindex.com/vendors/amazon-web-services.md) | Core Product; Infrastructure Hosting | US, EU or AUS | 2026-09-28 | | [Anthropic](https://thirdpartyindex.com/vendors/anthropic.md) (AI model provider: Anthropic) | Application AI Functionality; Vanta AI | US | 2026-09-28 | | [Chameleon Intelligent Tech, Inc.](https://thirdpartyindex.com/vendors/chameleon-intelligent-tech.md) | Application notifications; Core Product | US | 2026-09-28 | | [Cloudflare](https://thirdpartyindex.com/vendors/cloudflare.md) | Core Product; Hosting and Content Delivery | US, EU | 2026-09-28 | | [Coefficient.io](https://thirdpartyindex.com/vendors/coefficient.md) | Analytics & Reporting; Data and analytics | US | 2026-09-28 | | [Cohere](https://thirdpartyindex.com/vendors/cohere.md) (AI model provider: Cohere) | Monitoring and Evaluation of AI Product Features; Vanta AI | US | 2026-09-28 | | [Confluent](https://thirdpartyindex.com/vendors/confluent.md) | Core Product; Platform Data Streaming | US | 2026-09-28 | | [Courier](https://thirdpartyindex.com/vendors/courier.md) | Core Product; Customer Notification Delivery | US | 2026-09-28 | | Dagster Labs | Data and analytics; Data pipeline orchestration | US | 2026-09-28 | | [Datadog](https://thirdpartyindex.com/vendors/datadog.md) | Core Product; Logging & Monitoring | US | 2026-09-28 | | [e2b](https://thirdpartyindex.com/vendors/e2b.md) | Application AI Functionality; Vanta AI | US | 2026-09-28 | | [Finch](https://thirdpartyindex.com/vendors/finch.md) | HR Platform Integration Tool (customer optional); Optional integrations and tools | US | 2026-09-28 | | [Fivetran](https://thirdpartyindex.com/vendors/fivetran.md) | Data and analytics; Logging & Monitoring | US | 2026-09-22 | | [Google](https://thirdpartyindex.com/vendors/google-cloud.md) | Application AI Functionality; Vanta AI | US | 2026-09-28 | | [Hatchet.run](https://thirdpartyindex.com/vendors/hatchet.md) | Vanta AI; Workflow Orchestration | US | 2026-09-28 | | [Heap Inc.](https://thirdpartyindex.com/vendors/heap.md) | Application Analytics; Data and analytics | US | 2026-09-28 | | [Intercom](https://thirdpartyindex.com/vendors/intercom.md) | Customer Support Tool; Support and account management | US | 2026-09-28 | | kernel.sh | Application AI Functionality; Vanta AI | US | 2026-09-28 | | [Lakera](https://thirdpartyindex.com/vendors/lakera.md) | AI Security; Vanta AI | US | 2026-09-28 | | [Langchain (using Langsmith product)](https://thirdpartyindex.com/vendors/langchain.md) | Monitoring and Evaluation of AI product Features; Vanta AI | US | 2026-09-28 | | [Merge.dev](https://thirdpartyindex.com/vendors/merge-api.md) | Optional integrations and tools; Platform Integration Tool (customer optional) | US | 2026-09-28 | | [Microsoft](https://thirdpartyindex.com/vendors/microsoft.md) | Application AI Functionality; Vanta AI | US | 2026-09-28 | | [Mongo DB Inc.](https://thirdpartyindex.com/vendors/mongodb.md) | Core Product; Database Hosting | US, EU or AUS | 2026-09-28 | | [OneSchema](https://thirdpartyindex.com/vendors/oneschema.md) | CSV Importer (customer optional); Optional integrations and tools | US | 2026-09-28 | | [OpenAI, LLC](https://thirdpartyindex.com/vendors/openai.md) (AI model provider: OpenAI) | Application AI Functionality; Vanta AI | US | 2026-09-28 | | [Polytomic](https://thirdpartyindex.com/vendors/polytomic.md) | Data Integration and Streaming; Data and analytics | US | 2026-09-28 | | [Qlik](https://thirdpartyindex.com/vendors/qlik.md) | Analytics support; Data and analytics | US | 2026-09-28 | | [reducto.ai](https://thirdpartyindex.com/vendors/reducto.md) | Document Parsing Tool; Vanta AI | US | 2026-09-28 | | Riskey Technologies Ltd. | Vanta affiliates | Region local Vanta entity | 2026-09-28 | | [Salesforce](https://thirdpartyindex.com/vendors/salesforce.md) | Subscription Management; Support and account management | US | 2026-09-28 | | Secoda.co | Data Cataloging and Analysis; Data and analytics | US | 2026-09-28 | | [Sigma](https://thirdpartyindex.com/vendors/sigma.md) | BI Analytics; Data and analytics | US | 2026-09-28 | | [Snowflake Inc.](https://thirdpartyindex.com/vendors/snowflake.md) | Data Warehouse; Data and analytics | US | 2026-09-28 | | [svix](https://thirdpartyindex.com/vendors/svix.md) | Core Product; Webhook Delivery | US | 2026-09-28 | | [Tableau](https://thirdpartyindex.com/vendors/tableau.md) | Data Visualization Platform; Data and analytics | US | 2026-09-28 | | [WorkOS](https://thirdpartyindex.com/vendors/workos.md) | Optional integrations and tools; SCIM integration (customer optional) | US | 2026-09-28 | | [Zapier](https://thirdpartyindex.com/vendors/zapier.md) | Support and account management; Workflow Automation | US | 2026-09-22 | Read from ([evidence](https://thirdpartyindex.com/evidence/13733)). CSV: https://thirdpartyindex.com/vendors/vanta/subprocessors.csv AI model providers (or a cloud provider's AI model service) among these entries: 3. All vendors that list one: https://thirdpartyindex.com/ai ### Its own affiliates (4) - Vanta Technology Australia Pty Limited (Region local Vanta entity) - Vanta Technology Canada Limited (Region local Vanta entity) - Vanta Technology Ireland I Limited (Region local Vanta