Trust Center

screenPatterns: Misc Dashboard Charts

screenPatterns:
Misc
Feature Info

screenPatterns:
Timeline & History
Misc
Feature Info
Misc
Dashboard
Charts
Home
Progress
Empty State
Date & Time
Dashboard
Charts

pageType: Application Application Application Application Application Application Application Application Application Application Application

screenKeywords:
Vanta ® ® @& (N
Activity
@ Home Customer activity Al insights
Y= Tests
Q Viewer v Action v Resource v Page v ¥ Export activity =
[ Reports
. " Viewer Action Details Date
Compliance
I © Trust Center Public vvlew Viewed page Overview Sep 2 2024, 1:46 PM
== SG - Singapore
Overview
Public view Viewed page Controls Sep 2 2024, 1:46 PM
Access == SG - Singapore
R Public view Viewed page Overview Sep 2 2024, 1:46 PM
= SG - Singapore
Knowledge base
Public view . .
Activity = SG - Singapore Viewed page Overview Sep 2 2024, 1:45 PM
Settings P
Public view Viewed page Controls Sep 2 2024, 1:45 PM
== SG - Singapore
[ Risk
& Vendor Public v‘|ew Viewed page Overview Sep 2 2024, 1:44 PM
== SG - Singapore
= Assets J
. ane . Viewed page Overview Jul 22 2024, 6:55 PM
22 Personnel jane@mobbin.com
Jane .
o . : . Viewed page Controls Jul 22 2024, 5:34 PM
¢ Integrations jane@mobbin.com
Jane Viewed page Overview Jul 22 2024, 5:31 PM
jane@mobbin.com
Jane . .
) . Viewed page Overview Jul 22 2024, 5:31PM
jane@mobbin.com
€l
Jane LW R R o TP Iesl A AN A AD.97 AMNA
|Vanta ® ® @& (N
Questionnaires
@ Home
Y= Tests
Vanta Policies
@ Reports e Complete security questionnaires in
minutes with Questionnaire Automation
Comp"ance . Code of Conduct 58 Factio, Inc. »
/ Auto-suggest " Leverage existing security policies and previous responses to
I @ Trust Center i Hlighiight fext or type @ question streamline questionnaire automation, improving response time,
Overview | SR ‘ ‘ ‘ efficiency, and answer accuracy. A centralized response storage
i
é location helps teams stay organized and submit answers faster,
Access (] accelerating sales cycles.
° Suggested Answers
h . i
Questionnaires | Inscerdance wi eevan we regutons, s Learn more
i
Knowledge base : 4 Generated by Vanta Al
+
Activity - ¢+'””””””” Schedule a call
Settings
[ Risk
& Vendor
© \/‘
= Assets @ < /
22 Personnel
Accelerate sales cycles and win more deals Save time and increase efficiency
U Integrations
ki < Speed up sales by responding quickly to questionnaires, outcompete the Centralize policies and documents as well as previous questionnaires in your
competition by being the first to respond, and quickly return completed knowledge base to auto-complete spreadsheets. Machine learning improves
answers in their original format suggestions over time.
€|
|Vanta ® ® @& (N
<Ll s Home @ View tasks
I @ Home .
Compliance progress Last updated less than a minute ago
Y= Tests
[ Reports SOC 2 >
i o
Y] Compliance 99 /0
@ Trust Center ]
. 103 controls complete 104 total
Overview
Access
Questionnaires MOnitOl‘ing
Knowledge base
= Policies > L Tests >
Activity
. Needs attention ® Needs attention ®
Settings 0 7
[0 Risk
.________________________________________________________________________J .
S Vendor 15 OK 15 total 141 0K 148 total
= Assets
22 Personnel
© Vendors > [0 Documents >
¥ Integrations
Needs attention ® Needs attention ®
.________________________________________________________________________J . ]
46 OK 46 total 370K 39 total
€l
|Vanta ® ® @& (N
Require non-disclosure agreement (NDA) + Download signature history
@ Home Require users to agree to your NDA the first time they access your Trust Center.
Y= Tests
[ Reports
Enable watermark
Compliance A watermark will be added to all unencrypted PDFs that are in private Trust Centers, or require an access request in a public Trust Center
I © Trust Center
Overview
I Enable Al chatbot Beta [ @)
Enable Vanta Al to automatically summarize information for buyers
Questionnaires
Knowledge base
Visibility
vty Internal use only v
Settings
@ Risk
& Vendor Access request notifications @ Customize notifications in Vanta settings
= Assets
22 Personnel
Download PDF ¥ Download PDF
v Integrations Download your Trust Center
Subscribers
€l Once verified, subscribers will receive update emails when the update is marked to notify.
|Vanta ® ® @& (N
Overview https://trust.mobbin.com ® @ View
@ Home
Y= Tests ® 1pending access request View access requests
[ Reports
A Date range Last 30 days v
Compliance
I © Trust Center
. Total visits
verview
2 +33%
Access
Last 30 days
Questionnaires
2
Knowledge base
Activity 1.5
Settings
, 1
@ Risk
& Vendor
0.5
= Assets
22 Personnel 0
Aug 11 Aug 13 Aug 15 Aug 17 Aug 19 Aug 21 Aug 23 Aug 25 Aug 27 Aug 29 Aug 31 Sep 2 Sep 4 Sep 6 Sep 8 Sep 10
¥ Integrations
Individual page views Resource activity
6 +40% 0
€| Last 30 days Last 30 days
|Vanta ® ® @& (N
<Ll s Home @ View tasks
I @ Home .
Compliance progress Last updated less than a minute ago
Y= Tests
[ Reports SOC 2 >
i )
Compliance 99/0
@ Trust Center D
103 controls complete 104 total
[J Risk P
& Vendor
= Assets Monitoring
22 Personnel .
= Policies > L Tests >
¥ Integrations Needs attention ® Needs attention ®
. D
15 OK 15 total 141 OK 148 total
© Vendors > [0 Documents >
Needs attention ® Needs attention ®
. D
46 OK 46 total 37 OK 39 total
€|
|Vanta ® ® @& (N
Settings
@ Home
= Tests Configure access
[ Reports
Enable public access
Compliance
I © Trust Center
Overview Set document access expiration
Configure a default expiration date for new viewers. Existing viewers will not be affected. You can edit v
RS access expiration for individual viewers from the Trust Center home.
Questionnaires Default PDF download options
Vanta lets you control whether or not PDFs are downloadable. Existing resources will not be affected. v
Knowledge base You can edit the PDF download option for documents from the Knowledge Base.
Activity
Settings
) Use a custom domain
@ Risk
Create a custom domain for your Trust Center.
& Vendor
= Assets .
Domain name
202 Personnel trust.mobbin.com ® Active
Favicon ©®
U Integrations
ki < n Select a file Browse
Upload a PNG or ICO file.
«l Require non-disclosure agreement (NDA) + Download signature history
|Vanta ® ® @& (N
Q Help... #$+K
’ Knowledge base
@ Home
Y= Tests @
[ Reports
Add resources
Compliance Oops, nothing is in your knowledge base! Ask your admin to add security
documentation, policies, and white papers to start building your library of
I © Trust Center P pap 9y 4
answers.
Overview With high quality resources, Vanta will help you complete faster and more
accurately. Learn more (2

