Vanta

vanta.com

Vanta declares 37 subprocessors, plus 4 of its own affiliates, in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Amazon Web Services, Google Cloud and OpenAI. No published changes since we first read it on Sep 22, 2026. 145 tracked vendors name Vanta as a subprocessor, including Hyperdoc (a.k.a. Recall.ai), Paddle and Upstash.

Subprocessors CSV · Atom DORA draft CSV what's this? · 

37 third parties, 4 affiliates.

NamePurposeLocationListed since
Amazon Web Services Core Product; Infrastructure HostingUS, EU or AUS
Anthropic AIApplication AI Functionality; Vanta AIUS
Chameleon Intelligent Tech, Inc. Application notifications; Core ProductUS
Cloudflare Core Product; Hosting and Content DeliveryUS, EU
Coefficient.io Analytics & Reporting; Data and analyticsUS
Cohere AIMonitoring and Evaluation of AI Product Features; Vanta AIUS
Confluent Core Product; Platform Data StreamingUS
Courier Core Product; Customer Notification DeliveryUS
Dagster Labs Data and analytics; Data pipeline orchestrationUS
Datadog Core Product; Logging & MonitoringUS
e2b Application AI Functionality; Vanta AIUS
Finch HR Platform Integration Tool (customer optional); Optional integrations and toolsUS
Fivetran Data and analytics; Logging & MonitoringUS
Google Application AI Functionality; Vanta AIUS
Hatchet.run Vanta AI; Workflow OrchestrationUS
Heap Inc. Application Analytics; Data and analyticsUS
Intercom Customer Support Tool; Support and account managementUS
kernel.sh Application AI Functionality; Vanta AIUS
Lakera AI Security; Vanta AIUS
Langchain (using Langsmith product) Monitoring and Evaluation of AI product Features; Vanta AIUS
Merge.dev Optional integrations and tools; Platform Integration Tool (customer optional)US
Microsoft Application AI Functionality; Vanta AIUS
Mongo DB Inc. Core Product; Database HostingUS, EU or AUS
OneSchema CSV Importer (customer optional); Optional integrations and toolsUS
OpenAI, LLC AIApplication AI Functionality; Vanta AIUS
Polytomic Data Integration and Streaming; Data and analyticsUS
Qlik Analytics support; Data and analyticsUS
reducto.ai Document Parsing Tool; Vanta AIUS
Riskey Technologies Ltd. Vanta affiliatesRegion local Vanta entity
Salesforce Subscription Management; Support and account managementUS
Secoda.co Data Cataloging and Analysis; Data and analyticsUS
Sigma BI Analytics; Data and analyticsUS
Snowflake Inc. Data Warehouse; Data and analyticsUS
svix Core Product; Webhook DeliveryUS
Tableau Data Visualization Platform; Data and analyticsUS
WorkOS Optional integrations and tools; SCIM integration (customer optional)US
Zapier Support and account management; Workflow AutomationUS
Vanta affiliates (4)
NamePurposeLocationListed since
Vanta Technology Australia Pty Limited Vanta affiliatesRegion local Vanta entity
Vanta Technology Canada Limited Vanta affiliatesRegion local Vanta entity
Vanta Technology Ireland I Limited Vanta affiliatesRegion local Vanta entity
Vanta Technology UK Limited Vanta affiliatesRegion local Vanta entity

Web TechnologiesCSV · Atom

Vanta's homepage made 261 requests to 56 domains, 28 services controlled by another company, and 3 domains not identified.

Advertising (9): Google Cloud, The Trade Desk, Inc., Microsoft, StackAdapt, Podscribe, Reddit, Inc., Spotify AB; usually detected as Advertising: Xandr, Magnite, Inc.Analytics (8): HubSpot, Cloudflare, Clay, ZoomInfo, Magellan AI, LinkedIn, Meta, Intentsify, LLCCDN (3): jsDelivr, UNPKG, jQueryMarketing automation (2): OptinMonster, 6Sense Insights, Inc.Live chat (1): Qualified.com, Inc.A/B Testing (1): WebflowCookie compliance (1): OsanoOther (3): usually detected as Issue trackers: Sentry; usually detected as Security: Amazon Web Services; reviewed as Video players: Vimeo