entity) - Vanta Technology UK Limited (Region local Vanta entity) ## Compliance As its trust center lists them. - Audited: SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, ISO/IEC 42001, PCI DSS, FedRAMP ([evidence](https://thirdpartyindex.com/evidence/36666)) - Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/36666)) - FedRAMP Marketplace: 20x Moderate · 1 agency authorization · since Apr 24, 2026 - FedRAMP Marketplace: 20x Low · 1 agency authorization · since Jul 25, 2025 ## Web Technologies Vanta's homepage made 261 requests to 56 domains, 28 services controlled by another company, and 3 domains not identified. Loaded on 2026-11-04 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data. 28 third parties by category: Advertising 9 (Google Cloud, The Trade Desk, Inc., Microsoft, StackAdapt, Podscribe, Reddit, Inc., Spotify AB; usually detected as Advertising: Xandr, Magnite, Inc.); Analytics 8 (HubSpot, Cloudflare, Clay, ZoomInfo, Magellan AI, LinkedIn, Meta, Intentsify, LLC); CDN 3 (jsDelivr, UNPKG, jQuery); Marketing automation 2 (OptinMonster, 6Sense Insights, Inc.); Live chat 1 (Qualified.com, Inc.); A/B Testing 1 (Webflow); Cookie compliance 1 (Osano); Issue trackers 1 (usually detected as Issue trackers: Sentry); Security 1 (usually detected as Security: Amazon Web Services); Video players 1 (reviewed: Vimeo). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these. ### Third parties (28) - Webflow: 65 requests to website-files.com, intellimize.co, d3e54v103j8qbb.cloudfront.net; Intellimize, Webflow 1.6.0 - Qualified.com, Inc.: 30 requests to qualified.com; Qualified - Google Cloud: 26 requests to google.com, doubleclick.net, gstatic.com, googletagmanager.com, fonts.googleapis.com, ajax.googleapis.com, google-analytics.com; DoubleClick Floodlight, Google Analytics, Google Font API, Google Hosted Libraries, Google Tag Manager (its subprocessor list names it too) - OptinMonster: 21 requests to omappapi.com; OptinMonster - 6Sense Insights, Inc.: 18 requests to 6sc.co, 6sense.com; 6sense - HubSpot: 11 requests to hubspot.com, hsforms.com, hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hsforms.net, hubapi.com; HubSpot, HubSpot Analytics - Cloudflare: 9 requests to cloudflare.com, cloudflareinsights.com; Cloudflare Browser Insights (its subprocessor list names it too) - The Trade Desk, Inc.: 8 requests to adsrvr.org; theTradeDesk - Microsoft: 6 requests to bing.com, bing.net; Microsoft Advertising (its subprocessor list names it too) - Clay: 5 requests to claydar.com; Clay Web Intent - StackAdapt: 5 requests to stackadapt.com; StackAdapt - ZoomInfo: 5 requests to zoominfo.com, zi-scripts.com; Zoominfo - Magellan AI: 4 requests to mgln.ai; Magellan AI - Osano: 4 requests to osano.com; Osano - LinkedIn: 3 requests to linkedin.com, licdn.com; Linkedin Insight Tag - Meta: 3 requests to facebook.net, facebook.com; Facebook Pixel 2.9.435 - Podscribe: 3 requests to pdscrb.com, d34r8q7sht0t9k.cloudfront.net; Podscribe - Reddit, Inc.: 3 requests to reddit.com, redditstatic.com; Reddit Ads - Spotify AB: 3 requests to spotify.com, byspotify.com; Spotify Pixel - jsDelivr: 3 requests to jsdelivr.net; jsDelivr - UNPKG: 2 requests to unpkg.com; Unpkg - Xandr: 2 requests to adnxs.com - Amazon Web Services: 1 request to on.aws (its subprocessor list names it too) - Intentsify, LLC: 1 request to intentsify.io; Intentsify - Magnite, Inc.: 1 request to rubiconproject.com - Sentry: 1 request to sentry.io - Vimeo: 1 request to vimeocdn.com - jQuery: 1 request to jquery.com; jQuery 3.6.0, jQuery CDN ### Unknown (3) Domains not identified yet: pointmediatracker.com, webflow.services, usbrowserspeed.com ### First party (1) - Vanta: 11 requests to vanta.com; Cloudflare, Cloudflare Turnstile, GSAP 3.15.0, HSTS, HTTP/3, Open Graph, Sentry, Vimeo, Webpack, core-js 3.25.0, lit-element 4.2.0, lit-html 3.3.0 13 tracked companies loaded by the homepage are not in Vanta's subprocessor list. A website can use a service without it processing customer data. ## Subprocessor of (145) Tracked vendors whose own subprocessor lists name it, and what they say they use it for. - [1000minds](https://thirdpartyindex.com/vendors/1000minds.md): Continuous security and compliance monitoring; Security - [Aimdoc](https://thirdpartyindex.com/vendors/aimdoc.md): Continuous security and compliance monitoring - [Air](https://thirdpartyindex.com/vendors/air.md): Contact: Data Privacy Officer privacy@vanta.com DPA:; Continuous Security and Compliance Monitoring - [AiSDR](https://thirdpartyindex.com/vendors/aisdr.md): Compliance Platform - [Akuity](https://thirdpartyindex.com/vendors/akuity.md) - [Allocadia](https://thirdpartyindex.com/vendors/allocadia.md): - Data Transfer Mechanism: SCC - Customer B2B Employee User Data Processed: First name, Last name, Business email, IP address; Customer third-party risk managem… - [Amplemarket](https://thirdpartyindex.com/vendors/amplemarket.md): Compliance; Used to manage and monitor our compliance and security practices - [Anaconda](https://thirdpartyindex.com/vendors/anaconda.md): Security and compliance - [Antavo](https://thirdpartyindex.com/vendors/antavo.md): Compliance platform for ISO and SOC frameworks - [apiphani](https://thirdpartyindex.com/vendors/apiphani.md): Continuous security and compliance monitoring; Governance, Risk Management, Compliance - [Applied Compute](https://thirdpartyindex.com/vendors/applied-compute.md): Continuous security and compliance monitoring; Security - [Artie](https://thirdpartyindex.com/vendors/artie.md) - [Autohive](https://thirdpartyindex.com/vendors/autohive.md): Continuous security and compliance monitoring - [B2Gnow](https://thirdpartyindex.com/vendors/b2gnow.md) - [Black Forest Labs](https://thirdpartyindex.com/vendors/black-forest-labs.md): Continuous security and compliance monitoring - [Blinq](https://thirdpartyindex.com/vendors/blinq.md) - [Brave](https://thirdpartyindex.com/vendors/brave.md): Continuous security and compliance monitoring - [Bronto](https://thirdpartyindex.com/vendors/bronto.md): Compliance - [Browser Use](https://thirdpartyindex.com/vendors/browser-use.md): Continuous security and compliance monitoring - [BuildBetter](https://thirdpartyindex.com/vendors/buildbetter.md) - [Capcade](https://thirdpartyindex.com/vendors/capcade.md): Security and compliance practices communication - [CardinalHQ](https://thirdpartyindex.com/vendors/cardinalhq.md): Continuous security and compliance monitoring - [Cerebrium](https://thirdpartyindex.com/vendors/cerebrium.md) - [Chaser](https://thirdpartyindex.com/vendors/chaser.md): Continuous security and compliance monitoring - [Chatbase.co](https://thirdpartyindex.com/vendors/chatbase-co.md): Continuous security and compliance monitoring; Security - [Chatwoot](https://thirdpartyindex.com/vendors/chatwoot.md): Security & Compliance monitoring; Used to monitor security controls and manage compliance programs and evidence. - [Clerk Chat](https://thirdpartyindex.com/vendors/clerk-chat.md) - [Cloudamize](https://thirdpartyindex.com/vendors/cloudamize.md): Continuous security and compliance monitoring - [CodeRabbit](https://thirdpartyindex.com/vendors/coderabbit.md): Continuous security and compliance monitoring; Security - [Contour](https://thirdpartyindex.com/vendors/contour.md): Continuous security and compliance monitoring - [Conveo](https://thirdpartyindex.com/vendors/conveo.md): Processing Activity Description Continuous security and compliance monitoring, evidence collection, and audit management. Data Residency / Processing Location E… - [Conversion](https://thirdpartyindex.com/vendors/conversion.md): Continuous security and compliance monitoring; Security - [Cortex Genie Humain](https://thirdpartyindex.com/vendors/cortex-genie-humain.md): Continuous security and compliance monitoring; Security - [Critical Cloud](https://thirdpartyindex.com/vendors/critical-cloud.md): Continuous security and compliance monitoring; Security - [CYPHER Learning](https://thirdpartyindex.com/vendors/cypher-learning.md): Audit logs and evidencing - [D2L](https://thirdpartyindex.com/vendors/d2l.md): Internal Operations; Used by D2L to manage trust and compliance related information. - [Data Zoo](https://thirdpartyindex.com/vendors/data-zoo.md): GRC Compliance Tool- - [Datafi](https://thirdpartyindex.com/vendors/datafi.md): Compliance; Continuous security and compliance monitoring - [DeepScribe](https://thirdpartyindex.com/vendors/deepscribe.md): Vanta helps DeepScribe maintain and monitor security and privacy controls, supporting readiness for frameworks like HIPAA and SOC 2. - [DevSamurai](https://thirdpartyindex.com/vendors/devsamurai.md): Continuous security and compliance monitoring - [Digistorm AU](https://thirdpartyindex.com/vendors/digistorm-au.md): Internal Business Operations; Security and compliance monitoring - [Dirac](https://thirdpartyindex.com/vendors/dirac.md): Continuous security and compliance monitoring - [Docket](https://thirdpartyindex.com/vendors/docket.md): Continuous security and compliance monitoring; Security - [Docmosis](https://thirdpartyindex.com/vendors/docmosis.md): Compliance Automation; Security and compliance monitoring platform. - [Double](https://thirdpartyindex.com/vendors/double.md): Continuous security and compliance monitoring - [Double the Donation](https://thirdpartyindex.com/vendors/double-the-donation.md) - [Dremio](https://thirdpartyindex.com/vendors/dremio.md) - [Driven](https://thirdpartyindex.com/vendors/driven.md): Continuous security and compliance monitoring - [Dromo](https://thirdpartyindex.com/vendors/dromo.md): Continuous security and compliance monitoring - [Easol](https://thirdpartyindex.com/vendors/easol.md): Continuous security and compliance monitoring - [Escape](https://thirdpartyindex.com/vendors/escape.md): Continuous security and compliance monitoring; Security - [Evisions](https://thirdpartyindex.com/vendors/evisions.md): Continuous security and compliance monitoring; Security - [Expensify](https://thirdpartyindex.com/vendors/expensify.md): Compliance; Trust Center - [Finsweet](https://thirdpartyindex.com/vendors/finsweet.md): Continuous monitoring for SOC2, GDPR, and security frameworks.; Security & compliance - [Fluid Attacks](https://thirdpartyindex.com/vendors/fluid-attacks.md): Continuous security and compliance monitoring; Security - [Frigade](https://thirdpartyindex.com/vendors/frigade.md): Security compliance - [Gatekeeper](https://thirdpartyindex.com/vendors/gatekeeper.md): Security & Compliance Automation - [Genspark](https://thirdpartyindex.com/vendors/genspark.md): Continuous security and compliance monitoring; Security - [Givecloud](https://thirdpartyindex.com/vendors/givecloud.md): Continuous security and compliance monitoring - [Guesty](https://thirdpartyindex.com/vendors/guesty.md): Continuous security and compliance monitoring - [HirePort](https://thirdpartyindex.com/vendors/hireport.md): Provides automated security monitoring, compliance management, and evidence collection for SOC 2 and other security certifications. - [Horizon](https://thirdpartyindex.com/vendors/horizon.md): Continuous security and compliance monitoring - [Hyperbolic](https://thirdpartyindex.com/vendors/hyperbolic.md): Continuous security and compliance monitoring - [Hyperdoc (a.k.a. Recall.ai)](https://thirdpartyindex.com/vendors/hyperdoc-a-k-a-recall-ai.md): Security Portal - [IKASI](https://thirdpartyindex.com/vendors/ikasi.md): Continuous security and compliance monitoring; Security - [Incident IQ](https://thirdpartyindex.com/vendors/incident-iq.md): Continuous security and compliance monitoring - [Inngest](https://thirdpartyindex.com/vendors/inngest.md): Continuous security and compliance monitoring - [IronWiFi](https://thirdpartyindex.com/vendors/ironwifi.md): Continuous security and compliance monitoring; Security - [Kickbox](https://thirdpartyindex.com/vendors/kickbox.md): Continuous security and compliance monitoring; Security - [Koalify](https://thirdpartyindex.com/vendors/koalify.md): Continuous security and compliance monitoring; Security - [Kobalt.io](https://thirdpartyindex.com/vendors/kobalt-io.md): Continuous security and compliance monitoring; Governance, Risk, and Compliance management - [KrakenD](https://thirdpartyindex.com/vendors/krakend.md): Continuous security and compliance monitoring - [Krisp](https://thirdpartyindex.com/vendors/krisp.md): Platform for managing and sharing security, privacy, and compliance documentation. - [Kubit](https://thirdpartyindex.com/vendors/kubit.md): Continuous security and compliance monitoring - [Lettermint](https://thirdpartyindex.com/vendors/lettermint.md): Continuous security and compliance monitoring; Security - [Macabacus](https://thirdpartyindex.com/vendors/macabacus.md): Continuous security and compliance monitoring - [Mason](https://thirdpartyindex.com/vendors/mason.md): Continuous security and compliance monitoring - [Matter](https://thirdpartyindex.com/vendors/matter.md): Security and compliance monitoring - [Medallion](https://thirdpartyindex.com/vendors/medallion.md) - [Meridian AI](https://thirdpartyindex.com/vendors/meridian-ai.md): Continuously monitors Meridian's security controls, infrastructure configuration, and compliance program. Data processed: system configuration and account metad… - [Motion](https://thirdpartyindex.com/vendors/motion.md): Security management platform - [Naviam](https://thirdpartyindex.com/vendors/naviam.md): Continuous security and compliance monitoring; Governance - [NimbleWork](https://thirdpartyindex.com/vendors/nimblework.md): Compliance Monitoring; Continuous security and compliance monitoring - [nodedata.io](https://thirdpartyindex.com/vendors/nodedata-io.md): Continuous security and compliance monitoring - [Nuvia](https://thirdpartyindex.com/vendors/nuvia.md): Continuous security and compliance monitoring - [oapps](https://thirdpartyindex.com/vendors/oapps.md): Continuous security and compliance monitoring - [Onit](https://thirdpartyindex.com/vendors/onit.md): Hosts and Chat Tool. SOC 2 Compliance and Automation Tool; Infrastructure, Gsuite, Version Control, Endpoints,; Stores Metadata and Configuration Information fo… - [OpenSanctions](https://thirdpartyindex.com/vendors/opensanctions.md): ISMS management, control evidence, vendor risk tracking, compliance reporting; Security - [OpenTag](https://thirdpartyindex.com/vendors/opentag.md): Continuous security and compliance monitoring - [Paddle](https://thirdpartyindex.com/vendors/paddle.md): Continuous security and compliance monitoring; Security - [Paperform](https://thirdpartyindex.com/vendors/paperform.md): Processing period: May 18, 2022 - present Data disclosed: Incidental data: Vanta has access to monitor systems and compliance state of security standards. Some … - [Parahelp](https://thirdpartyindex.com/vendors/parahelp.md): Continuous security and compliance monitoring - [Partium](https://thirdpartyindex.com/vendors/partium.md): Continuous security and compliance monitoring - [Peaky](https://thirdpartyindex.com/vendors/peaky.md): Continuous security and compliance monitoring - [Pendula](https://thirdpartyindex.com/vendors/pendula.md) - [Pharos](https://thirdpartyindex.com/vendors/pharos.md): Continuous security and compliance monitoring - [Picarro](https://thirdpartyindex.com/vendors/picarro.md): Continuous security and compliance monitoring - [Power Factors](https://thirdpartyindex.com/vendors/power-factors.md): Continuous security and compliance monitoring; Security Trust Center - [Prudentia Sciences](https://thirdpartyindex.com/vendors/prudentia-sciences.md): Continuous security and compliance monitoring; Security - [Qless](https://thirdpartyindex.com/vendors/qless.md) - [Quality Clouds](https://thirdpartyindex.com/vendors/quality-clouds.md) - [Ravenna](https://thirdpartyindex.com/vendors/ravenna.md): Continuous security and compliance monitoring - [ReadWorks](https://thirdpartyindex.com/vendors/readworks.md): Security audit service - [ReadySet Surgical](https://thirdpartyindex.com/vendors/readyset-surgical.md) - [Retell AI](https://thirdpartyindex.com/vendors/retell-ai.md) - [Revolear](https://thirdpartyindex.com/vendors/revolear.md): Continuous security and compliance monitoring - [Romify](https://thirdpartyindex.com/vendors/romify.md): Continuous security and compliance monitoring - [Ruddr](https://thirdpartyindex.com/vendors/ruddr.md) - [Sainer](https://thirdpartyindex.com/vendors/sainer.md): Continuous security and compliance monitoring; Security - [SambaNova](https://thirdpartyindex.com/vendors/sambanova.md): Continuous security and compliance monitoring - [Scalr](https://thirdpartyindex.com/vendors/scalr.md): Continuous security and compliance monitoring; Security - [Scratchpad](https://thirdpartyindex.com/vendors/scratchpad.md): Security - [Seerist](https://thirdpartyindex.com/vendors/seerist.md): Compliance - [Serverless Framework](https://thirdpartyindex.com/vendors/serverless-framework.md): Continuous security and compliance monitoring; Security - [Sherpa](https://thirdpartyindex.com/vendors/sherpa.md): Continuous security and compliance monitoring - [SigNoz](https://thirdpartyindex.com/vendors/signoz.md) - [Simpli.fi](https://thirdpartyindex.com/vendors/simpli-fi.md): Continuous security and compliance monitoring - [Skedda](https://thirdpartyindex.com/vendors/skedda.md): Security; Skedda use Vanta for continuous security and compliance monitoring - [skie.io](https://thirdpartyindex.com/vendors/skie-io.md): Continuous security and compliance monitoring - [Socket](https://thirdpartyindex.com/vendors/socket-dev.md): Enabling customers to save alerts - [Spara](https://thirdpartyindex.com/vendors/spara.md): Security; Security and compliance monitoring platform. - [Stoch Analytics](https://thirdpartyindex.com/vendors/stoch-analytics.md): Continuous security and compliance monitoring - [Storiara](https://thirdpartyindex.com/vendors/storiara.md): Continuous security and compliance monitoring - [StudyFetch](https://thirdpartyindex.com/vendors/studyfetch.md): Continuous security and compliance monitoring; Security - [SundaySky](https://thirdpartyindex.com/vendors/sundaysky.md): Continuous security and compliance monitoring - [Supervision Assist](https://thirdpartyindex.com/vendors/supervision-assist.md): Continuous security and compliance monitoring - [SweetHawk](https://thirdpartyindex.com/vendors/sweethawk.md) - [Symbe](https://thirdpartyindex.com/vendors/symbe.md): Continuous security and compliance monitoring; Security - [Synder](https://thirdpartyindex.com/vendors/synder.md): Continuous security and compliance monitoring. - [Talent Plus](https://thirdpartyindex.com/vendors/talent-plus.md): Continuous security and compliance monitoring - [The Ksquare Group](https://thirdpartyindex.com/vendors/the-ksquare-group.md): Continuous security and compliance monitoring - [tl;dv](https://thirdpartyindex.com/vendors/tl-dv.md): Continuous security and compliance monitoring; Security - [Tungsten Automation](https://thirdpartyindex.com/vendors/tungsten-automation.md): Continuous security and compliance monitoring; Security - [Upstash](https://thirdpartyindex.com/vendors/upstash.md): Continuous security and compliance monitoring - [Usercentrics](https://thirdpartyindex.com/vendors/usercentrics.md): Continuous security and compliance monitoring - [Userflow](https://thirdpartyindex.com/vendors/userflow.md) - [Valid8 Financial](https://thirdpartyindex.com/vendors/valid8-financial.md): Continuous security and compliance monitoring; Security - [WebFX](https://thirdpartyindex.com/vendors/webfx.md): Continuous security and compliance monitoring; Security - [Weflow](https://thirdpartyindex.com/vendors/weflow.md) - [Whalesync](https://thirdpartyindex.com/vendors/whalesync.md): Continuous security and compliance monitoring - [Workstreet](https://thirdpartyindex.com/vendors/workstreet.md): Continuous security and compliance monitoring; Security - [Yoodli](https://thirdpartyindex.com/vendors/yoodli.md): Security and compliance - [YuLife](https://thirdpartyindex.com/vendors/yulife.md): Continuous security and compliance monitoring - [YuzeData](https://thirdpartyindex.com/vendors/yuzedata.md): Security; Vanta provides tools to automate and monitor our security and compliance posture, including continuous controls testing and evidence collection. Perso… - [Zilliz](https://thirdpartyindex.com/vendors/zilliz.md): Compliance monitoring and risk assessment ## Service status Incidents it reported on its own status page. - Last 90 days: 6 reported incidents (3 major or critical, 2 minor, 1 with no impact stated) - Typical time to resolve: 9 h 23 min - Status page last read: 2026-11-12 - Under way: Missing check results for GitHub pull requests (minor), since 2026-11-03 22:18 UTC - 2026-11-03: Missing check results for GitHub pull requests (minor) - 2026-10-29: Incorrect security-training