Startup

pagePatterns:
Feature Section
Enterprise Page

screenElements:
Tab
Segmented Control

screenElements:
Tab
Segmented Control
Animation & Video

pagePatterns:
Feature Section
Enterprise Page
Enterprise Page

screenKeywords:
vanta Product v  Solutions ~  Customers Plans Resources v  Company Vv Login
Vanta
Startup Service provider directory Partner program overview :;:;Iutionizing i
Grow faster with automated Discover world-class service Set yourself apart with Vanta. ial/?t\?\ {e‘rr‘r;gnagc s
compliance. providers.
Service providers
Mid-market Auditor directory Build, scale, and grow your
Expand security and compliance Connect with top compliance business. . . .
" Y P . peomp Revolutionize risk:How to
as you scale. auditors.
) manage risk with Vanta
Auditors
Enterprise Integrations Elevate your clients' experiences. Download the eBook ->
Build more trust in your Sync with 300+ tools.
established brand.
Ll UOL bUllLlllUUUDly i I B 0 § B I I B B B N
W Critcal @ High W Medium W Low B Assigned Unassigned
Vanta's trust management platform takes the manual work rameworkprogress Speoming s
out of your security and compliance process and replaces =
e 150270012022 Audit ,
it with continuous automation—whether you're pursuing K e:
pet _‘__-;:' - 2 TSl EOC2Type\Audl( N
your first framework or managing a complex program. '::?':*-'-_:-'f--,..:.._,_,/ ; H"mm“
5002 ==150270012022 - GOPR - HPAA - NST800-53 @ e i
Request ademo 9 Total revenue influenced
$1.75M e
|vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
Automated evidence collection Built-in security workflows Expert audit partners Additional partner services
=l | aws E . ket £ losi |
9= o R = ocus on getting to market faster and closing more deals—and
| let us automate up to 90% of the evidence collection you'll
need to prove compliance with top frameworks like SOC 2 and
| ISO 27001.
* * @.
3 % ISO
---o--- -----o---
sl \S12% . .
- 30 frameworks 350+ integrations
"\ Vanta supports all the compliance Powered by robust integrations,
o i . frameworks you need, including SOC Vanta automatically and
iy, é 2 and ISO 27001, to support your continuously monitors compliance
5,1“\5 ! startup’s growth—now and in the across your tech stack.
@ future.
Requestademo -
|vanta Product v Solutions v Customers Plans Resources v Company v Login
compliant in a snap Y
=
Open new markets, close bigger deals, and prove trust fast,
even if you're starting from scratch. Vanta's out-of-the-box
solution helps startups build a security foundation with ease
using pre-built compliance frameworks and automated ol
security flows.
incident.io
Requestademo -> »
M Linear & udiostock leela.ai @ ‘W& LangChain 4y supabase J'Josef
|vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
Automated evidence collection Built-in security workflows Expert audit partners Additional partner services
[d (] .
Built-in security worktlows
adavendor | () Lincoln press * B, - . N N
Kickstart your compliance journey with built-in automated
Name ¢ . . . .
security workflows, including risk management, vendor
Category i management, access management, and more.
Security Tasks Access Offboarding Computers
Risk level . = .
N Completed Task People management Policy management
omplete: asks
Relationship Onboard and offboard staff, assign Easily manage your policies through
O This is a new vendor bg @ Accepted policies a . e
This vendor s alreacy] security awareness training, run pre-made templates, a step-by-step
Archived vendor @ Installed Vanta Agent background checks, and purchase policy builder, and policy-
cyber insurance—all within Vanta. acceptance tracking.
Cancel Ad @ Completed background check i
Requestademo -
o [d
Start-to-finish support for 30 @
comnliance trameworks


Searching shop

appName: GitHub

appCategory: Developer Tools

appTagline: Let’s build from here

companyHqRegion: US & Canada

companyStage: Public & Mature

platform: web

pageType: Marketing

hotspotType: Keyboard Input

screenElements:
Top Navigation Bar
Photo

hotspotType: Click

screenElements:
Top Navigation Bar
Photo
Search Bar

screenPatterns:
Suggestions & Similar Items
Search

pageType: Marketing Marketing Marketing Marketing

allAppCategories:
Collaboration
Developer Tools

screenKeywords:
0 Shop Shop all New arrivals About =
- -
‘ ~ *
T G-tH S ‘— - : N b & !
he GitHub Shop o | AR
PR
2 ) J ’
Looking for a new laptop sticker, super-cozy hoodie, or an art book featuring everyone’s . | N S
favorite Octocat? Welcome to the GitHub Shop, where you can find high-quality, sustainable - 1 ‘ 0 ¥
gifts for yourself, a friend, or even your pet. - . ’ r‘
‘:| |
o —— * -
e . -
o ~ ..‘-'- -
4 / - ,.'_',). \ A
77/
_ /) ~
Y T T e T R Ve s
7= T30 T3z B A S PR
o> A = ; B o i WS PENS B PN
5 %@ E-un'unu'-“_.'_ E S 'f 4& RSN From our GitHub Invertocat tees to our recycled desk mat, update your
@f [l .. T BN O R R ER R I = [E— SRS L | ardrobe and office space with our latest drops
|Welcome to the GitHub Shop |Sign In| or |CreateanAccount|
0 Shop Shop all New arrivals About =
Home > Search results for: 'sticker'
| H |
Search results for: 'sticker
Shopping Options 12 ltems SortBy Relevance v
Category v
Color o Related search terms
stickers
sticker pack 5
Stickers Assorted
sticker pack
sticker p154009ack
“GIT '»,"- { 3
o S - & &
4 . ithub(_ J =
PRE ] B -
b / - S o
% N v )
) 7 . o
van s @ ‘ ‘ N,
8 VS
.M i Ao
& _d
»
Sticker Pack Logo Sticker Pack - Pack of 12 Adventure Sticker Pack
<5 00 <5 00O <5 00
|0 Shop Shop all New arrivals About =
‘ ~ *
T G-tH S ‘— - : N b & !
he GitHub Shop o | AR
o8
2 ) J ’
Looking for a new laptop sticker, super-cozy hoodie, or an art book featuring everyone’s . | N S
favorite Octocat? Welcome to the GitHub Shop, where you can find high-quality, sustainable - 1 ‘ 0 ¥
gifts for yourself, a friend, or even your pet. - . ’ r‘
‘:| |
o —— * -
e . -
o ~ ..‘-'- -
4 / - ,.'_',). \ A
77/
_ /) ~
MBS T YR g Tt e STOAS (T R e b
m R L NS R ’&«TQ”\\W é‘ B § New Product
X~ TR 313714 T 1 LR AT ew Froaucts
o> A = ; B o i WS PENS B PN
5 %@ E-un'unu'-“_.'_ E S 'f 4& RSN From our GitHub Invertocat tees to our recycled desk mat, update your
@f [l .. T BN O R R ER R I = [E— SRS L | ardrobe and office space with our latest drops
|0 Shop Shop all New arrivals About =
sticker 13
stickers 12
sticker pack 15
N E E 3 sticker pack 5 10
X E ) Stickers Assorted 10
" R
] - 3 sticker p154009ack 6
i = 3 -
. ..‘ o _:-_ - S - ,:, n
u \ - I e - Y
RS N - - - - !
[y ’ H e ‘
{ e R LS l
: . ” 1
J " ‘ v 2 ety
Looking for a new laptop sticker, super-cozy hoodie, or an art book featuring everyone’s ) ‘7 ‘ - b% p
favorite Octocat? Welcome to the GitHub Shop, where you can find high-quality, sustainable » e 0 :
gifts for yourself, a friend, or even your pet. e |
| i
»
Git shopping T - ¥
- x 4
- A T
y \ N
TSNS SHE VOl i geSiouid s S i S TPOAS (Tl g e T Wb o
IR A B Sl R R < SR New Product
FRC NI T T O TEEE aeersaary %2 New Products
Yy ool F'H B T et 14 1= R (s, i, P
£ ’*ﬁ;, T !-E. m%m%- ] |- "5»),@ 2 !r-g~;.,&_j§ From our GitHub Invertocat tees to our recycled desk mat, update your
Waiting for www.thegithubshop.com... el + £ N 3 B wardrobe and office space with our latest drops


Browse magazine

appName: Apple News

appCategory: News

appTagline: News + magazines, in one app

platform: ios

hotspotType: Tap

hotspotType: Scroll Horizontally

screenPatterns:
Bookmarks & Collections
Browse & Discover
Item List

hotspotType: Scroll Vertically

screenElements: Chip Carousel Carousel Carousel

screenKeywords:
9:41 all ¥ (@
< D NATIONAL .o
GEOGRAPHIC
fo{eJo]£-T¢]0)% Science Space Sa\ViTgelalaglTal NEVE
RECENT ISSUES
NATIONEE NATIONAL
ARG GEQGRAPHIC
e = I
oy i AN & Beivic
JULY 2023
LATEST STORIES
Itlooked like a bizarre \\ \‘ i
alignment of meteors. It W\ AR
was something else. \\\\\\\
NASA just found a e ‘ v
questionmarkinspace. | FEENENE §a
What exactly isit? A S0
|9:41 all © @
5CR
€ News+ S
[ * *
Library “0p0®
Downloaded |E Newspapers
Showing:
GEOGRAREH
o T N
A= - JEN
2K ARGTIC
ISTERY |G
2 1 - 'r,
National Geographic TIME
e ‘L’“"“_A' - V!ﬂxlk-[!:::;u;.;s;rls:ﬂ?aﬁr!;!l?mum
VANTI IR
PP & ST
= Luke = ~ \
da W ). BN |
. ]
|9:41 -Ill ? [
< D NATIONAL .o
GEOGRAPHIC
fo{eJo]£-T¢]0)% Science Space Sa\ViTgelalaglTal NEVE
RECENT ISSUES
NATIONAL
GEOGRAPHIC
N C- =
o WONGER &
ERTTER «ﬁegh
| m
B }% w | ?%’
- . PICTURES«~YEAR"
JANUARY 2023 eee DECEMBER 20... e«
LATEST STORIES
Itlooked like abizarre (A} \ AL
alignment of meteors. It A\ \ \
was something else. MR
NASA just found a g
questionmarkinspace. . “ =
What exactlyisit? B ALK
|9:41 all T @
< E‘é\ggﬁ\,‘\’}h.c oo
Photography Science Space Environment Tra
2023 7 ISSUES
ATONSE 8. NATIONAL
GEOGRA | GEOGRAPHIC
A CHASING
&L reric
I UNKNOWN
25 J !
AUGUST 2023 JULY 2023
_NATIONAL NATIONA' s
-
ELEPHANTS
e, =
JUNE 2023 MAY 2023
" NATIONAL NATIONAL
PN ey U
|9:41 all ¥ (@
< |:| NATIONAL .o
GEOGRAPHIC
Space Sa\ViTgelalaglTal IEVC] History & Culture
Why the northernlights
are showingupin
unexpected places s
P AT i
™y W: 'ln!' !ﬁ
Pt {
13w ago - Kieran Mulvaney oo
The Lyrid meteor
showerhappensoncea [
year—andit'saboutto [ R
peak
I
—— ]
- e -
16w ago - Andrew Fazekas ooe
Starship’s fiery crash
was still a win for the 7
future of spaceflight. ;
Here’s why.
16w ago - Joe Pappalardo ooe
NASA reveals Artemis I
crew, the first moon N |
astronautsin 50 years ,: &=
|9:41 wll  =m
< E‘é\ggﬁ\,‘\’}h.c eee
Latest Stories Issues Health Animals (>gle(e]e
2023 7 ISSUES
ATONIE 8, NATIONAL
GEOGRA ! (073010127151 (0
A CHASING
&L IRl
b = UNKNOWN
25 J !
AUGUST 2023 .oe JULY 2023 see
_NATIONAL NATIONA' ket
S LLTL
ELEPHANTS
P =
JUNE 2023 see MAY 2023 see
" NATIONAL NATIONAL
PN ey U


Support metrics

appName: Vanta

appCategory: Business

appTagline: Automate compliance, manage risk, and prove trust

companyStage: Growth Stage

screenElements: Carousel Photo

pagePatterns:
Header Section
Stats Section
Features Page

pageType: Marketing Marketing Marketing Marketing Marketing

screenKeywords:
vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
Tickets
Tickets
45
40
37%