28 third parties by category: Advertising 9Analytics 8CDN 3Marketing automation 2Live chat 1A/B Testing 1Cookie compliance 1Other 3

Third parties 28 · 245 requests
Webflow Intellimize Webflow 1.6.0 25% of the page's requests 65
Qualified.com, Inc. Qualified 11% of the page's requests 30
Google Cloudsubprocessor DoubleClick Floodlight Google Analytics Google Font API Google Hosted Libraries Google Tag Manager 10% of the page's requests 26
OptinMonster OptinMonster 8% of the page's requests 21
6Sense Insights, Inc. 6sense 7% of the page's requests 18
HubSpot HubSpot HubSpot Analytics 4% of the page's requests 11
Cloudflaresubprocessor Cloudflare Browser Insights 3% of the page's requests 9
The Trade Desk, Inc. theTradeDesk 3% of the page's requests 8
Microsoftsubprocessor Microsoft Advertising 2% of the page's requests 6
Clay Clay Web Intent 2% of the page's requests 5
StackAdapt StackAdapt 2% of the page's requests 5
ZoomInfo Zoominfo 2% of the page's requests 5
Magellan AI Magellan AI 2% of the page's requests 4
Osano Osano 2% of the page's requests 4
LinkedIn Linkedin Insight Tag 1% of the page's requests 3
Meta Facebook Pixel 2.9.435 1% of the page's requests 3
Podscribe Podscribe 1% of the page's requests 3
Reddit, Inc. Reddit Ads 1% of the page's requests 3
Spotify AB Spotify Pixel 1% of the page's requests 3
jsDelivr jsDelivr 1% of the page's requests 3
UNPKG Unpkg <1% of the page's requests 2
Xandr adnxs.com <1% of the page's requests 2
Amazon Web Servicessubprocessor on.aws <1% of the page's requests 1
Intentsify, LLC Intentsify <1% of the page's requests 1
Magnite, Inc. rubiconproject.com <1% of the page's requests 1
Sentry sentry.io <1% of the page's requests 1
Vimeo vimeocdn.com <1% of the page's requests 1
jQuery jQuery 3.6.0 jQuery CDN <1% of the page's requests 1
Unknown 3 · 5 requests

pointmediatracker.comwebflow.servicesusbrowserspeed.com

First party 1 · 11 requests
Vanta Cloudflare Cloudflare Turnstile GSAP 3.15.0 HSTS HTTP/3 Open Graph Sentry Vimeo Webpack core-js 3.25.0 lit-element 4.2.0 lit-html 3.3.0 4% of the page's requests 11

13 tracked companies loaded by the homepage are not in Vanta's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (145)CSV · Atom