Access

Questionnaires

Knowledge base

Activity

Settings
@ Risk
& Vendor
= Assets
22 Personnel
¥ Integrations

€l
|Vanta ® ® @& (N
Access ® Request history
@ Home Viewers granted access  Access requests ®
Y= Tests
Q Access v e
[ Reports
o . Viewer Last opened Views Sent Access expiration
Compliance
I © Trust Center Alex Smith (You) Jul 22 2024, 5:31 PM 4 Jun 21, 2024 4 Aug 31, 2024
Overview
Samlee May 13 2024, 10:54 AM 1 May 13, 2024 £ No expiration
Access @mobbin.com
Questionnaires
1to 2 of 2 results Show per page 10 v
Knowledge base
Activity
Settings
[ Risk
& Vendor
= Assets
202 Personnel
U Integrations
€|
|Vanta ® ® @& (N
Q Help... #¥+K
Individual page views Resource activity
@ Home
6 +40% o
= Tests Last 30 days Last 30 days
[ Reports
Compliance
33%
I © Trust Center J
Overview -
PTE No resource activities yet
A summary of resource views and downloads will be shown
Questionnaires . here.
Views 67%
Knowledge base @ Overview 4
~——
Activity
Settings @ Overview
@ Risk
& Vendor Controls
= Assets
22 Personnel Total controls = ® 99% of controls shown in Trust Center >
¥ Integrations 79 Of 80
Controls shown in Trust Center ®
D
€|
|Vanta ® ® @& (N
Q Help... #¥+K
Individual page views Resource activity
@ Home
6 +40% (0]
= Tests Last 30 days Last 30 days
[ Reports
Compliance >
33%
I © Trust Center v J
Overview -
PTE No resource activities yet
A summary of resource views and downloads will be shown
Questionnaires here.
67%
Knowledge base
Activity
Settings @ Overview @ Controls
@ Risk >
& Vendor Controls
= Assets >
22 Personnel > Total controls =~ ©® 99% of controls shown in Trust Center >
¥ Integrations 79 Of 80
Controls shown in Trust Center ®
D
€|