35

30

25

20

15%
1 13%
9% 10%
10 8%
5%
0 L
0-1 hrs 1-2 hrs 2-4 hrs 4-6 hrs 6-8 hrs 8-12 hrs 12-24 hrs >24 hrs
First Reply Time, in Business Hours
|vanta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
Support metrics
At Vanta, we put customers first. The Support team is committed to providing top-tier,
expert service. With pride, we share our team metrics publicly to continue building
strong partnerships with our customers through trust and transparency.
But don't just take our word for it; check out our scores on G2! i\ ’
| POQQE)I
®
\/

Vanta Support Metrics:

Date Range: 06/22/2024 - 09/19/2024
|vanta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
Vanta Support Metrics:
Date Range: 06/22/2024 - 09/19/2024
Live Chat Response
(Customer Satisfaction) (Median)
|Vanta Product v Solutions v Customers Plans Resources v Company v Login
Built for scale
Bringing together information from across multiple systems helps you more
deeply understand your security program as a whole.
Support Enterprise-grade Reliability Partner ecosystem
security
We proudly share our What's security without We partner with global
support metrics, as we Helping our customers reliability? Check out the security and compliance
continue to build trust. improve their security and status of Vanta. leaders to provide a single
compliance posture starts platform to support your
See our support metrics —> ol G GV See our system status - EiEss REEE
See our security page - Work with our extensive N
partner network
The security and compliance platform trusted by more than 8,000 customers.
=)
(), Al
8
o/
|Get to know the
Vanta Support Team
We're excited to share our success metrics with our customers, and we're also
excited for you to get to know us!
© ©
(o)
68% of the support
==l has pets! -
Phoenix the Wonder Dog v


Creating a new file

pageType: Application

screenElements:
Dialog
Text Field

screenElements:
Dialog
Text Field
Loading Indicator
Text Field

screenPatterns:
Code Editor
Loading
Add & Create

pageType: Application Application Application Application Application Application Application Application Application Application

screenKeywords:
= O jdoemobbin / websiteproject & Q_ Type (/) to search > +- O 1 & :*:
<> Code () Issues I Pullrequests () Actions [J Projects (@ Security [~ Insights 3 Settings
2L websiteproject ' Private ®©Watch 0 v || % Fork 0 v Yy Star 0 | ~

# main ~  § 1branch © 0tags Go to file Addfile~ RGN  About o)
This is the repository for the upcoming

2. jdoemobbin Initial commit 5b728b2 now Y91 commit website

[ LICENSE Initial commit now M Readme
58 Apache-2.0 license

[ README.md Initial commit now
A~ Activity
Y¢ O stars

README.md 4 & 0 watching
% 0 forks

L . . . Releases
This is the repository for the upcoming website
No releases published
Create a new release
Packages
No packages published
Publish your first package
O © 2023 GitHub, Inc. Terms Privacy Security Status Docs Contact GitHub Pricing API| Training Blog About
|= O jdoemobbin / websiteproject & Q_ Type (/) to search > +- O 1 & :*:
<> Code () Issues I Pullrequests () Actions [J Projects (@ Security [~ Insights 3 Settings
[® websiteproject/ index.html in main Cancel changes
Preview &3 Code 55% faster with GitHub Copilot Spaces ¢ 2 & Nowrap ¢

1 <!DOCTYPE html>

2

3

4 <title>Basic Website</title>

5 <link rel="stylesheet" href="stylel.css">

6

7

8 <hl>Welcome to my website!</hl>

9

10 <!—- npavigation for website-—>

11

12 About Us

13 Contact Us

14

15

16 <!-— content section-—>

17

18

19
About Us

20
All our cupcakes are made with premium ingredients and are baked from scratch everyday.

21

22

23
Contact Us

24
You can find us here:

25
27 Honeymoon Avenue

26
pompom@purin.com

27

28

29

30
Use Control + Shift + m to toggle the tab key moving focus. Alternatively, use esc then tab to move to the next interactive element on the page.
|Commit changes X
Commit message

Create index.html
Extended description

Add an optional extended description..

z
Commit directly to the main branch
(O Create a new branch for this commit and start a pull request
Cancel Commit changes
|= O jdoemobbin / websiteproject & Q_ Type (/) to search > +- O 1 & :*:
<> Code (©) Issues 9 Pullrequests (» Actions [ Projects () Security |~ Insights 3 Settings

(i websiteproject/ index.html in main Cancel changes
Preview &3 Code 55% faster with GitHub Copilot Spaces ¢ 2 & Nowrap ¢

1 Enter file contents here

Use Control + Shift + m to toggle the tab key moving focus. Alternatively, use esc then tab to move to the next interactive element on the page.
|= O jdoemobbin / websiteproject & Q_ Type (/) to search > +- O 1 & :*:
<> Code () Issues I Pullrequests () Actions [J Projects (@ Security [~ Insights 3 Settings
[ ¥ main +  websiteproject (3 Q Go to file t Addfile ~ -
2. jdoemobbin Create index.html 65bdaae - now Y History
Name Last commit message Last commit date
[ LICENSE Initial commit 1 hour ago
[ README.md Initial commit 1 hour ago
Y index.html Create index.html now
README.md Va
websiteproject
This is the repository for the upcoming website
|= O jdoemobbin / websiteproject & Q Type (/) to search > +- O 1 & :*:
<> Code (©) Issues 9 Pullrequests (» Actions [ Projects () Security |~ Insights 3 Settings
(i websiteproject/ index.html in main Cancel changes
Edit &) Code 55% faster with GitHub Copilot
=
Loading preview...
|= O jdoemobbin / websiteproject & Q_ Type (/) to search > +- O 1 & :*:
<> Code (©) Issues 9 Pullrequests (» Actions [ Projects () Security |~ Insights 3 Settings
(S websiteproject/ Name your file... in main Cancel changes
Preview &3 Code 55% faster with GitHub Copilot Spaces # 2 s No wrap s

1 Enter file contents here

Use Control + Shift + m to toggle the tab key moving focus. Alternatively, use esc then tab to move to the next interactive element on the page.
|= O jdoemobbin / websiteproject & Q_ Type (/) to search > +- O 1 & :*:
<> Code () Issues I Pullrequests () Actions [J Projects (@ Security [~ Insights 3 Settings
2L websiteproject ' Private ®©Watch 0 v || % Fork 0 v Yy Star 0 | ~
# main ~  § 1branch © 0tags Go to file Addfile~ [RENLIEA  About o)
Create new file This is the repository for the upcoming

N jdoemobbin Initial commit Upload files O 1 commit website

[ LICENSE Initial commit now M Readme
58 Apache-2.0 license

[ README.md Initial commit now
A~ Activity
Y¢ O stars

README.md 4 & 0 watching
% 0 forks

L . . . Releases
This is the repository for the upcoming website
No releases published
Create a new release
Packages
No packages published
Publish your first package
O © 2023 GitHub, Inc. Terms Privacy Security Status Docs Contact GitHub Pricing API| Training Blog About
|= O jdoemobbin / websiteproject & Q_ Type (/) to search > +- O 1 & :*:
<> Code () Issues I Pullrequests () Actions [J Projects (@ Security [~ Insights 3 Settings
[® websiteproject/ index.html in main Cancel changes
Edit &) Code 55% faster with GitHub Copilot

1 <!DOCTYPE html>

2

3

4 <title>Basic Website</title>

5 <link rel="stylesheet" href="stylel.css">

6

7

8 <h1l>Welcome to my website!</hl>

9

10 <!-—— pavigation for website-—>

11

12 About Us

13 Contact Us

14

15

16


Action options (audio)

screenElements:
Bottom Sheet
Thumbnail

screenElements:
Bottom Sheet
Stacked List
Icon

screenElements:
Bottom Sheet
Thumbnail
Bottom Sheet
Bottom Sheet
Stacked List
Icon

screenPatterns:
Audio Player
Action Option
Action Option

screenKeywords:
9:41 il F [
A —
Afterthe  asirm

[ ]
Whistle @— N
LW 2T (CTaTo E=Ta N o (V]9 | W 21 o =ToTor: W MO)VYLCY
|’.|:: ~VRREN = - TiE
::rﬁa.::: (A=A
' . > -{7 -\
#News Podcasts
Unfiltered joy and overwhelminc
[

00:06 -24:50
ONEEN | B
< <)
1x B [N N J
iPhone - System Capture
|ot

B vt e AR T
Close Audio Player @
Play Next e=
Play Last =
Read Story @
Share [-T_-]
Suggest More @
Suggest Less Q)
Follow Channel @
Block Channel @
Report a Concern @
Edit Actions...
|9:41 all T =
Y
P lollo)
Afterthe  ascrm
[ ]
Whiste
With Brendan Hunt & Rebecca Lowe \.’A
BER- - 'RERE((C ) TRE
T g N
Z x‘ ﬁ g‘}__ 4 ) —.
r; ‘ ‘.,; \\ > ',,,-;J‘ - ‘ "'v, i
4y 1} i}l;’; g |
v 3 i % i
=== Unfiltered joy and overwhelmin... X
Bl Apple News Podcasts
Close Audio Player @
Play Next o=
Play Last o=
Read Story @
Share ['T_']
Suggest More @
Suggest Less Q)


Logging out

screenElements:
Dropdown Menu
Avatar

screenElements:
Dropdown Menu
Avatar
Logo

pageType: Application Application

screenKeywords:
Vanta ® ® @& (N
Q Help... #+K . . N
Monitoring
I @ Home Jane Smith
. o @mobbin.com
>

Y= Tests 1= Policies 4 Tests View-only Admin - Mobbin
[ Reports Needs attention ® Needs attention ® My notification settings
A . 0 7 #% Refer a friend to Vanta
e ] o ———————————————.~ | Earn $500 for each new sign up
@ Trust Center 15 OK 15 total 141 OK
@ Risk Event log

Overview

S Vendors > Y Documents Sign out

Risk register

Risk library Needs attention ® Needs attention ® Vanta status - Privacy policy

Action tracker

.______________________________________________________________________________J . ]

Snapshots 46 OK 46 total 370K 39 total

Settings
& Vendor
= Trust Center
= Assets
22 Personnel Total visits Individual page views " Resource downloads

@ 8 +0% since last week @ 21 +0% since last week - 0 +0% since last week
U Integrations
View Trust Center page -
€l
|g vanta
Welcome back!
Sign into Vanta ‘
€
Don't have an account? Contact us. B us v
La )
7/
&L [
( ( RN
b NN


Adjusting energy

appName: (Not Boring) Vibes

appCategory: Health & Fitness

appTagline: Music to focus, sleep, & relax

companyStage: Bootstrapped & Indie

screenElements:
Progress Indicator
Animation & Video

screenElements:
Animation & Video
Full-Screen Overlay
Floating Action Button
Progress Indicator
Progress Indicator
Animation & Video

screenKeywords:
9:41 _ CalT
i “‘ J
D
|9:41 ull T (.
(ovnene @)
)
]S :
JUUd
—
>
2
|. 4
\ = o
|9:41 all © @B
¢
#
o | =
| z =
‘\ ENERGY
|
UBILL
|
_‘


Blog post

pagePatterns:
Blog Post
Content Section

pagePatterns:
Blog Post
Blog Page
Blog Post
Content Section

screenKeywords:
vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
ESLdpIISI SLorng ddtla privacy pracuces eally ainad rmore Coririgeriuy sei Lo CUsLoIniers 1ocdied drouriu uie
world.
Reach out to your Vanta sales representative or book a demo to learn more.
Receive additional guidance and free pen tests from

y .
Vanta’'s extensive partner network automated
Startup teams often have limited time and resources—which can make it hard to get the support they Securlty platform
need to achieve their security and compliance goals quickly. Without this expertise, they risk delaying
critical security requirements which can hinder growth and the establishment of a robust security culture Download eBook -
early.
As a Vanta customer, you get access to a seamless platform that automates the work of getting and
staying compliant. Additionally, if you need extra support, you get access to leading solutions and service
providers that can round out your foundational security program needs. From vCISO services to security
program development, penetration testing or external scans, Vanta’s extensive partner network can help
meet your needs every step of the way.
Cognisys and Workstreet, two of Vanta’s partners, now offer complimentary web app penetration tests to L)
Vanta customers, ensuring an easy path towards understanding your security gaps and opportunities.
Find the partner that’s right for you in Vanta’s service provider directory. . .