1–100 of 145
  • 1000minds 1000minds.com Continuous security and compliance monitoring; Security
  • Aimdoc aimdoc.ai Continuous security and compliance monitoring
  • Air air.inc Contact: Data Privacy Officer privacy@vanta.com DPA:; Continuous Security and Compliance Monitoring
  • AiSDR aisdr.com Compliance Platform
  • Akuity akuity.io
  • Allocadia allocadia.com - Data Transfer Mechanism: SCC - Customer B2B Employee User Data Processed: First name, Last name, Business email, IP address; Customer third-party risk management support
  • Amplemarket amplemarket.com Compliance; Used to manage and monitor our compliance and security practices
  • Anaconda anaconda.com Security and compliance
  • Antavo antavo.com Compliance platform for ISO and SOC frameworks
  • apiphani apiphani.io Continuous security and compliance monitoring; Governance, Risk Management, Compliance
  • Applied Compute appliedcompute.com Continuous security and compliance monitoring; Security
  • Artie artie.com
  • Autohive autohive.com Continuous security and compliance monitoring
  • B2Gnow b2gnow.com
  • Black Forest Labs bfl.ai Continuous security and compliance monitoring
  • Blinq blinq.me
  • Brave brave.com Continuous security and compliance monitoring
  • Bronto bronto.io Compliance
  • Browser Use browser-use.com Continuous security and compliance monitoring
  • BuildBetter buildbetter.ai
  • Capcade capcade.com Security and compliance practices communication
  • CardinalHQ cardinalhq.io Continuous security and compliance monitoring
  • Cerebrium cerebrium.ai
  • Chaser trychaser.com Continuous security and compliance monitoring
  • Chatbase.co chatbase.co Continuous security and compliance monitoring; Security
  • Chatwoot chatwoot.com Security & Compliance monitoring; Used to monitor security controls and manage compliance programs and evidence.
  • Clerk Chat clerk.chat
  • Cloudamize cloudamize.com Continuous security and compliance monitoring
  • CodeRabbit coderabbit.ai Continuous security and compliance monitoring; Security
  • Contour usecontour.ai Continuous security and compliance monitoring
  • Conveo conveo.ai Processing Activity Description Continuous security and compliance monitoring, evidence collection, and audit management. Data Residency / Processing Location European Union (Frankfurt) Headquarters Location San Francisco, United States; Security
  • Conversion conversion.ai Continuous security and compliance monitoring; Security
  • Cortex Genie Humain cortexgh.com Continuous security and compliance monitoring; Security
  • Critical Cloud criticalcloud.ai Continuous security and compliance monitoring; Security
  • CYPHER Learning cypherlearning.com Audit logs and evidencing
  • D2L d2l.com Internal Operations; Used by D2L to manage trust and compliance related information.
  • Data Zoo datazoo.com GRC Compliance Tool-
  • Datafi datafi.co Compliance; Continuous security and compliance monitoring
  • DeepScribe deepscribe.ai Vanta helps DeepScribe maintain and monitor security and privacy controls, supporting readiness for frameworks like HIPAA and SOC 2.
  • DevSamurai devsamurai.com Continuous security and compliance monitoring
  • Digistorm AU digistorm.com Internal Business Operations; Security and compliance monitoring
  • Dirac diracinc.com Continuous security and compliance monitoring
  • Docket docket.io Continuous security and compliance monitoring; Security
  • Docmosis docmosis.com Compliance Automation; Security and compliance monitoring platform.
  • Double doublehq.com Continuous security and compliance monitoring
  • Double the Donation doublethedonation.com
  • Dremio dremio.com
  • Driven driven.work Continuous security and compliance monitoring
  • Dromo dromo.io Continuous security and compliance monitoring
  • Easol easol.com Continuous security and compliance monitoring
  • Escape escape.tech Continuous security and compliance monitoring; Security
  • Evisions evisions.com Continuous security and compliance monitoring; Security
  • Expensify expensify.com Compliance; Trust Center
  • Finsweet finsweet.com Continuous monitoring for SOC2, GDPR, and security frameworks.; Security & compliance
  • Fluid Attacks fluidattacks.com Continuous security and compliance monitoring; Security
  • Frigade frigade.com Security compliance
  • Gatekeeper gatekeeperhq.com Security & Compliance Automation
  • Genspark genspark.ai Continuous security and compliance monitoring; Security
  • Givecloud givecloud.com Continuous security and compliance monitoring
  • Guesty guesty.com Continuous security and compliance monitoring
  • HirePort hireport.io Provides automated security monitoring, compliance management, and evidence collection for SOC 2 and other security certifications.
  • Horizon usehorizon.ai Continuous security and compliance monitoring
  • Hyperbolic hyperbolic.ai Continuous security and compliance monitoring
  • Hyperdoc (a.k.a. Recall.ai) recall.ai Security Portal
  • IKASI ikasi.ai Continuous security and compliance monitoring; Security
  • Incident IQ incidentiq.com Continuous security and compliance monitoring
  • Inngest inngest.com Continuous security and compliance monitoring
  • IronWiFi ironwifi.com Continuous security and compliance monitoring; Security
  • Kickbox kickbox.com Continuous security and compliance monitoring; Security
  • Koalify koalify.io Continuous security and compliance monitoring; Security
  • Kobalt.io kobalt.io Continuous security and compliance monitoring; Governance, Risk, and Compliance management
  • KrakenD krakend.io Continuous security and compliance monitoring
  • Krisp krisp.ai Platform for managing and sharing security, privacy, and compliance documentation.
  • Kubit kubit.ai Continuous security and compliance monitoring
  • Lettermint lettermint.co Continuous security and compliance monitoring; Security
  • Macabacus macabacus.com Continuous security and compliance monitoring
  • Mason bymason.com Continuous security and compliance monitoring
  • Matter matterapp.com Security and compliance monitoring
  • Medallion medallion.co
  • Meridian AI meridian-ai.com Continuously monitors Meridian's security controls, infrastructure configuration, and compliance program. Data processed: system configuration and account metadata from Meridian's connected tools.; Security and compliance monitoring
  • Motion usemotion.com Security management platform
  • Naviam naviam.io Continuous security and compliance monitoring; Governance
  • NimbleWork nimblework.com Compliance Monitoring; Continuous security and compliance monitoring
  • nodedata.io nodedata.io Continuous security and compliance monitoring
  • Nuvia nuvia.ai Continuous security and compliance monitoring
  • oapps oapps.io Continuous security and compliance monitoring
  • Onit onit.com Hosts and Chat Tool. SOC 2 Compliance and Automation Tool; Infrastructure, Gsuite, Version Control, Endpoints,; Stores Metadata and Configuration Information for
  • OpenSanctions opensanctions.org ISMS management, control evidence, vendor risk tracking, compliance reporting; Security
  • OpenTag opentag.bot Continuous security and compliance monitoring
  • Paddle paddle.com Continuous security and compliance monitoring; Security
  • Paperform paperform.co Processing period: May 18, 2022 - present Data disclosed: Incidental data: Vanta has access to monitor systems and compliance state of security standards. Some incidental user data may be shared during the day-to-day monitoring
  • Parahelp parahelp.com Continuous security and compliance monitoring
  • Partium partium.io Continuous security and compliance monitoring
  • Peaky peaky.ai Continuous security and compliance monitoring
  • Pendula pendula.com
  • Pharos pharos.com Continuous security and compliance monitoring
  • Picarro picarro.com Continuous security and compliance monitoring
  • Power Factors powerfactors.com Continuous security and compliance monitoring; Security Trust Center
  • Prudentia Sciences prudentiasciences.com Continuous security and compliance monitoring; Security
  • Qless qless.com
  • Show next 45