Controls

appName: Vanta

appCategory: Business

appTagline: Automate compliance, manage risk, and prove trust

companyHqRegion: US & Canada

companyStage: Growth Stage

platform: web

pageType: Application

screenElements: Accordion Badge

pageType: Application Application Application

screenKeywords:
TRUST REPORT / CONTROLS
Vanta < . _
Controls (5 ] View controls not in report
Finish Starter Guide
— Q
13/20 tasks completed
Infrastructure security
< Bl S - . S Infrastructure security
Organizational security
OVERVIEW ~ Product security
, v Service infrastructure maintained @ Not shown in report
Home Internal security procedures
TESE Data and privacy Records of security issues being tracked [x]
COMPLIANCE ~
Vulnerability scan [x]
Frameworks
Sample of remediated vulnerabilities
Controls p a
Policies : :
> Production data backups conducted ® Not shown in report
Documents
> Database replication utilized ® Not shown in report
TRUST ~
Trust Report > Access revoked upon termination ® Not shown in report
Questionnaires @
> Encryption key access restricted ® Not shown in report
RISK ~
Risk management > Production data segmented ® Not shown in report
> Access control procedures established ® Not shown in report
Vendors
Vulnerabilities P .
> Network segmentation implemented ® Not shown in report
®
ORGANIZATION ~
> Firewall access restricted ® Not shown in report
|o J tVU% sincelast week o ) HTU/% SINce last Week S— W tV7 since fast week
Tests
COMPLIANCE ~
Frameworks
Controls 26% of controls shown in report
Controls
Policies
Documents v Total controls >
TRUST - 17 of 66
Trust Report Controls shown in report @
Questionnaires @ . ]
RISK ¥
Risk management . . . . .
& 2 Infrastructure security > il Organizational security > # Product security >
Access
Vendors 11 Of 19 4 Of 9 2 Of 5
. Controls shown in report @ Controls shown in report @ Controls shown in report @
Vulnerabilities
O O G
ORGANIZATION ~
People
Computers @ Internal security procedures > [a Data and privacy >
Inventory
0 of 24 Oof 9
i Controls shown in report @ Controls shown in report @

Integrations

Settings

Product updates

Mobbin

View-only Admin

®
|TRUST REPORT / CONTROLS
Vanta <« . _
Controls (5 ] View controls not in report
Finish Starter Guide
— Q
13/20 tasks completed
Infrastructure security
< Bl S - . S Infrastructure security
Organizational security
OVERVIEW ~ Product security
, > Service infrastructure maintained @ Not shown in report
Home Internal security procedures
Tests Data and privac .
P y > Production data backups conducted ® Not shown in report
COMPLIANCE ~
> Database replication utilized ® Not shown in report
Frameworks
Controls . . .
o > Access revoked upon termination ® Not shown in report
Policies
Documents > Encryption key access restricted ® Not shown in report
TRUST ~ > Production data segmented ® Not shown in report
Trust Report
Questionnaires @ > Access control procedures established ® Not shown in report
RISK ¥ > Network segmentation implemented ® Not shown in report
Risk management
> Firewall access restricted ® Not shown in report
Vendors . . .
> Intrusion detection system utilized o
Vulnerabilities
> Remote access MFA enforced ®
ORGANIZATION ~


Starter guide

screenPatterns:
Guided Tour & Tutorial
Progress

screenKeywords:
Vanta < ... Scope resources 3 of 3 complete v
=
Review your employee list, devices, and cloud resources to ensure the right things are
in scope for your compliance program.
Finish Starter Guide
10/20 tasks completed
hi Prepare evidence 0 of 2 complete A
Q Go to... #+K . . . .
Collecting evidence like tests and uploaded documents helps you stay organized
through your compliance journey.
OVERVIEW ~
e Intro: Evidence in Vanta
Tests Explore tests in Vanta
COMPLIANCE ~ .
Assign a test owner
Frameworks
Controls
Policies A 0of 3 | A
@ Set up risk management program of 3 complete
Documents I . . )
Identify risk scenarios that are important for your company to track, and define a
treatment plan in Vanta.
TRUST ~
Trust Report Intro: Managing risk
Lol e @ Add a risk scenario
RISK ¥ .
Score a scenario, and add a treatment plan
Risk management
Approve scenario
PP
Vendors
Vulnerabilities
®
ORGANIZATION ~
|Vanta < Starter Guide
Finish Starter Guide Welcome to Vanta! Starter Guide Progress
e — Accelerate your account setup and audit prep. Pick up where you left off and check out our in-app help resources if you get
7/20 tasks completed stuck.
O 40f4
key systems connected
Q Go to... #+K
V Intro to Vanta 10of 1 complete v 0of 3