-_— Share this article

Get compliant fast and stay compliant with ease @ e @
These new and enhanced capabilities provide startups everything they need to get compliant fast and
stay compliant with ease, across Vanta’s tools, partners and expertise. Book a demo to learn more.
WRITTEN BY
Natalie Hurd @
|vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
Curated content for the compliance connoisseur: We cover
the latest on frameworks, risks, and security trends.
HITRUST A” BIOgS Search Tags v
soc 2
ISO 27001
ISO 42001 bk
o=, sz==_ sm=_, = Vanta achieves aws O

HIPAA =3 the AWS Security PARTNER
GDPR . rye— Competency _— -

Se—— . : &
copa == ‘ ° N
NIST
Compliance PRODUCT UPDATES ~ BLOG PRODUCT UPDATES ~ BLOG SECURITY  BLOG
Company news
Security Vanta’s latest product Vanta continues AWS 5 best practices for
Product updates capabl}ltles accelerate momgntum with executive reporting @

comnliance for <tartiins Cecuiritv Combpetencvy
|vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
Related Resources GREIIIITITIING)
Product \ Product \
Vanta achieves update ““g"‘ update "“g"‘
the AWS Security PARTNER i EN
o - Vanta e
PRODUCT UPDATES ~ BLOG PRODUCT UPDATES ~ BLOG PRODUCT UPDATES ~ EVENT PRODUCT UPDATES ~ BLOG
Vanta continues AWS New in Vanta | The Future of GRC New in Vanta | August
momentum with September 2024 . . 2024
R Join our virtual event broadcast to
Securlty Competency'" This month, Vanta launched new hear product upfjates and See what's new in the Vanta
Wi aife Geiied (0 ANNEUReE Tk features to scale your GRC program, renowned security experts on the... platform for August of 2024.
VETiE e aelievee s AGrrEn easily create SOC 2 policies, assign...
Web Services (AWS) Security...
Get compliant and build trust—fast s s s
Top 50 Top 50 Top 100 )
Security Products Products for Mid-Market Highest Satisfaction Products ‘: “‘"’éi)‘ :‘
Request a demo 9 2024 2024 2024 ~
|vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
HIPAA
Compliance roadmap
Get up and running on Vanta fast with these key activities. Choosing the right HlTRUST
e e certification level and streamlining
o Program set-up 2 Personnel ready 3 Audit readv 2 Report in hand imp|ementati0n
Onboarding
COMPLIANCE
s Assemble your team @ 20f2completa How to Automate ISO 27001 & SOC
2 Compliance
ﬁ Unlock automated tests 0 of 2 complete v
(=) Get started with policies 0 of 3 complete v COMPLIANCE
Demystifying the EU Al Act
PRODUCT UPDATES SEPTEMBER 17, 2024 COMPLIANCE
’ Save time on security reviews with
Vanta’s latest Pro duct Questionnaire Automation & Trust
Center
capabilities accelerate
L]
s
compliance for startups o


Vendor detail

pageType: Application Application Application Application

screenKeywords:
Vanta ® ® @& (N
Vendors / Amazon Web Services
@ Home aws Amazon Web Services
Y= Tests ~— o High inherent risk
[ Reports
Overview Risk management  Security review Additional details 1>
Compliance
Trust Center . . Info
© Most recent security review —
@ Risk Completed on May 2, 2024 by J
Name Amazon Web Services
I & Vendor
= Assets Summary Website aws.amazon.com
Inventory
No comments provided Auth method
Vulnerabilities
Auditor visibility Visible ®
Settings
22 Personnel Security owner ® Unassigned
& Integrations Business owner ® Unassigned
Dates
Last review May 2, 2024 &
Account manager
Name Incomplete
€l
Email Incomplete
|Vanta ® ® @& (N
Vendors /| Amazon Web Services
CRubL aws Amazon Web Services
Y= Tests ~— o High inherent risk
[ Reports
Overview  Risk management  Security review Additional details 1>
Compliance
Trust Center . Info
© Risk management —
@ Risk
Name Amazon Web Services
I & Vendor Inherent risk
= Assets ® High risk o Website aws.amazon.com
entery Auth method
Vulnerabilities Types of data processed Additional notes
Settings Mobbin's data Mobbin's employee data 2 Auditor visibility ML)
22 Personnel Security owner ® Unassigned
Y Integrations Business owner ® Unassigned
Dates
Last review May 2, 2024 &
Account manager
Name Incomplete
€l
Email Incomplete
|Vanta ® ® @& (N
Q Help... #B+K .
Active 46 Archived
@ Home
Q Search vendors Category v Inherent risk v Security owner v Data agreement v Review status v &) Review due date v =
Y= Tests
Reports
W P Name / Category Inherent Risk Data Agreements ® Security Review Last Reviewed
Compliance aws Amazon Web Services A High - o Up to date May 2, 2024
" Cloud provider Due May 2, 2025 '
@ Trust Center
2 Apple Business Manager . .
. Medium — Not required —
[ Risk « Other & e 9
S V
& Vendor
I ? © Medium — @ Not required -
= Assets
Inventory ? © Medium — @ Not required -
Vulnerabilities
’ © Medium - @ Not required —
Settings
22 Personnel =] i — i —
v © Medium @ Not required
U Integrations
v 9 ’ © Medium — @ Not required —
L ~ High — @ Uptodate Jun 5, 2024
Due Jun 5, 2025
- ~ High — @ Uptodate May 2, 2024
Due May 2, 2025
™ A High — Up to date May 2, 2024
a g ° Due May 2, 2025 v
[ ] ~ High - Up to date May 14, 2024
€l H g O May 14, 2025 M
|Vanta ® ® @& (N
Vendors / Amazon Web Services
" .
CRubL aws Amazon Web Services
Y= Tests ~— o High inherent risk
[ Reports
Overview  Risk management  Security review Additional details 1>
Compliance
Trust Center . . Info
© Security review —
@ Risk
Name Amazon Web Services
I & Vendor Reviews
= Assets Website aws.amazon.com
entery Auth method
Vulnerabilities
May 2, 2024 Auditor visibility  Visible ®
Settings
22 Personnel Security owner ® Unassigned
. Files i i
Y Integrations Business owner ® Unassigned
Title Source Mapped security reviews
Dates
SOC 3 Report Uploaded by J Oct 9, 2023 -
AWS_SOC3.pdf May 2, 2024 Last review May 2, 2024 &
1to 10f 1results Show per page 20 v
Account manager
Name Incomplete
€l
Email Incomplete


Requesting an auditor introduction

pageType: Application Application Application Application Application Application

screenKeywords:
v A
Connecting integrations enables Vanta to automate evidence collection and
Vanta < monitoring for you.
Finish Starter Guide
+— Launch policies and procedures 4 of 4 complete v
15/20 tasks completed "™ A successful audit requires proper documentation, which includes a concise set of
policies.
Q Go to... #8+K
OVERVIEW ~
o  Prove your compliance 0 of 3 complete  ~
Home a . . i .
Select an auditor to help with your compliance journey or self attest to your
Tests compliance.
COMPLIANCE ~ Intro: what to expect from your auditor
Frameworks i o . .
Fill out auditor introduction form Skip Get started
Controls
Selfieies Confirm auditor selection
Documents Grant your auditor access to Vanta
TRUST ~
Trust Report
Questionnaires ..» Scoperesources 3 of 3 complete v
=
Review your employee list, devices, and cloud resources to ensure the right things are
RISK ~ in scope for your compliance program.
Risk management
Vendors hi Prepare evidence 2 of 2 complete v
Vulnerabilities Collecting ewdence. like tgsts and uploaded documents helps you stay organized
through your compliance journey.
®
ORGANIZATION ~
|Request an auditor introduction X
No auditor yet? No problem! Tell us a bit more about your security and compliance goals, and we'll introduce
you to two different auditors to help you make a selection. If you'd like to request an auditor for any additional
standards, please note it in the "Is there anything else we should know?" question.
What standards would you like to request an audit for?

SOC 2 v
What's your budget?

Low cost: $8,000 - $12,000 USD v
Ideally, when would you like to complete your audit by?

Moderate pace: within the next 3-6 months v
Who should we send the introduction email to?

Jane Smith (jsmith.mobbin2@gmail.com) v
Is there a preferred timezone we should keep in mind? @

Etc/GMT-8 v

Select any other frameworks you're planning on pursuing in the next year Optional

Select v
Is there anything else we should know? Optional 0/250
|v A
Connecting integrations enables Vanta to automate evidence collection and
Vanta < monitoring for you.
Finish Starter Guide
+— Launch policies and procedures 4 of 4 complete v
15/20 tasks completed T A successful audit requires proper documentation, which includes a concise set of
policies.
Q Go to... #8+K
OVERVIEW ~
o  Prove your compliance 0 of 3 complete  ~
Home a . . i .
Select an auditor to help with your compliance journey or self attest to your
Tests compliance.
COMPLIANCE ~ Intro: what to expect from your auditor
Frameworks i o .
Fill out auditor introduction form
Controls
Selfieies Confirm auditor selection
Documents Grant your auditor access to Vanta
TRUST ~
Trust Report
Questionnaires ..» Scoperesources 3 of 3 complete v
=
Review your employee list, devices, and cloud resources to ensure the right things are
RISK ~ in scope for your compliance program.
Risk management
Vgl hi Prepare evidence 2 of 2 complete v
Vulnerabilities Collecting ewdence. like tgsts and uploaded documents helps you stay organized
through your compliance journey.
®
ORGANIZATION ~
|Request an auditor introduction X
No auditor yet? No problem! Tell us a bit more about your security and compliance goals, and we'll introduce
you to two different auditors to help you make a selection. If you'd like to request an auditor for any additional
standards, please note it in the "Is there anything else we should know?" question.
What standards would you like to request an audit for?

SOC 2 v
What's your budget?

Low cost: $8,000 - $12,000 USD v
Ideally, when would you like to complete your audit by?

As fast as possible: within the next 12 weeks v
Who should we send the introduction email to?

Select an admin v
Is there a preferred timezone we should keep in mind? @

Etc/GMT-8 v

Select any other frameworks you're planning on pursuing in the next year Optional

Select v
Is there anything else we should know? Optional 0/250
|Vanta < Starter Guide
Finish Starter Guide Welcome to Vanta! Starter Guide Progress
e — Accelerate your account setup and audit prep. Pick up where you left off and check out our in-app help resources if you get
7/20 tasks completed stuck.
O 40f4
key systems connected
Q Go to... #+K
V Intro to Vanta 10of 1 complete v 0of 3

OVERVIEW ~ Learn about your frameworks and how Vanta works to meet your security and starter policies approved

compliance needs. .
Home Auditor selected
Tests
COMPLIANCE ~ = Connect your key systems 4 of 4 complete v
Frameworks Connecting integrations enables Vanta to automate evidence collection and

monitoring for you.
Controls
Policies
Documents ,— Launch policies and procedures 2 of 4 complete A
TE < o A successful audit requires proper documentation, which includes a concise set of

policies.
Trust Report

. . Verify your company name and logo
Questionnaires @
SR o Draft & approve Code of Conduct Policy
Risk management Draft & approve Information Security Policy
Draft & approve Asset Management Policy
Vendors
Vulnerabilities Draft & approve remaining policies
®

ORGANIZATION ~
|v A
Connecting integrations enables Vanta to automate evidence collection and
Vanta < monitoring for you.
Finish Starter Guide
+— Launch policies and procedures 4 of 4 complete v
15/20 tasks completed T A successful audit requires proper documentation, which includes a concise set of
policies.
Q Go to... #8+K
OVERVIEW ~
o  Prove your compliance 0 of 3 complete  ~
Home a . . i .
Select an auditor to help with your compliance journey or self attest to your
Tests compliance.
COMPLIANCE ~ Intro: what to expect from your auditor
Frameworks i o .
Fill out auditor introduction form
Controls
Selfieies Confirm auditor selection
Documents Grant your auditor access to Vanta
TRUST ~
Trust Report
Questionnaires ..» Scoperesources 3 of 3 complete v
=
Review your employee list, devices, and cloud resources to ensure the right things are
RISK ~ in scope for your compliance program.
Risk management
Vgl hi Prepare evidence 2 of 2 complete v
Vulnerabilities Collecting ewdence. like tgsts and uploaded documents helps you stay organized
through your compliance journey.
®
ORGANIZATION ~