and background-check test results (no impact stated) - 2026-10-21: Stale data for CloudflareDomainInventory and CloudflareZoneRule (major) - 2026-09-17: Vendor assessment product test failures (minor) - 2026-09-14: Some Vanta AI features are unavailable (major) - 2026-09-09: Sync operations failing for GCP Firestore (major) - 2026-07-31: Interruption to Programmatic Vanta Agent Installations (minor) - 2026-07-07: HIPAA incorrect default variant (no impact stated) ## Incidents reported by Vanta's subprocessors Incidents reported in the last 30 days on their own status pages by 18 vendors Vanta lists as subprocessors. A subprocessor list names a company, not the service an incident touched. - 2026-11-12: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Vanta lists as a subprocessor, reported INC20000347 (minor) - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Unable to start new Workspace Agent runs (critical) - 2026-11-11: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated errors affecting logins, sign-ups, and ChatGPT features (minor) - 2026-11-11: [E2B](https://thirdpartyindex.com/vendors/e2b#status), which Vanta lists as a subprocessor, reported Template builds failing on Ubuntu package installs (minor) - 2026-11-10: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Elevated errors on Fable 52 and Mythos 52 (no impact stated) - 2026-11-10: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Incorrect cost data in Costs API exports (no impact stated) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated Errors On API (minor) - 2026-11-09: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated ChatGPT Conversation Errors (minor) - 2026-11-08: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated errors with image generation (minor) - 2026-11-08: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Degraded performance for Claude Fable 5.1 (minor) - 2026-11-08: [Heap](https://thirdpartyindex.com/vendors/heap#status), which Vanta lists as a subprocessor, reported Temporary Data Latency (minor) - 2026-11-07: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Vanta lists as a subprocessor, reported Intermittent 503 errors in certain regions (minor) - 2026-11-07: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Vanta lists as a subprocessor, reported INC20000337 (minor) - 2026-11-07: [Sigma](https://thirdpartyindex.com/vendors/sigma#status), which Vanta lists as a subprocessor, reported Degraded performance in AWS US-WEST-2 hosted organizations (minor) - 2026-11-06: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Vanta lists as a subprocessor, reported INC20000336 (minor) - 2026-11-06: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated error rates with some U.S. business Mastercards (no impact stated) - 2026-11-06: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Vanta lists as a subprocessor, reported Elevated errors and latencies in the European hosting region. (major) - 2026-11-05: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported ChatGPT Work and Dots Errors (minor) - 2026-11-05: [E2B](https://thirdpartyindex.com/vendors/e2b#status), which Vanta lists as a subprocessor, reported Elevated 503 errors in EU-West-1 (minor) - 2026-11-05: [Confluent](https://thirdpartyindex.com/vendors/confluent#status), which Vanta lists as a subprocessor, reported Kafka - Increased latency and connectivity issues - Azure - brazilsouth (minor) - 2026-11-05: [Heap](https://thirdpartyindex.com/vendors/heap#status), which Vanta lists as a subprocessor, reported Temporary Data Latency (minor) - 2026-11-05: [Sigma](https://thirdpartyindex.com/vendors/sigma#status), which Vanta lists as a subprocessor, reported Service degradation in GCP-US-hosted organizations (no impact stated) - 2026-11-04: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated error rates across paid ChatGPT plans (minor) - 2026-11-04: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported Chat with Sales temporarily unavailable (no impact stated) - 2026-11-04: [Heap](https://thirdpartyindex.com/vendors/heap#status), which Vanta lists as a subprocessor, reported Delayed event-data availability in the US (no impact stated) - 2026-11-03: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported Delayed or failed template recommendations and template setup (no impact stated) - 2026-11-03: [Heap](https://thirdpartyindex.com/vendors/heap#status), which Vanta lists as a subprocessor, reported Data latency for some US customers (no impact stated) - 2026-11-03: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported File upload errors in ChatGPT (minor) - 2026-11-02: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported "Chat with Sales" page not loading (no impact stated) - 2026-10-30: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which Vanta lists as a subprocessor, reported Increased latency and 500 rate (major) - 2026-10-30: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Vanta lists as a subprocessor, reported INC20000321 (minor) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated errors with search in Dots, ChatGPT Work, and certain ChatGPT thinking experiences (minor) - 2026-10-30: [Hatchet](https://thirdpartyindex.com/vendors/hatchet#status), which Vanta lists as a subprocessor, reported \[us-west-2\] Increased latency for some customers in us-west-2 (minor) - 2026-10-30: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Vanta lists as a subprocessor, reported Slow Fin Procedures (minor) - 2026-10-30: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated errors for GPT Image 2 API image edits (minor) - 2026-10-29: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Vanta lists as a subprocessor, reported SSO Profile API Timeouts (major) - 2026-10-29: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported Discord integration issues (no impact stated) - 2026-10-29: [E2B](https://thirdpartyindex.com/vendors/e2b#status), which Vanta lists as a subprocessor, reported Intermittent template build errors on US-West-1 (minor) - 2026-10-29: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Vanta lists as a subprocessor, reported INC20000319 (minor) - 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Elevated errors affecting the Google Calendar connector (minor) - 2026-10-28: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Vanta lists as a subprocessor, reported Metrics query are disrupted (major) - 2026-10-28: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Elevated errors affecting the Gmail connector (minor) - 2026-10-27: [Finch](https://thirdpartyindex.com/vendors/finch#status), which Vanta lists as a subprocessor, reported Intermittent Delays on ADP Workforce Now Syncs (minor) - 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported 6.1 Sol Degraded Model Performance (minor) - 2026-10-27: [E2B](https://thirdpartyindex.com/vendors/e2b#status), which Vanta lists as a subprocessor, reported Degraded performance for sandbox operations on US-West-1 (minor) - 2026-10-27: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 (major) - 2026-10-27: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated error rates for most hosted Code Reviews and Security Reviews on private GitHub repositories (no impact stated) - 2026-10-26: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated error rates for Ads POST requests (minor) - 2026-10-26: [Datadog](https://thirdpartyindex.com/vendors/datadog#status), which Vanta lists as a subprocessor, reported Elevated Error Rates for Workflow Automation, App Builder, Bits Code, Bits Agent Builder (major) - 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Elevated errors for Claude Fable 5.1 (major) - 2026-10-25: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Elevated errors for Claude Sonnet 5.5 and other models (major) - 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Elevated errors for Claude Fable 5 and Claude Fable 5.1 (major) - 2026-10-24: [Finch](https://thirdpartyindex.com/vendors/finch#status), which Vanta lists as a subprocessor, reported Delayed Data Syncs on ADP Workforce Now (minor) - 2026-10-24: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Elevated errors for Claude Opus 5.5 (major) - 2026-10-23: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5 (critical) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Degraded experience with ChatGPT app connections using CIMD (minor) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Help Center Chat Support Degraded (no impact stated) - 2026-10-23: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Vanta lists as a subprocessor, reported Elevated errors across SSO and AuthKit (major) - 2026-10-23: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported Connection errors affecting Salesforce Pardot Zaps (major) - 2026-10-23: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Delays in customer support responses (no impact stated) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported New Ad Accounts failing to provision admins (minor) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Degraded Performance of Dots on Enterprise (minor) - 2026-10-22: [Chameleon Intelligent Tech](https://thirdpartyindex.com/vendors/chameleon-intelligent-tech#status), which Vanta lists as a subprocessor, reported Chameleon response to PHP CVE-2026-109618 and CVE-2026-109619 (no impact stated) - 2026-10-22: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported Security updates in progress for third-party software components (no impact stated) - 2026-10-22: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported Assessment of recently reported PHP vulnerabilities (no impact stated) - 2026-10-22: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Elevated errors affecting Connectors (minor) - 2026-10-22: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated ChatGPT conversation and Responses API errors (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Authentication errors for some users (major) - 2026-10-21: [Anthropic](https://thirdpartyindex.com/vendors/anthropic#status), which Vanta lists as a subprocessor, reported Degraded performance for Claude Fable 5 (minor) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Vanta lists as a subprocessor, reported INC20000301 (critical) - 2026-10-21: [Merge API](https://thirdpartyindex.com/vendors/merge-api#status), which Vanta lists as a subprocessor, reported Intermittent 