ComplianceCSV · Atom

Certified
Says it complies with

FedRAMP Marketplace

OfferingStatusImpactAgenciesSince
Vanta Government CloudAuthorized20x Moderate1
Vanta Trust Management PlatformAuthorized20x Low1

Certifications as Vanta's trust center lists them; reports are usually shared on request (evidence) FedRAMP status from the FedRAMP Marketplace (evidence)

Service statusCSV · Atom

Aug 15: no incident reportedAug 16: no incident reportedAug 17: no incident reportedAug 18: no incident reportedAug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: no incident reportedAug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: no incident reportedSep 1: no incident reportedSep 2: no incident reportedSep 3: no incident reportedSep 4: no incident reportedSep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: 1 incident (1 major)Sep 10: no incident reportedSep 11: no incident reportedSep 12: no incident reportedSep 13: no incident reportedSep 14: 1 incident (1 major)Sep 15: no incident reportedSep 16: no incident reportedSep 17: 1 incident (1 minor)Sep 18: no incident reportedSep 19: no incident reportedSep 20: no incident reportedSep 21: no incident reportedSep 22: no incident reportedSep 23: no incident reportedSep 24: no incident reportedSep 25: no incident reportedSep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reportedOct 1: no incident reportedOct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: no incident reportedOct 6: no incident reportedOct 7: no incident reportedOct 8: no incident reportedOct 9: no incident reportedOct 10: no incident reportedOct 11: no incident reportedOct 12: no incident reportedOct 13: no incident reportedOct 14: no incident reportedOct 15: no incident reportedOct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: no incident reportedOct 20: no incident reportedOct 21: 1 incident (1 major)Oct 22: no incident reportedOct 23: no incident reportedOct 24: no incident reportedOct 25: no incident reportedOct 26: no incident reportedOct 27: no incident reportedOct 28: no incident reportedOct 29: 1 incident (1 no impact stated)Oct 30: no incident reportedOct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: 1 incident (1 minor)Nov 4: no incident reportedNov 5: no incident reportedNov 6: no incident reportedNov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: no incident reportedNov 12: no incident reported

90 days agotoday

  • 6 incidents in 90 days
  • 3 major or critical
  • 9 h 23 min typical time to resolve
  • 25 h 39 min longest major
BeganIncidentImpactLasted
Missing check results for GitHub pull requestsminorongoing
Incorrect security-training and background-check test resultsno impact stated—
Stale data for CloudflareDomainInventory and CloudflareZoneRulemajor7 h 42 min
Vendor assessment product test failuresminor9 h 23 min
Some Vanta AI features are unavailablemajor1 h 30 min
Sync operations failing for GCP Firestoremajor25 h 39 min
Interruption to Programmatic Vanta Agent Installationsminor3 days
HIPAA incorrect default variantno impact stated3 h 7 min