Risk (old)

screenElements:
Side Navigation
Badge

pageType: Application Application Application

screenKeywords:
Vanta p Risk management Risk register More v Create snapshot
Review all of the risks that have been identified for your business. For each risk, review and describe the
ASSESSMENT risk treatment plan.
Finish Starter Guide Register (0)
— Library
12/20 tasks completed
Action tracker Getting started with your risk management View guided tours X
0 out of 5 completed

Q Go to... #+K Settings P
OVERVIEW ~
Home Inherent risk Residual risk
Tests

5 5
COMPLIANCE ~
Frameworks Low Low

- ®0 - ®0
Controls § §

£ Med £ Med
Policies - ©0 - ©0
Documents High High

1 20 1 =0
TRUST ~ 1 Likelihood 5 1 Likelihood 5
Trust Report
Questionnaires @
RISK ~ Q Owner v Categories v CIA Categories v Source v m
Risk management
Access You don't have any risks

Start with the Identify Risk section above.
Vendors
Vulnerabilities
®

ORGANIZATION ~
|Vanta < Risk management RiSI( register More v Create snapshot
Review all of the risks that have been identified for your business. For each risk, review and describe the
ASSESSMENT risk treatment plan.
Finish Starter Guide Register (1)
_—— Library
13/20 tasks completed
Action tracker ™ Getting started with your risk management View guided tours X
1 out of 5 completed

Q Go to... #B+K Settings P
OVERVIEW ~
Home Inherent risk Residual risk
Tests

5 5
COMPLIANCE ~
Frameworks Low Low

- ®0 - ®0
Controls § §

£ Med £ Med
Policies - ©0 - ©0
Documents High High

1 20 1 20
TRUST ~ 1 Likelihood 5 1 Likelihood 5
Trust Report
Questionnaires
RISK ~ Q Owner v Categories v CIA Categories v Source v m
Risk management

SCENARIO OWNER © RISK SCORE © TREATMENT RESIDUAL RISK STATUS
Vendors Company data is breached due to
human error and/or misunderstanding Unassigned ? ? ? Ne
Vulnerabilities of company requirements.
®

ORCANIZATION NG 1-1 of 1 result Show 20 v results per page Previous Next
|vanta < Home © View tasks
Finish Starter Guide Framework v
13/20 tasks completed
Compliance progress
Q Go to... ®+K
OVERVIEW ~ S0OC 2 >
Home o
24%
Tests
CEEEEE——
COMPLIANCE ~ 19 controls complete 80 total
Frameworks
Controls
bolicios Monitoring
Documents
= Policies > L Tests >
TRUST ~
Trust Report Needs attention @ Needs attention @
Questionnaires @ 14 37
- . ]
RISK ~ 10K 15 total 310K 68 total
Risk management
Access
Vendors
- © Vulnerabilities > = Vendors >
Vulnerabilities
Needs attention @ Needs attention @ ®
ORGANIZATION ~ 4 5


Vanta AI

pagePatterns:
Features Page
Feature Section

pagePatterns:
Features Page
FAQ Section

screenElements:
Navigation Menu
Animation & Video
Accordion

pagePatterns:
Header Section
Features Page
FAQ Section
Features Page
Feature Section

screenKeywords:
vanta Product ~  Solutions v  Customers Plans Resources v  Company Vv Login
On-demand Elr

Automated compliance Trust management platform sSOoCc 2 product - . -
Get (and stay) compliant with ease. Deepen your security—and demo [ER— -

customer trust. 1ISO 27001 = =
Conti GRC =

ontinuous . ) GDPR ) !)L./

Join the modern way to GRC. Vanta integrations

Sync with 350+ tools.

4 HIPAA Product Demo
ReldoniSKmanagement . Check out Vanta in action
Streamline vendor security VantaAl - BUIRUSIECSE
reviews. Hand off your most tedious tasks. Watch now —>
USDP

Questionnaire automation Vanta API NIST Al RMF
Auto-fill security questionnaires. Enhance your security and

compliance automation. 1SO 42001
Trust center
Demonstrate trust in real-time. CUStemiameworks

Additional frameworks
et e e Y s e e g I e o g e S @ -
5002 -=150270012022 - GDPR - HPAA - NST800-53 @ e i
Request a demo 9 Total revenue influenced
$1.75M e
|Van‘ta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
Hand off your most tedious tasks to Vanta Al. Prove trust and manage risk more
efficiently and confidently than ever before.
Your business requires trust
\'/_\;\
|vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
How do I get access to Vanta Al? @
Vanta Al is currently in beta and available to paying Vanta customers via the products they have
signed up for. For example, Vanta Al for reviewing vendor security documentation is available to
customers that have purchased our Vendor Risk Management offering.
If you're already a Vanta customer, get in touch with your account manager to learn where you can
use Vanta Al.
Which technologies does Vanta Al use? @
How does Vanta Al share my data with Al models? @
What security measures do you have in place for Vanta Al? @
How reliable is Vanta AI? @
|Van‘ta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
From vendor reviews and questionnaires to managing compliance controls,
Vanta Al helps you work smarter.
x| & Facto
Review vendor security
o Security review
docs instantly —_—
Vanta Al automatically extracts findings .
from SOC 2 reports, custom security Review in progress
questionnaires, and other documents, Security questions
helping you complete vendor security
reviews in record time.
Learn more 9 “The audit was for the period between March 2022
and March 2023.”
+: Answered by Vanta A
), “
\’r\{\


Requesting a demo

pagePatterns:
Features Page
Hero Section

screenPatterns:
Other Action
Acknowledgement & Success

screenKeywords:
vanta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
—
Can’t wait to learn more Get started by:
about Vanta?
‘ D Watching our 45 minute on-demand demo >
AR
Y
@ Taking a product tour 2>
|; I' Reading our latest content 2>
|vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
° .
compliance, pain iree
Request a demo to get started
Put your audit prep on autopilot—and finish in 50%
less time than doing it the traditional way. Vanta Work email*
automatically gathers the evidence you'll need to
. . . Company headcount*
get compliant—and continuously monitors your
systems to make sure you stay compliant. Please select “
Where is your company headquartered?*
Pt | O o mmmremommmooooeoeooo Please select N
aws IA ° frems overdue How did you hear about us?
- e ———— - >
; Risk Management
' > Please select o
i 8 Risk Distribution Progress © Items due soon
B (e u S (O rminterested in becoming a Vanta partner as an MSP,
N i = .ll s 1 P Reseller, or Partner.
i . HE . ’ Subject to Vanta's Privacy Policy, you agree to allow Vanta to contact you via the
| N u u b 2 /_/ email provided for scheduling and marketing purposes.
1 I
& R e Aok scoe 15027001
. 68% Request a demo
N 1
- soc 2
68% @
|vanta Product v Solutions v Customers Plans Resources v Company v Login
I o . f Request a demo to get started
compillance, paln iree
alexsmith@content-mobbin.com
Put your audit prep on autopilot—and finish in 50%
less time than doing it the traditional way. Vanta Alex Smith
automatically gathers the evidence you'll need to . )
. N . ASMobbin UX Designer
get compliant—and continuously monitors your
systems to make sure you stay compliant. Company headcount*
1-20 v
PRt O i e N Where is your company headquartered?*
aws IA it United States v
—— L ) >
' i Risk Management
. >
l e P pogess  temed How did you hear about us?
i @‘ [ ] > .
N E EE 15 Article/Newsletter v
: = . . o2 >
R | | H B
A K u B e ; /—/ O rminterested in becoming a Vanta partner as an MSP,
1 |
Reseller, or Partner.
Risk Scenario owili Riskscore 150 27001
& Subject to Vanta's Privacy Policy, you agree to allow Vanta to contact you via the
® 68% email provided for scheduling and marketing purposes.
‘ i ' Request a demo
SOC 2
68% @
|Van‘ta Product v  Solutions v Customers Plans Resources v  Company Vv Login
You're one step
Thanks for your interest in learning more about Vanta. We'll be in Y
touch very soon to set up a customized demo and get a better \,’
understanding of your compliance needs. “I
Y4
{,
’ e 3
Can’t wait to learn more Get started by:
about Vantar
‘ D Watching our 45 minute on-demand demo 2>
H
P <4


Adjusting presence

screenElements:
Animation & Video
Progress Indicator

screenElements:
Animation & Video
Progress Indicator
Animation & Video
Full-Screen Overlay
Floating Action Button
Progress Indicator


People

screenPatterns: Misc Misc

screenKeywords:
Vanta ® # & (N
Q Help... 8+K Groups
A MEme Organize personnel based on criteria that they have in common, such as employment status or department.
Y= Tests People Q Search... Source v
@ Reports Groups
Checklists GROUP PEOPLE CREATED BY CHECKLIST
Compliance
© Trust Center Default group  Default ‘ AK VN Vanta v
@ Risk
1-1 of 1 results Show 20 v results per page

Overview

Risk register

Risk library

Action tracker

Snapshots

Settings
& Vendor
= Assets

I % Personnel

People

Computers

Access

Settings

€l
|Vanta ® ® @& (N
Q Help... $+K People More
© Home Full visibility of your company's personnel, along with their Vanta task status. Not sure where to get started? Learn more at
our getting_started guide for the Personnel Hub.
Y= Tests
People
@ Reports . A 4 people found in your HR system could not be matched to accounts in Vanta
roups Either manually connect them to existing accounts in Vanta, create a new Vanta account for them, or do not monitor View
Compliance Checklists them by marking them as 'out of scope'
@ Trust Center
Q Search Status v Task status v Group v Audit window v
@ Risk
Overview
D NAME GROUPS g;/'?'ET E';l\'[l')E STATUS TASK STATUS
Risk register
Risk library O G\J(ex Smith (You) Design Team 8/6/2024 —_ Current @ Tasks complete
Action tracker Sam Lee . . i
(] Senior Machine Lear... Engineering Team 5/8/2023 9/30/2023 Former @ Offboarding complete
Snapshots
Settings (]} 10/1/2023 — Current © Tasks complete
& Vendor
= 0 9/9/2024 — Current ® No tasks
= Assets
I o9 P O 8/1/2024 — Current © Tasks complete
People
(] 2/17/2023 12/15/2023 Former @ Offboarding complete
Computers
EEE O 4/17/2023 — Current © Tasks complete
Settings
€ (] 4/1/2024 - Current © Tasks complete
€l
M 8/6/2024 -_— Current @ Tasks complete
|Vanta ® ® @& (N
Q Help... #+K H
S Checklists More v
@ Home
People
= Tests Groups Get started with Checklists X
Assign tasks to your personnel by assigning checklists to their groups.
) (et Checklists
Compliance ° . . Review SLA
Review-your-seedrity-task-StAs eview s
@ Trust Center
O Risk © Review-the-default-group-and-ts-eheeldist Review Default Group
Overview
© Review-which-groups-are-assigned-to-a-cheekdist Review Groups
Risk register
Risk library ° Assigr-apeintef-eentactfor-your de#ab”'t‘g“%*p's‘eheek“ﬁ' t
Action tracker ° . . . . L
Preview-checklistandreviewpersonnetreminders earn more
Snapshots
Settings
Q Search...
& Vendor
= Assets
CHECKLIST LAST EDITED # OF GROUPS POINT OF CONTACT
I Z% Personnel
People Default Default 8/23/2024 1 2 v
Computers
i 1-1 of 1 results Show 20 v results per page
Access
Settings
€l
|


Careers

screenElements: Photo Pagination Photo

pagePatterns:
Careers Page
Careers Page
Careers Page
Careers Page
Careers Page

pageType: Marketing Marketing Marketing Marketing Marketing Marketing Marketing

screenKeywords:
vanta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
[J [J [J
Join our mission to secure
[J
the internet and protect
consumer data
Vanta was built on the idea that software can be used to do amazing things
for the world—if we trust it to do so. We build security tools that help
internet businesses get secure and prove their security. And we can’t do
it alone.
E boal? ) ] _;_‘ o Es ¥
‘ Ve, | i~ '
_ | X " | ;
|vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
Our Team Benefits:
ur lea enerits.
Health & Wellness
Vanta values the health and well-being of our teammates
and offers comprehensive medical, dental, and vision
coverage for teammates and dependents. Vanta is excited
to provide an additional range of benefits that holistically
support your physical, emotional, and financial wellbeing.
| "
- .
Work Your Way .' I y L . ) '
S AN AR = o i S -
Enj te-first setup if you're in the US, hybrid at { A RN B8 A _ \t
nJo.ya remc.) e-firs .se up if you're in the or go hybrid a ; R ‘ < .\ )
our international offices - 8 ./,Al 4 f' I
- \ o . x/ =
Paid Parental Leave u.'“f‘; [ £
| &
- Y »

Industry competitive paid parental leave for all parents v ' i : | .