429s (no impact stated) - 2026-10-21: [Finch](https://thirdpartyindex.com/vendors/finch#status), which Vanta lists as a subprocessor, reported Delayed Data Syncs on Quickbooks (minor) - 2026-10-21: [Merge API](https://thirdpartyindex.com/vendors/merge-api#status), which Vanta lists as a subprocessor, reported Temporary Integration Downtime (no impact stated) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated error rates for gpt-5.6-luna API requests (minor) - 2026-10-21: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported Delayed real-time updates in Zapier Tables (no impact stated) - 2026-10-21: [E2B](https://thirdpartyindex.com/vendors/e2b#status), which Vanta lists as a subprocessor, reported Template builds failing (critical) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Elevated FedRAMP API error rates for Astra and Sol (minor) - 2026-10-21: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported Upstream errors with the BambooHR integration (no impact stated) - 2026-10-21: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Vanta lists as a subprocessor, reported INC20000299 (minor) - 2026-10-21: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Degraded performance in ChatGPT, Codex, and APIs (minor) - 2026-10-20: [Confluent](https://thirdpartyindex.com/vendors/confluent#status), which Vanta lists as a subprocessor, reported Multiple Confluent Cloud services are in a degraded state - GCP EU-West2 (major) - 2026-10-20: [MongoDB](https://thirdpartyindex.com/vendors/mongodb#status), which Vanta lists as a subprocessor, reported GCP Availability Zone europe-west2-b connectivity issues (minor) - 2026-10-20: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Vanta lists as a subprocessor, reported INC20000294 (critical) - 2026-10-19: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Vanta lists as a subprocessor, reported Elevated AuthKit Error Rates (major) - 2026-10-19: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported File Download errors (minor) - 2026-10-19: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Vanta lists as a subprocessor, reported INC20000290 (minor) - 2026-10-16: [Svix](https://thirdpartyindex.com/vendors/svix#status), which Vanta lists as a subprocessor, reported Elevated latency in EU region (minor) - 2026-10-16: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported Errors publishing Zaps from Guided Templates with app approvals enabled (major) - 2026-10-16: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Vanta lists as a subprocessor, reported INC20000287 (critical) - 2026-10-16: [Confluent](https://thirdpartyindex.com/vendors/confluent#status), which Vanta lists as a subprocessor, reported Delay in Kafka cluster provisioning (minor) - 2026-10-15: [WorkOS](https://thirdpartyindex.com/vendors/workos#status), which Vanta lists as a subprocessor, reported Radar SMS challenge failures for phone numbers in mainland China (+86) (major) - 2026-10-15: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Widespread feature degradation (major) - 2026-10-15: [Confluent](https://thirdpartyindex.com/vendors/confluent#status), which Vanta lists as a subprocessor, reported Confluent Cloud Console (UI) degraded functionality (no impact stated) - 2026-10-14: [LangChain](https://thirdpartyindex.com/vendors/langchain#status), which Vanta lists as a subprocessor, reported Sandbox Performance Degraded (minor) - 2026-10-14: [Intercom](https://thirdpartyindex.com/vendors/intercom#status), which Vanta lists as a subprocessor, reported Customer contact details showing up as "Redacted" in the Intercom Inbox (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Delayed Costs data in the Compliance API (minor) - 2026-10-14: [Heap](https://thirdpartyindex.com/vendors/heap#status), which Vanta lists as a subprocessor, reported User property data delayed in Heap connect syncs (US customers only) (minor) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Limited availability on gpt-image-2.5-flare and gpt-image-2.5-sunburst (minor) - 2026-10-14: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported Permission errors affecting shared Forms, Canvas, and Tables (no impact stated) - 2026-10-14: [Zapier](https://thirdpartyindex.com/vendors/zapier#status), which Vanta lists as a subprocessor, reported Zoom Team Chat App connection failure (no impact stated) - 2026-10-14: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Degraded performance in Codex and ChatGPT Work (minor) - 2026-10-13: [Snowflake](https://thirdpartyindex.com/vendors/snowflake#status), which Vanta lists as a subprocessor, reported INC20000277 (minor) - 2026-10-13: [OpenAI](https://thirdpartyindex.com/vendors/openai#status), which Vanta lists as a subprocessor, reported Degraded performance in GPT-6.1 Sol Codex and Work mode (minor) The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/vanta ## Security contact From its security.txt (https://www.vanta.com/.well-known/security.txt) ([evidence](https://thirdpartyindex.com/evidence/2007)): - Contact: mailto:security@vanta.com - Disclosure policy: https://www.vanta.com/disclosure - Languages: en - Valid until 2026-11-15 --- Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api