Incidents per month

0 3 6 Dec 2025: 3 incidents (2 minor, 1 no impact stated) · typical time to resolve 41 h 29 min Jan 2026: 4 incidents (1 major, 2 minor, 1 no impact stated) · typical time to resolve 31 h 12 min Feb 2026: 5 incidents (4 minor, 1 no impact stated) · typical time to resolve 2 h 4 min Mar 2026: 6 incidents (6 minor) · typical time to resolve 5 h 47 min Apr 2026: 5 incidents (2 major, 3 minor) · typical time to resolve 3 days May 2026: 6 incidents (1 major, 4 minor, 1 no impact stated) · typical time to resolve 1 h 13 min Jun 2026: 1 incident (1 no impact stated) · typical time to resolve 20 h 10 min Jul 2026: 2 incidents (1 minor, 1 no impact stated) · typical time to resolve 3 days Aug 2026: 0 incidents Sep 2026: 3 incidents (2 major, 1 minor) · typical time to resolve 9 h 23 min Oct 2026: 2 incidents (1 major, 1 no impact stated) · typical time to resolve 7 h 42 min Nov 2026: 1 incident (1 minor) Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated

Components affected

ComponentIncidents
3rd Party Integrations3
Vendor Risk Management2
Questionnaire Automation1
Vanta AI1
Vanta MCP Server1

As Vanta's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

Incidents reported by Vanta's subprocessorsCSV · Atom

104 reported incidents in the last 30 days, by 18 of the vendors Vanta lists as subprocessors.

A subprocessor list names a company, not the service an incident touched. This does not show that Vanta was involved.

DateCompanyIncidentImpactLasted
OpenAIGPT-image-2.5 and 2.6 Sunburst & Flare High error rate minorongoing
SnowflakeINC20000347 minor32 min
OpenAIUnable to start new Workspace Agent runs critical9 h 42 min
OpenAIElevated errors affecting logins, sign-ups, and ChatGPT features minor8 min
E2BTemplate builds failing on Ubuntu package installs minor3 h 10 min
AnthropicElevated errors on Fable 52 and Mythos 52 no impact stated1 min
OpenAIIncorrect cost data in Costs API exports no impact stated2 h 20 min
OpenAIElevated Errors On API minor42 min
OpenAIElevated ChatGPT Conversation Errors minor52 min
OpenAIElevated errors with image generation minor1 h 49 min
AnthropicDegraded performance for Claude Fable 5.1 minor26 min
HeapTemporary Data Latency minor2 h 45 min
WorkOSIntermittent 503 errors in certain regions minor4 h 19 min
SnowflakeINC20000337 minor2 h 5 min
SigmaDegraded performance in AWS US-WEST-2 hosted organizations minor1 h 2 min
SnowflakeINC20000336 minor3 h 20 min
OpenAIElevated error rates with some U.S. business Mastercards no impact stated3 days
IntercomElevated errors and latencies in the European hosting region. major49 min
OpenAIChatGPT Work and Dots Errors minor13 h 6 min
E2BElevated 503 errors in EU-West-1 minor1 h 26 min
ConfluentKafka - Increased latency and connectivity issues - Azure - brazilsouth minor2 h 9 min
HeapTemporary Data Latency minor3 h 19 min
SigmaService degradation in GCP-US-hosted organizations no impact stated5 h 42 min
OpenAIElevated error rates across paid ChatGPT plans minor1 h 54 min
ZapierChat with Sales temporarily unavailable no impact stated3 h 28 min

And 79 more. All of them: CSV · Who is around them.

ChangesCSV · Atom

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for Vanta's site

Vanta transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/vanta"><img src="https://thirdpartyindex.com/badge/vanta.svg" alt="Vanta transparency rating on Third Party Index" height="20"></a>
[![Vanta transparency rating on Third Party Index](https://thirdpartyindex.com/badge/vanta.svg)](https://thirdpartyindex.com/vendors/vanta)