& | _ |
Time Away -
Industry competitive and generous PTO policy
401K Plan @
|vanta Product v  Solutions v  Customers Plans Resources v  Company ~ Login
. \
About Security 4 +
, . & +; TryVanta Al
Learn more about Vanta. Understand Vanta's security and compliance .
strategy. N ’aa b
Careers Press \
. , -
Join ourteam! See the latest in Vanta news and press releases. Lo e
Introducing Vanta Al: Powering the future
of trust management
Learn More >
= e T st TssrTr T T J -c:aw .H\gl\- lMedw: ILow- - - IA;ned :asslgned - - - -
Vanta's trust management platform takes the manual work ramework progress opeoming it
out of your security and compliance process and replaces =
it with continuous automation—whether you're pursuing //AT:\_\\— e >
Pt ol . e SOC 2 Type | Audit N
your first framework or managing a complex program. ESivaan : —
p— - e - - ‘ igczrype\lfud“ N
Request a demo 9 Total revenue influenced
$1.75M o
|vanta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
Open Roles
Vanta was built on the idea that software can be
used to do amazing things for the world—if we
trustittodo so
We build security tools that help internet businesses get
secure and prove their security. And we can’t do it alone.
Offers related to employment at Vanta will come from a vanta.com email address. We will never ask for
payment as part of the interview or onboarding process.

Filter by © by Location v £ pbyTeam v
Sales Location L N
Enterprise Sales Manager (West Coast) Remote US earn more
Legal Location L N
Product and Privacy Counsel Remote US earnmore @
|vanta Product v  Solutions v  Customers Plans Resources v  Company Vv Login Request a demo
Sales Location
. . N Learn more -
Business Development Representative Il - (EMEA) Dublin
Marketing Location
. . . Learn more -
Creative Director, Design Remote US
Sales Location
. Learn more -
Partnerships Manager - EMEA London
Design Location
A . . Learn more —»
Senior Product Designer, Design Systems Remote US
CS Location
. . Learn more —»
Senior Manager, Strategic Customer Success Remote US
Engineering Location
. . Learn more —»
Senior Software Engineer, Backend (MongoDB) Remote US
Sales Location
. . . Learn more -
Solutions Architect, Enterprise Remote US
Security Location
. Learn more -
GRC Subject Matter Expert, Product Remote US
© v @
|vanta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
¢
‘ Our Principles
Vanta’s mission is to secure the internet and
. protect consumer data. To do that, we're
7 building an enduring company where all
i /,\ Vanta’'ns can do the best work of their careers, ‘
/ . & 3! which requires us to articulate, and regularly |
f ¢ : A ' revisit with honesty and clarity, how we work
- ‘ =) and how we make decisions - we call these l
\ vy - our “Principles.”
| { » . We use these Principles every day in how we
: g operate and build Vanta, and we also screen
i 4 all of our hires for them . The Principles are the
i t core tenets that guide how we work, how we
; b hire, and how we interact with customers and
, -l : partners.
‘f’ "‘f # 3':':' T
< ‘ "* lg@i - As Vanta grows, we’ll update our thinking and
, 4 Yk revise these Principles, balancing “what got us
‘ | e " A here” with what's likely to propel us further.
ﬁ;ﬁ'{ |
|vanta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
9 .
A Vantan will...
3L @
A 0 %
Put our customers first Bias for action Win as one team
We center our customers and their needs All Vanta’ns bias for action, which means Vanta’ns prioritize the whole of Vanta in
in our work, and invest in long-term that they make decisions and act quickly their work, and will put their team (both the
relationships with them. What and how we even in the face of uncertainty, and are “team” of Vanta the company, and the
build is driven by our customers first and willing to make mistakes in the process. We team(s) they work with) before themselves
foremost, so that we’re more likely to know that most decisions are “two-way when doing their work. We celebrate the
achieve our mission of securing the doors” When we get new information, successes of our teammates, knowing that
internet. we’re comfortable with reversing decisions those successes are also our own, and we
as long as we move quickly so we can presume good intent because we know
iterate and learn. that our teammates are also putting Vanta,
and our customers, first.
= D =
Decide with frameworks Lead with resilience Do what it says on the tin @
Vanta’ns are known for biasing to action Vanta created and leads a dynamic, We are building a trust management


Assigning a test owner

pageType: Application Application Application Application Application

screenKeywords:
Vanta < TeStSI A" 7 Edit SLAs
CATEGORY
All 77
Finish Starter Guide
HR 16
11/20 tasks completed I 3 OK 31 Needs attention 77
Policy 21
Q Go to... 38+K 28% (8 Overdue 1
Engineering 31
© Due soon 15
CEEEEE——
OVERVIEW ~ Risks 6
310K 108 total @ Needs remediation (no SLA assigned) 61
Home Custom
fests DEACTIVATED
Q Framework (1) v Type v Owner v Status v Integration v Control v
COMPLIANCE ~ All deactivated
Only upcoming tests  Clear
Frameworks
Controls
NAME CATEGORY OWNER TYPE STATUS ¢
Policies
Documents ;o : Oct 7, 5:22
/S\ggllzcatlon changes reviewed Engineering Unassigned Automated... ® PM
12 items to remedi...
TRUST ~
Trust Report Oct 11, 4:43
QAOF:;“ (CECEDUILEEEE Information tech... Unassigned 2 Automated... b PM
Questionnaires @ 2 items to remedi...
RISK ¥ :
Inventory list tracks resources that con... Engineering Unassigned Automated © g,&t 1,513
Risk management soc2 1item to remediate
. . ) Oct 11, 5:22
Vendors S(IthH;b accounts associated with users Human resources Unassigned Automated... ® PM
8 items to remedi...
Vulnerabilities
. oct11,5:2. ®
ORGANIZATION ~ l;AOFcAzon GitHub Information tech... Unassigned Automated... i PM
4 items to remedi...
|Vanta < TeStSI A" 7 Edit SLAs
CATEGORY
All 80
Finish Starter Guide
HR 16
11/20 tasks completed I 3 OK 31 Needs attention 80
Policy 21
Q Go to... 38+K 27% (8 Overdue 1
Engineering 33
© Due soon 16
CEE—
OVERVIEW ~ Risks 7
310K 111 total @ Needs remediation (no SLA assigned) 63
Home Custom
Tests DEACTIVATED
Q Framework v Type v Owner v Status v Integration v Control v
COMPLIANCE ~ All deactivated .
Only upcoming tests
Frameworks
Controls NAME CATEGORY OWNER TYPE STATUS 4
Policies
- . Oct 7, 5:22
Documents /S\ggllzcatlon changes reviewed Engineering Unassigned Automated... ® PM
12 items to remedi...
TRUST ~
Oct 11, 4:43
WSS [iGTsietn l;AOFcAzon Google Workspace Information tech... Unassigned Automated... i PM
Questionnaires @ 2 items to remedi...
. Oct 11, 5:13
RISK ¥ '
Isn(;lcer;tory list tracks resources that con... Engineering Unassigned Automated... © PM
Risk management 1item to remediate
Storage data versioned or retained (GC... . . . © Oct11, 5:14
] - Engineering Unassigned Automated... PM
Vendors Recommended as a security best practice 2 items to remedi
Vulnerabilities
. . . Oct 11, 5:27
GitHub accounts associated with users . © ! @
PM
ORGANIZATION ~ s0c 2 Human resources Unassigned Automated A
|Vanta < Tests: All 7 EditLas
CATEGORY
All 77
Finish Starter Guide
HR 16
11/20 tasks completed IT 3 OK 31 Needs attention 77
Policy 21
Q Go to... 38+K 28% (¥ Overdue 1
Engineering 31
© Due soon 15
CEEEE—
OVERVIEW ~ Risks 6
310K 108 total @ Needs remediation (no SLA assigned) 61
Home Custom
Tests DEACTIVATED
Q Framework (1) Typev  Ownerv  Statusv  Integrationv  Control v
COMPLIANCE ~ All deactivated
Only upcoming tests  Clear
Frameworks
Controls
NAME CATEGORY OWNER TYPE STATUS
Policies
Documents it : Oct 7, 5:22
/S\ggllzcatlon changes reviewed Engineering Unassigned Automated... ® PM
12 items to remedi...
TRUST ~
Trust Report Oct 11, 4:43
ZAOF(?ZOH Googla Workspace Information tech... ® Assignao v Automated... i PM
Questionnaires @ 2 items to remedi...
lSearch...
RISK ¥ :
Inventory list tracks resources that con... Engineering X Remove assignee ted o g&t M543
Risk management soc2 1item to remediate
Jane Smith
Access Jon Smith
i .
Vendors GitHub accounts associated with users Human resources ted © g,&t M, 5:22
soc2 8 items to remedi...
Vulnerabilities
. oct11,5:2. ®
ORGANIZATION ~ gﬁoFg‘zon GitHub Information tech... - ted.. © PM
4 items to remedi...
|Vanta < TeStSI A" 7 Edit SLAs
CATEGORY
All 77
Finish Starter Guide
HR 16
11/20 tasks completed I 3 OK 31 Needs attention 77
Policy 21
Q Go to... 38+K 28% (8 Overdue 1
Engineering 31
© Due soon 15
CEEEEE——
OVERVIEW ~ Risks 6
310K 108 total @ Needs remediation (no SLA assigned) 61
Home Custom
fests DEACTIVATED
Q Framework (1) v Type v Owner v Status v Integration v Control v
COMPLIANCE ~ All deactivated
Only upcoming tests  Clear
Frameworks
Controls
NAME CATEGORY OWNER TYPE STATUS ¢
Policies
Documents ;o : Oct 7, 5:22
/S\ggllzcatlon changes reviewed Engineering Unassigned Automated... ® PM
12 items to remedi...
TRUST ~
Trust Report Oct 11, 4:43
l;AOFcAzon Google Workspace Information tech... ) Automated... i PM
Questionnaires @ 2 items to remedi...
RISK ¥ :
Inventory list tracks resources that con... Engineering Unassigned Automated © g,&t 1,513
Risk management soc2 1item to remediate
. . ) Oct 11, 5:22
Vendors S(IthH;b accounts associated with users Human resources Unassigned Automated... ® PM
8 items to remedi...
Vulnerabilities
. oct11,5:2. ®
ORGANIZATION ~ l;AOFcAzon GitHub Information tech... Unassigned Automated... i PM
4 items to remedi...
|Vanta < Tests: All 7 EditLas
CATEGORY
All 77
Finish Starter Guide
HR 16
11/20 tasks completed IT 3 OK 31 Needs attention 77
Policy 21
Q Go to... 38+K 28% (¥ Overdue 1
Engineering 31
© Due soon 15
CEEEE—
OVERVIEW ~ Risks 6
310K 108 total @ Needs remediation (no SLA assigned) 61
Home Custom
Tests DEACTIVATED
Q Framework (1) Typev  Ownerv  Statusv  Integrationv  Control v
COMPLIANCE ~ All deactivated
Only upcoming tests  Clear
Frameworks
Controls
NAME CATEGORY OWNER TYPE STATUS
Policies
Documents it : Oct 7, 5:22
Application changes reviewed Engineering Unassigned Automated... ® PM
soc 2 . .
12 items to remedi...
TRUST ~
Trust Report Oct 11, 4:43
ZAOF(?ZOH Googla Workspace Information tech... Jane Smith Automated... © PM
Questionnaires @ 2 items to remedi...
RISK ¥ . Oct 11, 5:13
Isnc;/gr;tory list tracks resources that con... Engineering Unassigned Automated... o PM
Risk management 1item to remediate
. . . Oct 11, 5:22
Vendors Sét:;b accounts associated with users Human resources Unassigned Automated... i PM
8 items to remedi...
Vulnerabilities
; Saved owner for 1item oct11,5:20 @
ORGANIZATION ~ IQAOF?Zon i Information tech... Unassigned Automated... © PM
4 items to remedi...


Changing app icon

screenElements:
Bottom Sheet
Icon

screenElements:
Bottom Sheet
Icon
Logo

screenPatterns:
Settings & Preferences
Settings & Preferences

screenKeywords:
9:41 wll T @m)
[am———
VIBES X
AA  RHYTHM
! ACHIEVEMENTS
22 HAPTICS .
7O> KEEP SCREEN ON .
M ouick cuIpe
SUPER ! BORING
. MEMBERSHIP SUPER
. APP ICON GRAPHITE
= ADD A WIDGET
* WALLPAPERS
APPS
7 & ~
e e SV
|9:41 oll T @)
[
< APP IGON X
Oy GRAPHITE V4
e ANDY
MRy OPAL
e MEM
a CHROMA
. MONSTERS
. KARAT
CEDAR
———e
|~ o00000 o)
nNg You have changed the
icon for “Vibes".
d
al
| OK
<« A -
~ P
a-”'-! n


Customer story detail

pagePatterns:
Testimonials & Customer Stories Page
Testimonials & Customer Stories Page
Social Proof (Testimonial) Section
Testimonials & Customer Stories Page

screenKeywords:
Vanta Product v Solutions v Customers Plans Resources v Company v Login
CASE STUDY |
[J
SmartRecruiters
ves 20 hour |
week by proactively suc
[J
demonstrating trust Y "
° \ .\'H S ‘V‘»:\ 4 A~ . .ﬁ(-' -‘ : L “ ’"\ ‘ 4
with Vanta s SR R e G
B ”4 ST S VI (O T P A
COMPANY EMPLOYEES %, \t« \('/ T ) vx n ZEt + )
SmartRecruiters >500 y, & > 5 'EE “ f\-J "‘7 & . ? ‘:.( RS ‘. 4 A . (‘ .
LOCATION SOLUTION 3 - T, N '%\‘ 'J\:,.‘ A~ ity
San Francisco, CA Trust Center, 2] N S A AR “"\Z) i \\" L; & = N
Questionnaire Automation 7® RN S SNt Y NG ) &“g ol
E iG] 7 "t‘ // R, 2N \3 hT
)’”'*‘ i,.. { fEn @ ~ [ e EJ S | LS
INDUSTRY VANTA CUSTOMER SINCE bt 7 ' ? cEh. P 4 * ‘ﬁra\ : - —
General Software 2023 ﬁt‘ » ; ‘, ‘ - y X
|vanta Product v  Solutions v Customers Plans Resources v  Company Vv Login
© SmartRecruiters
AUTOMATING SECURITY REVIEWS 20 HOURS SAVED PER WEEK ACCELERATING $500,000 WORTH
Through Vanta Trust Center, By streamlining the security review R
SmartRecruiters fast-tracks security process, SmartRecruiters saves 20 In just the first year, SmartRecruiters’
reviews by proactively sharing their hours per week across their pre-sales Trust Center played an instrumental
security posture and automating team. role in over $5600,000 worth of deals.
questionnaires responses.
“Prior to using Vanta, answering security questionnaires were manual and sales
cycles, elongated. With Vanta, we have shifted left. Now, the first thing we do during
the sales cycle is proactively sharing our Trust Center with the prospect’s security
team.”
THE COMPANY
Helping businesses get the talent they need
to succeed @
|vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
I1SO 27001 Cert Valid to 9- o, oot e N
2025.pdf fa) Availability & Reliability > Organizational Security >
SmartRecruiters, Inc. SOC 2 Status Page Employee Workstations Encrypted
Type 2 10-15-23 =] Denial of Service (DoS) Protection Employee Background Checks
What prospects and customers see when visiting SmartRecruiters’ Trust Center
“Trust Center makes it easy to prove to customers that we're
complying to all the different changes and evolutions of security
regulations.”
SmartRecruiters has also integrated their Trust Center with Salesforce, so the team can know when a prospect
requests security documents. This helps sellers get ahead of their customer meetings and come prepared to
speak to the topics that matter most to their prospects.
THE IMPACT
Saving time and accelerating deals
Since implementing Questionnaire Automation and Trust Center, SmartRecruiters has seen large gains in time
savings. They estimate their Trust Center has saved their team over 20 hours per week.
Additionally, prospects are moving through the sales process much faster. In one particular deal,
SmartRecruiters was able to eliminate multiple steps in the sales cycle. When the security team from a
prospective account reached out to schedule a meeting, SmartRecruiters included a link to their Trust Center in
the calendar invite.
After reviewing SmartRecruiters’ Trust Center, the prospect decided a call wasn’t necessary after all and was
ready to sign. “This fast tracked the deal for us and saved us time as we didn’t have to have a conversation with
them about security,” says SmartRecruiters. All told, their Trust Center was able to accelerate over $500,000 @
worth of deals in the first year.
|vanta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
Success stories
How companies build and prove trust with Vanta
Thousands of companies use Vanta to automate compliance,
unify risk management, and streamline security reviews.
'& J ! B
HIRINGE@) : ' 1 ‘
HO SUCCESS ARH .
HIRE - ‘ j ' - | -l
85 e ew’g‘%ﬁ"f’ﬁ;'ﬁw% ”ﬁ-“? ‘;:{?’-’f- ' % De ' 10 o R
T oF £ ;"“_‘é\i"‘ gy ~‘V \}7. b ¥ S - k4
© SmartRecruiters NEWFRONT : LA MODERN Y/
b7 = HEALTH Y/
PN /T
SmartRecruiters saves 20 hours How Newfront uses Vanta to Modern Health saves over 100
aweek by proactively... build trust with enterprises hours annually on security an...
Find out more —> Find out more —> Find out more > @


Reports

screenPatterns: Home Progress

screenElements:
Badge
Top Navigation Bar
Logo
Icon
Side Navigation
Progress Indicator

screenKeywords:
Vanta ® # & (N
Reports ¥ Submit feedback
View reports for insights into your program status and evolution
@ Home
Y= Tests Q =
I [ Reports
Report Created by Charts Last modifi... Last modifi...
Compliance P 4
g Grc':»gram :)velrv'lew . ; . ) Vanta Tests Risk +3 - — ®
@ Trust Center ain a top level view of your compliance and security program
@ Risk ) Trust Center report Vanta Trust Center — - ®
Understand trust center visitor activity and impact
& Vendor
1to 2 of 2 results Show per page 50 v
= Assets
22 Personnel
¥ Integrations
€|
|Vanta ® ® @& (N
<Ll s Home @ View tasks
I @ Home .
Compliance progress Last updated less than a minute ago
Y= Tests
[ Reports SOC 2 >
i )
Compliance 99/0
@ Trust Center D
103 controls complete 104 total
[J Risk P
& Vendor
= Assets Monitoring
22 Personnel .
= Policies > L Tests >
¥ Integrations Needs attention ® Needs attention ®
. D
15 OK 15 total 141 OK 148 total
© Vendors > [0 Documents >
Needs attention ® Needs attention ®
. D
46 OK 46 total 37 OK 39 total
€|


Framework detail

screenElements: Drawer Card Banner Avatar

screenKeywords:
Vanta ® ® @& (N
1Y U IVEUUT Ul WS LUV eS
B Related to Privacy
2 Help... #¥+K
P 2.0 Privacy Criteria Related to .
Choice and Consent CC 1.0 Control Environment ~
@ Home
P 3.0 Privacy Criteria Related to
Y= Tests Collection
@ Reports P 4.0 Privacy Criteria Related to Use, CC11-
Retention, and Disposal
. i P 5.0 Privacy Criteria Related to
Compliance Access CONTROL EVIDENCE READINESS OWNER
Frameworks P 6.0 Privacy Criteria Related to
Disclosure and Notification Employee background checks performed
Controls i o The company performs background checks on new O 2/2 Jane Smith (You)
P 7.0 Privacy Criteria Related to emp|oye§s_ P g
- Quality
Policies
P 8'9 Pr]vacy Criteria Related to Code of Conduct acknowledged by contractors
Documents Monitoring and Enforcement ” .
The company requires contractor agreements to include O 3/3 Jane Smith (You)
. . a code of conduct or reference to the company code of
Audits SD - SOC 2 Supportlng Compliance conduct.
Documentation
@ Trust Center
Code of Conduct acknowledged by employee...
A The company requires employees to acknowledge a code
[ Risk of conduct at the time of hire. Employees who violate the O 22
code of conduct are subject to disciplinary actions in...
& Vendor
= Assets Confidentiality Agreement acknowledged by c...
The company requires contractors to sign a O 2/2
.o confidentiality agreement at the time of engagement.
202 Personnel
N . Confidentiality Agreement acknowledged by e...
¥ Integrations The company requires employees to sign a confidentiality N 1/3
agreement during onboarding.
Performance evaluations conducted
The company managers are required to complete om
performance evaluations for direct reports at least
annually.
€|
cC12 -
|Vanta ® ® @& (N
Frameworks View audits
@ Home All
Y= Tests
Q
[ Reports
T e , ISO 27001:2022
menore ISO 27001:2013
Global benchmark to
Controls Global benchmark to demonstrate an elective
sm 2 View requirements > demonstrate an elective Information Security
B Information Security Management System (ISMS).
Policies Management System (ISMS). For businesses selling to
For businesses selling to customers outside of the US.
Documents customers outside of the US. Includes 2022 version revisions
and updates.
Audits
@ Trust Center
O 929% ) 46% Schedule a call \ 34% Schedule a call
@ Risk
& Vendor
& Assets GDPR ISO 42001
%t Personnel ISO 42001 defines the
. . European Union (EU) regulation requirements for establishing,
g:étjri itraotte;sct(g:%_l;ea%hlatlon ® to protect personal data and implementing, maintaining and
¥ Integrations Information (PHI). For US privacy of its citizens. For all continually improving an Al
e .rocess companies that do business or management system for the
transpmit o storg PHI da'ta have employees located in the responsible development,
! . EU. provision and use of Al
systems.
3 37% Schedule a call J 63% Schedule a call \ 34% Schedule a call
€l
|Vanta ® ® @& (N
Q Help... ¥+K Frameworks
SOC 2 More v
@ Home
= Tests Q Search... Control status v Owner v
[ Reports
REQUIREMENT CATEGORIES €l
I Compliance . Completion
CC 1.0 Control Environment
Frameworks CC 2.0 Communication and Controls OK Test (2 132133
Information
Controls 99% S 99 %
CC 3.0 Risk Assessment
Policies . 2
CC 4.0 Monitoring Activities Document (3 SHEE
103 controls 104 total S . 97 %,
Rocuments CC 5.0 Control Activities
Audits CC 6.0 Logical and Physical Access
Controls
@ Trust Center ) o .
CC 7.0 System Operations Audit timeline View audits
i . ange Management
@ Risk CC 8.0 Change M
3 Vendor CC 9.0 Risk Mitigation ° Observation completed
= Assets C1 A_dditigngl Criteria for . .
= Confidentiality # Congratulations!
% Personnel P 1.0 Privacy Criteria Related to Notice
and Communication of Objectives
Related to Privacy
¥ Integrations 020 pri Criteria Related
.0 Privacy Criteria Related to .
Choice amt oy CC 1.0 Control Environment ~
P 3.0 Privacy Criteria Related to
Collection
P 4.0 Privacy Criteria Related to Use, CC11-
Retention, and Disposal
P 5.0 Privacy Criteria Related to
<l Access CONTROL EVIDENCE READINESS OWNER
P AN Privarv Criteria Related tn
|Vanta Y
Enlu tmétl;wu U wyjsLuves Employee background checks performed
elated to Privacy
The company performs background checks on new employees.
P 2.0 Privacy Criteria Related to .
Choice and Consent CC 1.0 Control Envirc
@ Home
P 3.0 Privacy Criteria Related to ID HRS-1 ®
Y= Tests Collection
@ Reports P 4.0 Privacy Criteria Related to Use, CC11- Source Vanta
Retention, and Disposal
050 Pri Criteria Related Domain Human Resources Security
. .0 Privacy Criteria Related to
Compliance CONTROL
I 5 Access Owner & Alex Smith (You)
Frameworks P 6.0 Privacy Criteria Related to
Disclosure and Notification Employee background checks g Note -
Controls Th f back d
P 7'0. Privacy Criteria Related to em%ﬁg:ssny PErIOIMS Backarou e .
Polic Quality Mapped elements  History
olicies —_—
P 8.0 Privacy Criteria Related to Code of Conduct acknowledgec
pocuments Monitoring and Enforcement The company requires contractor agre
SD - SOC 2 Supporting Compliance a code of conduct or reference to the W Tests O 1/10K
i - duct.
AUCE Documentation condue
@ Trust Center Code of Conduct acknowledgec Company. has an approved Human Resource Security, Policy 3, (V]
A The company requires employees to a
[ Risk of conduct at the time of hire. Employe¢
code of conduct are subject to discipli
S Vendor Run background checks directly from Vanta
= Assets Confidentiality Agreement ackn Vanta partners with Certn to offer one-click, automated background
= o
The company requires contractors to ; checks at the lowest cost in the industry
22 Personnel confidentiality agreement at the time ¢
N . Confidentiality Agreement ackn Cet started
© Integrations The company requires employees to s
agreement during onboarding.
Performance evaluations condu [) Documents O 1/10K
The company managers are required {
performance evaluations for direct reg
annually.
Completed employee background checks @ (]
€|
cC12 -


Switching to audit view

screenPatterns:
Misc
Timeline & History

screenElements:
Full-Screen Overlay
Banner

screenElements:
Avatar
Full-Screen Overlay
Banner
Banner

screenPatterns:
Misc
Timeline & History
Internal Tool

screenKeywords:
Vanta ® ® @& (N
Q Help... #+K A
: . Audits
S e Active  Completed
Y= Tests
Q Search Audit firm v Framework v Status v
[ Reports
I Compliance .
SOC 2 Type Il Audit & Awaiting report Openaudit -
Frameworks @
& Auditing ACME LLP RC CS KC MB +6
Controls
Policies ) Auditor gets access May 9, 2024 Audit progress
D 1 c_________________________________________________________________[ J
ocuments
b9 Audit starts May 9, 2024 ) )
® Not ready for audit 1 ® Flagged by auditor 0
Audits
L) Audit ends August 9, 2024 ® Ready for audit 185 ® Accepted 0
@ Trust Center
® Not applicable 9
[ Risk
& Vend
s vendor E No reports available yet
= Assets
22 Personnel
U Integrations @ S0OC2 Type Il Audit = Awaiting report Open audit
& Auditing ACME LLP JA
L) Auditor gets access May 9, 2024 Audit progress
c___________________________________________________________________[ )
b9 Audit starts May 9, 2024 ) )
® Not ready for audit 1 ® Flagged by auditor 0
<l L) Audit ends August 9, 2024 ® Ready for audit 185 ® Accepted 0
|Vanta @ Auditor view % Exit audit view
Mobbin, SOC 2 Type II (© Awaiting report: May 9 2024 - Aug 9 2024 ) auditing Acme LLP (DD
e —
I il i Evidence © View SLAs Export v
Controls
Framework .
Audit progress
@ Risk c_______________________________________________________________________________________________________________________[ ___}
= Vendor ® Not ready for audit: 1 ® Flagged by auditor: 0 ® Ready for audit: 185 ® Accepted: 0 ® Not applicable: 9
&) Assets
22 Personnel Q Type v
N . All (195)  Notready for audit (1)  Flagged by auditor (0)  Ready for audit (185)  Accepted (0)  Not applicable (9)
¢ Integrations —_—
€3 Organization settings _ )
Evidence Type Owner Auditor Assessment
Employees agree to Access Control Policy Test - <2 Ready for audit [Z Update evidence
Employees agree to Asset Management Policy Test — 3 Ready for audit [Z Update evidence
Employees agree to Business Continuity and Test — 2 Ready for audit [Z Update evidence
Disaster Recovery Plan
Employees agree to Code of Conduct Test - <2 Ready for audit [Z Update evidence
Employees agree to Cryptography Policy Test — < Ready for audit [Z Update evidence
Employees agree to Data Management Policy Test = 2 Ready for audit [Z Update evidence
bl Employees agree to Human Resource Securit
m“pmy 9 y Test — < Ready for audit [Z Update evidence
|Vanta @ Auditor view
v X
® This is a read-only view of your evidence. Ready [Z Update evidence
I W Evidence Evidence to make updates? Go back to your Vanta app.
Controls
Framework Employees agree to Access Control Policy
Audit progress Description
O Risk . Verifies that all relevant personnel have agreed to the {policy-access-control-policy-
bsi}.
= Vendor ® Not ready for audit: 1 ® Flagged by auditor: 0 ® Read
Auditor 2 Ready for audit
O Assets assessment i4
a T Type Test
202 ype v
& Personnel Category Policies
¥ . All (195)  Not ready for audit (1)  Flagged by auditor (0)  Ready for audit (185) ~ Owner
¢ Integrations —_—
€3 Organization settings i ; A Details  Related controls  Audit activity = Comments
vidence ype wner —
Empl to A Control Poli Test Last refreshed 40 minutes ago 2 Refresh View history ¥ Export data
mployees agree to Access Control Policy es =
Employees agree to Asset Management Policy Test = Test result
Employees agree to Business Continuity and
f Test —
Disaster Recovery Plan
Employees agree to Code of Conduct Test 2 No failing or disabled entities for this test
Employees agree to Cryptography Policy Test =
Employees agree to Data Management Policy Test =
€l i
Employees agree to Human Resource Security
I o P 1 TeSt .


Risk management settings

screenKeywords:
Vanta p Risk management Risk register More v Create snapshot
Review all of the risks that have been identified for your business. For each risk, review and describe the
ASSESSMENT risk treatment plan.
Finish Starter Guide Register (0)
— Library
12/20 tasks completed
Action tracker Getting started with your risk management View guided tours X
0 out of 5 completed

Q Go to... #+K Settings P
OVERVIEW ~
Home Inherent risk Residual risk
Tests

5 5
COMPLIANCE ~
Frameworks Low Low

- ®0 - ®0
Controls § §

£ Med £ Med
Policies - ©0 - ©0
Documents High High

1 20 1 =0
TRUST ~ 1 Likelihood 5 1 Likelihood 5
Trust Report
Questionnaires @
RISK ~ Q Owner v Categories v CIA Categories v Source v m
Risk management
Access You don't have any risks

Start with the Identify Risk section above.
Vendors
Vulnerabilities
®

ORGANIZATION ~
|vanta <« Risk management  Risk management settings
Update settings related to risk management and the risk register.
ASSESSMENT
Finish Starter Guide Register (0)
_—— Library _
12/20 tasks completed Riskregister o ] [ «
Action tracker Advanced Risk Customization
Q Go to... RB+K Settings ' il o' : Add-on which greatly extends the customizability of
h :: Vanta's Risk Management solution. Empowers customers
OVERVIEW RS L R to describe, assess, treat, and visualize risk on their own
YGE T o - terms by customizing their risk scoring dimensions,
- score groups, risk register, and more.
Tests P P -
mEEEE — Schedule a call

COMPLIANCE ~ -}
Frameworks
Controls .

Custom categories Add
Policies
Documents You don't have any custom categories yet.
TRUST ~
Trust Report Custom attributes Add
Questionnaires @

You don't have any custom attributes yet.
RISK ¥
Risk management
Access Likelihood scoring scale Edit
Vendors
Vulnerabilities SCORE LABEL DESCRIPTION
®

ORCANIZATION NG A threat event is so unlikely that it can be assumed that
i its occurrence may not be experienced. A threat source is
|Vanta < Risk management
Likelihood scoring scale Edit
ASSESSMENT
Finish Starter Guide Register (0)
SCORE LABEL DESCRIPTION
— Library
12/20 tasks completed
Action tracker A threat event is so unlikely that it can be assumed that
its occurrence may not be experienced. A threat source is
Q Go to... 8+K Settings 1 Very unlikely not motivated or has no capability, or controls are in
place to prevent or significantly impede the vulnerability
from being exploited.
OVERVIEW ~
Home A threat event is unlikely, but there is a slight possibility
that its occurrence may be experienced. A threat source
Tests 2 Unlikely lacks sufficient motivation or capability, or controls are in
place to prevent or impede the vulnerability from being
exploited.
COMPLIANCE ~
Erameworks A threat event is likely, and it can be assumed that its
occurrence may be experienced. A threat source is
oS 3 Somewhat likely motivated or poses the capability, but controls are in
place that may significantly reduce or impede the
Policies successful exploitation of the vulnerability.
Documents A threat event is likely, and it can be assumed that its
occurrence will be experienced. A threat source is highly
TUED < 4 Likely motivated or poses sufficient capability and resources,
but some controls are in place that may reduce or impede
the successful exploitation of the vulnerability.
Trust Report
Questionnaires @ A threat event is highly likely, and it can be assumed that
its occurrence will be experienced. A threat source is
. highly motivated or poses sufficient capability or
RISK ~ 5 Very likely resources, but no controls are in place or controls that
are in place are ineffective and do not prevent or impede
Risk management the successful exploitation of the vulnerability.
Vendors
i Edit
Vulnerabilities Impact scoring scale
®
DROAN A SCORE LABEL DESCRIPTION
|B S perrormea at a reaucea capacity; minor damage; minor
financial loss; or range of effects is significant to some
Vanta Risk management cyber resources and some critical resources.
<
ASSESSMENT A threat event could be expected to have a severe or
catastrophic adverse effect, meaning: severe degradation
Finish Starter Guide Register (0) 4 High impact or loss of mission capability and one or more primary
functions cannot be performed; major damage; major
— Library financial loss; or range of effects is extensive to most
12/20 tasks completed cyber resources and most critical resources.
Action tracker
. A threat event could be expected to have multiple severe
Scoies e Settings or catastrophic adverse effects on organizational
5 Very high impact operations, assets, individuals, or other organizations.
OVERVIEW ~ Range of effects is sweeping, involving almost all cyber
resources.
Home
Tests
Score groups Edit
COMPLIANCE ~
Frameworks
RANGE GROUP DESCRIPTION
Controls
Policies A threat event could be expected to have a limited
m Low adverse effect on organizational operations, mission
Documents capabilities, assets, individuals, customers, or other
organizations.
TRUST ~
A threat event could be expected to have a serious
Trust Report - Med adverse effect on organizational operations, mission
capabilities, assets, individuals, customers, or other
Questionnaires @ organizations.
RISK ¥ A threat event could be expected to have a severe
m High adverse effect on organizational operations, mission
Risk management 9 capabilities, assets, individuals, customers, or other
organizations.
Vendors
Vulnerabilities
ORGANIZATION ~


Glossary

pagePatterns: Misc Misc

pageType: Marketing Marketing Marketing

screenKeywords:
|vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
N SOC 2 1SO 27001
SOC 2 is the most sought after security framework ISO 27001 is considered the international gold
e ———— for scaling SaaS companies. Keep up-to-date with the standard for information security management. Want
B latest SOC 2 terms. to learn more? Get familiar with ISO 27001 terms.
ogs
Events SOC 2 Type | report ISO 27001
Glossary
Guides and reports SOC 2 compliance Information Security Management System (ISMS)
SOC Trust Services Criteria ISO 27001 Risk Assessment
Follow us SOC reports ISMS Governing Body
@ 0 o SOC 2 Type Il report ISO 27001 security standard
Learn more > Learn more >
HIPAA compliance keeps companies that access, PCI DSS applies to businesses that accept, process,
process, or store protected health information in store, transmit, or impact the security of cardholder
check. Find out commonly used HIPAA terminology. data. Keep updated on PCI DSS terms.
HIPAA Payment Card Industry Data Security Standard (PCI @
DSS)
|vanta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
Your security and
compliance glossar
All the terms you need to know when you’re trying to get
compliance audit ready, fast.
N SOC 2 1SO 27001
SOC 2 is the most sought after security framework ISO 27001 is considered the international gold
e ———— for scaling SaaS companies. Keep up-to-date with the standard for information security management. Want
5 latest SOC 2 terms. to learn more? Get familiar with ISO 27001 terms.
ogs
Events SOC 2 Type | report ISO 27001
Glossary
Guides and reports SOC 2 compliance Information Security Management System (ISMS)
SOC Trust Services Criteria ISO 27001 Risk Assessment @
EAlIlAW 110


Editing company information

screenKeywords:
Company information X
Provide an overview that includes basic company information, a mission statement,
how your organization values security and any other business details relevant to your
company. Include the company email where you'd like to receive responses. Learn
more &
Mobbin
Company Description 0/3000
This field supports markdown
Contact email

security@yourcompany.com
Privacy policy

Add link to privacy policy

Cancel
|Mobbin 7

This is a summary that details company information and how your company views security. Edit the report to add your company mission,

values, and security procedures.

¥ Contact: sample@company.com
Compliance 7 Monitoring o

Add standards Infrastructure security Organizational security

Documents Edit ~ Add v

D Add Document

Download Product security Internal security procedures ®
|Company information X
Provide an overview that includes basic company information, a mission statement,
how your organization values security and any other business details relevant to your
company. Include the company email where you'd like to receive responses. Learn
more &
Mobbin
Company Description 0/3000
This field supports markdown
Contact email

security@mobbin.com
Privacy policy

https://mobbin.com/privacy

Cancel
|n Privacy Policy
Mobbin 2
This is a summary that details company information and how your company views security. Edit the report to add your company mission,
values, and security procedures.
¥ Contact: security@mobbin.com
Compliance 7 Monitoring o
Add standards 2 Infrastructure security & Organizational security
Documents Edit  Add v
D Add Document
Download ol Product @ Internal security procedures ©


Showing tasks

screenElements:
Drawer
Top Navigation Bar
Logo
Icon
Side Navigation
Progress Indicator

screenKeywords:
Vanta ® ® @& (N
< Lk e Home ® Hide tasks
I @ Home .
o Compliance progress Last updated 6 minutes ago
Y= Tests Open Tasks X
[ Reports
SOC 2 > Priority v
Compliance o
99 /° © Items overdue
@ Trust Center D
O Risk 103 controls complete 104 total 1 document >
& Vendor
: 3 4 tests >
= Assets Monitoring
22 Personnel L.
= Policies > L Tests > * Items due soon
O Integrations
v < Needs attention ® Needs attention ® 1 document >
. ] . ]
2 tests >
15 OK 15 total 141 OK 148 total
1 vulnerability finding N
need remediations
© Vendors > [0 Documents >
Needs attention ® Needs attention ®
"> ————————————
46 OK [ © You do not have permission to perform that action. 39 total
€|
|Vanta ® ® @& (N
<Ll s Home @ View tasks
I @ Home .
Compliance progress Last updated less than a minute ago
Y= Tests
[ Reports SOC 2 >
i )
Compliance 99/0
@ Trust Center D
103 controls complete 104 total
[J Risk P
& Vendor
= Assets Monitoring
22 Personnel .
= Policies > L Tests >
¥ Integrations Needs attention ® Needs attention ®
. D
15 OK 15 total 141 OK 148 total
© Vendors > [0 Documents >
Needs attention ® Needs attention ®
. D
46 OK 46 total 37 OK 39 total
€|


Switching to Move focus

screenElements:
Animation & Video
Full-Screen Overlay

screenElements:
Animation & Video
Full-Screen Overlay
Animation & Video

screenKeywords:
9:41 all T -
FIND YOUR FLOW WITH NO DISTRACTIONS
RISE FOCUS = W96
SLEEP i (0AV/=
o
)8 >
L——————————— 3
|9:41 all © @l
[ [[[]]]
(34
'& sl
\ % a o
& :
\ ‘
,\\’
Voy {
|
|r‘\I - l
i
[CENRUST SPEEDRUNSTHLS
@ MOVE


Drafting a policy

actions:
Adding & Creating
Selecting & Choosing

screenPatterns:
Add & Create
Select

screenElements: Combobox Tile Select

screenPatterns:
Add & Create
Select
Add & Create

pageType: Application Application Application Application Application Application Application Application Application

screenKeywords:
X Code of Conduct SOC 2 More v
English
Not started m
+ Add another language
v Details
Description Notes
Develops and maintains a standard of conduct that is acceptable to the company and its
employees, customers, and vendors.
Time sensitivity & recurrence
2 Renew annually
v Related frameworks and controls
FRAMEWORK SECTION CODE CONTROL OWNER
SOC 2 CC11 Code of Conduct acknowledged by contractors Unassigned
SOC 2 CC11-CC15 Code of Conduct acknowledged by employees and enforced Unassigned
SOC 2 CC22-CC51-CC5.2-CC5K.3 Security policies established and reviewed Unassigned
®
|X Code of Conduct SOC 2 More v
Start a new version
v
2 Use the policy editor
Start with a template
& Upload a file from computer
Supported formats: .pdf .docx
~ Syncafile
~ Supported apps: Confluence, Google Drive, Sharepoint
What language(s) does this policy support? @
English
Cestina ’
Cymraeg
Dansk
Deutsch
{
Espafiol
Suomi
vownioad language: eEnglisn v
Google Doc [ Microsoft Word (.docx) ¥
®
|X Code of Conduct SOC 2 More v
Start a new version
v
2 Use the policy editor
Start with a template
& Upload a file from computer
Supported formats: .pdf .docx
~ Syncafile
~ Supported apps: Confluence, Google Drive, Sharepoint
What language(s) does this policy support? @
English
@O Use an editable template
If you don't already have a policy, download one of our compliance-ready editable templates.
Download language: English v
Google Doc [ Microsoft Word (.docx) ¥
®
|X Code of Conduct SOC 2 More v
Start a new version
v
2 Use the policy editor
Start with a template
& Upload a file from computer
Supported formats: .pdf .docx
~ Syncafile
~ Supported apps: Confluence, Google Drive, Sharepoint
What language(s) does this policy support? @
English
Deutsch
v English
Espafiol
@ Use an editable tem
Francais . .
If you don't already hav load one of our compliance-ready editable templates.
Download language: English v
Google Doc [ Microsoft Word (.docx) ¥
®
|X Code of Conduct SOC 2 More v
Start a new version
Use the policy editor
a2 policy
& Upload a file from computer
~ Syncafile
=4
What language(s) does this policy support? @
English
@O Use an editable template
If you don't already have a policy, download one of our compliance-ready editable templates.
Download language: English v
Google Doc [ Microsoft Word (.docx) *
®
|Vanta < Starter Guide
Finish Starter Guide Welcome to Vanta! Starter Guide Progress
e — Accelerate your account setup and audit prep. Pick up where you left off and check out our in-app help resources if you get
7/20 tasks completed stuck.
O 40f4
key systems connected
Q Go to... #+K
V Intro to Vanta 10of 1 complete v 0of 3

OVERVIEW ~ Learn about your frameworks and how Vanta works to meet your security and starter policies approved

compliance needs. .
Home Auditor selected
Tests
COMPLIANCE ~ = Connect your key systems 4 of 4 complete v
Frameworks Connecting integrations enables Vanta to automate evidence collection and

monitoring for you.
Controls
Policies
Documents ,— Launch policies and procedures 2 of 4 complete A
TE < o A successful audit requires proper documentation, which includes a concise set of

policies.
Trust Report

. . Verify your company name and logo
Questionnaires @
SR o Draft & approve Code of Conduct Policy
Risk management Draft & approve Information Security Policy
Draft & approve Asset Management Policy
Vendors
Vulnerabilities Draft & approve remaining policies
®

ORGANIZATION ~
|X Code of Conduct SOC 2 More v
Draft Submit for approval
Policy editor
English
Not started m
+ Add another language
v Details
Description Notes
Develops and maintains a standard of conduct that is acceptable to the company and its Add additional context about this specific policy.
employees, customers, and vendors.
Time sensitivity & recurrence
2 Renew annually
v Related frameworks and controls
FRAMEWORK SECTION CODE CONTROL OWNER
®
SOC 2 cCc11 Code of Conduct acknowledaged by contractors Unassigned
|X Code of Conduct SOC 2 More v
cC2.2 CC 51 CC5.2 CC5.3
Draft Submit for approval
Policy editor
English
Not started
+ Add another language
v Details
Description Notes
Develops and maintains a standard of conduct that is acceptable to the company and its Add additional context about this specific policy.
employees, customers, and vendors.
Time sensitivity & recurrence
2 Renew annually
v Related frameworks and controls
FRAMEWORK SECTION CODE CONTROL OWNER
®
SOC 2 cCc1a Code of Conduct acknowledaged by contractors Unassianed
|Vanta < Starter Guide
. s o 1 .
Finish Starter Guide Welcome to Vantal Starter Guide Progress
— Accelerate your account setup and audit prep. Pick up where you left off and check out our in-app help resources if you get
6/20 tasks completed stuck.
O 40of 4
key systems connected
Q Go to... #8+K
V Intro to Vanta 10of 1complete v 0of 3

OVERVIEW ~ Learn about your frameworks and how Vanta works to meet your security and starter policies approved

compliance needs. .
Home Auditor selected
Tests
COMPLIANCE ~ = Connect your key systems 4 of 4 complete v
Frameworks Connecting integrations enables Vanta to automate evidence collection and

monitoring for you.
Controls
Policies
Documents ,— Launch policies and procedures 1of 4 complete A
TUED < o A successful audit requires proper documentation, which includes a concise set of

policies.
Trust Report

. . @ Verify your company name and logo
Questionnaires @
e < Draft & approve Code of Conduct Policy Go to policy
Risk management Draft & approve Information Security Policy
Draft & approve Asset Management Policy
Vendors
Vulnerabilities Draft & approve remaining policies
®

ORGANIZATION ~


Document detail

screenElements:
Banner
File Upload

screenKeywords:
Vanta ® ® @& (N
25 LG L3 Documents: All ¥ Export all Add document v
@ Home
earch all documents atus v ubcategory v requency v ramewor v riority v =
CATEGORY Qs halld t Stat Subcategory Freq y F k (1) Priority =
Y= Tests
All Owner v Time Sensitivity v Clear
Reports
W Rep HR
. N IT C] Name Frameworks Category Owner Status Due date
Compliance
Policy Human
Proof of completed access
[FETEELE O A P SoC 2 resources JL © Needs document & Sep2
Engineering review
Account setup
Controls
Risks Human
Policies Cust O Contractor agreement soc 2 resources JL A Needs update @ Oct 8,
ustom
Employees
Documents
4 DEACTIVATED 0O Public change log or release — Engineering e ® ok .
Audits notes Software develop...
All deactivated
@ Trust Center O Customer support site or email — Engineering i © oK B
. alias Software develop...
@ Risk
- Engineerin
& Vendor @) Application status page SOC 2 9 9 JT © OK —
Software develop...
Saplss Publicly available pri Poli
ublicly available privac
O — privacy soc 2 olicy o © oK —
22 Personnel policy Policies
. ) 0O PubI!cIy available terms of — Policy e ® oK .
¢ Integrations service Policies
. . Polic
O Cookie Policy soc 2 licy JT © 0K —
Policies
0O Employee termination security — Policy e ® oK .
policy Policies
. i Engineerin
@) Product documentation site SOC 2 9 9 JT © OK —
€| Software develop...
|Vanta ® ® @& (N
Documents / Proof of completed access review
Proof of completed access
@ Home . ® Needs document @ Pause ® Mark as not relevant More v
review
Y= Tests
[ Reports
Access reviews X
I Compliance
@ High risk systems > e Todo list
Frameworks . °
\ @30 . .
TR Get started with access reviews for free
Controls : ®c o
| o . Save hours every week and eliminate risk from misused
POI ICieS : Access reviews ; R . . N
! ! credentials. Automate manual, time-consuming access review
Documents ! ) f processes with our new Access Reviews solution. '~
Audits Sse . i Schedule a call >
@ Trust Center O Okta @ comnectee . i
i View guided demo
[ Risk . /
R L] 2 ———————
& Vendor
= Assets
22 Personnel
¥ Integrations
No files yet
Drag and drop, or select a file
€l ) Upload @ Add link Import from: X & &
|Vanta ® ® @& (N
Q Help... #+K
@ Home
Y= Tests
[ Reports .
No files yet
I Compliance Drag and drop, or select a file
AT ) Upload @ Add link Import from: X & &
Upload files up to 50 MB of the following types: .docx, .jpg, .pdf, .ai, .png, .webp, .xlsx, .csv, .txt, .zip
Controls
Policies
Documents
Audits
@ Trust Center
[ Risk v Expired (1)
& Vendor
NAME DESCRIPTION TYPE ADDED BY STATUS 1
= Assets
22 Personnel [Compliance] Access control . .
review.pdf (2 Uploaded Jane Smith (You) ® Expired on Sep 2 2024
o/ LR 1-1 of 1 result Show 20 v results per page
v Details
€l Description Notes
|Vanta ® ® @& (N
Subscribers ®
@ Home X
Y= Tests
[ Reports
I Compliance v Related frameworks and controls + Add control
Frameworks
FRAMEWORK SECTION CODE CONTROL OWNER
Controls
Policies SOC 2 CC6.2-CC63-CC6.4 Access reviews conducted Unassigned =®R
Documents
Audits
@ Trust Center Tasks
@ Risk .
GitHub (0)  Notion (0)
& Vendor
- To create and see GitHub issues here, please grant write access
= Assets
22 Personnel Grant write access
¥ Integrations
> Related audits
€l