OVERVIEW ~ Learn about your frameworks and how Vanta works to meet your security and starter policies approved

compliance needs. .
Home Auditor selected
Tests
COMPLIANCE ~ = Connect your key systems 4 of 4 complete v
Frameworks Connecting integrations enables Vanta to automate evidence collection and

monitoring for you.
Controls
Policies
Documents ,— Launch policies and procedures 2 of 4 complete A
TE < o A successful audit requires proper documentation, which includes a concise set of

policies.
Trust Report

. . Verify your company name and logo
Questionnaires @
SR o Draft & approve Code of Conduct Policy
Risk management Draft & approve Information Security Policy
Draft & approve Asset Management Policy
Vendors
Vulnerabilities Draft & approve remaining policies
®

ORGANIZATION ~
|. s o 1 .
Finish Starter Guide Welcome to Vanta! Starter Guide Progress
E— Accelerate your account setup and audit prep. Pick up where you left off and check out our in-app help resources if you get
0/20 tasks completed stuck.

Oof4
key systems connected
Q Go to... #8+K
\V} Intro to Vanta 0 of Tcomplete A 0of 3
OVERVIEW ~ Learn about your frameworks and how Vanta works to meet your security and starter policies approved
compliance needs. .

Home Auditor selected

Tests How Vanta works

COMPLIANCE ~ Framework progress

Frameworks

Intro to SOC 2

Controls

Policies Invite collaborators

Documents

TRUST ~

.. Connect your key systems 0 of 4 complete A
Trust Report v
Connecting integrations enables Vanta to automate evidence collection and

Questionnaires @ monitoring for you.

RISK ¥ Connect identity provider

Risk management

Connect cloud provider
Vendors Connect version control system
Vulnerabilities Connect HR system
®
ORGANIZATION ~


Setting a timer

appName: (Not Boring) Vibes

appCategory: Health & Fitness

appTagline: Music to focus, sleep, & relax

companyStage: Bootstrapped & Indie

platform: ios

hotspotType: Tap

hotspotType: Scroll Vertically

screenElements: Illustration Button Icon

screenElements:
Bottom Sheet
Animation & Video
Full-Screen Overlay
Floating Action Button
Progress Indicator
Illustration
Button
Icon

screenPatterns:
Reminder
Home
Timer & Clock

screenKeywords:
SET A TIMER
VIBES STOP PLAYING WHEN THE TIMER ENDS
IMIN
7\
( SET TIMER u
\'*4A_7 . ,,A;‘/!’;‘
. J]
|SET A TIMER
VIBES STOP PLAYING WHEN THE TIMER ENDS
I u“s"uLLg
a MIN
10 MIN
. ]
|. 4
\ = o
|9:41 il T .
00
@ G9:14
(. .
<
|000000
@ 9955
4
'
@ .
' )
. @
|9:41 all T =
FIND YOUR FLOW WITH NO DISTRACTIONS
R = FOCUS RELAX
SLEEP 04/
°
)8 »


Adding a custom category

pageType: Application Application Application Application

screenKeywords:
Add category X
+ Data breach
Cancel
|vanta <« Risk management Risk management settings
Update settings related to risk management and the risk register.
ASSESSMENT
Finish Starter Guide Register (0)
_—— Library _
12/20 tasks completed Riskregister o ] [ «
Action tracker Advanced Risk Customization
Q Go to... HB+K Settings ' .::. o' : Add-on which greatly extends the customizability of
h :: Vanta's Risk Management solution. Empowers customers
OVERVIEW IR L R to describe, assess, treat, and visualize risk on their own
Ve T o - terms by customizing their risk scoring dimensions,
- score groups, risk register, and more.
Tests p—— e -
g - == Schedule a call

COMPLIANCE ~ -}
Frameworks
Controls .

Custom categories Add
Policies
Documents Data breach 7 o
TRUST ~
Trust Report Custom attributes Add
Questionnaires @

You don't have any custom attributes yet.
RISK ¥
Risk management
Access Likelihood scoring scale Edit
Vendors
Vulnerabilities SCORE LABEL DESCRIPTION
®

ORCANIZATION NG A threat event is so unlikely that it can be assumed that
i its occurrence may not be experienced. A threat source is
|vanta <« Risk management  Risk management settings
Update settings related to risk management and the risk register.
ASSESSMENT
Finish Starter Guide Register (0)
_—— Library _
12/20 tasks completed Riskregister o ] [ «
Action tracker Advanced Risk Customization
Q Go to... RB+K Settings ' il o' : Add-on which greatly extends the customizability of
h :: Vanta's Risk Management solution. Empowers customers
OVERVIEW RS L R to describe, assess, treat, and visualize risk on their own
YGE T o - terms by customizing their risk scoring dimensions,
- score groups, risk register, and more.
Tests P P -
mEEEE — Schedule a call

COMPLIANCE ~ -}
Frameworks
Controls .

Custom categories Add
Policies
Documents You don't have any custom categories yet.
TRUST ~
Trust Report Custom attributes Add
Questionnaires @

You don't have any custom attributes yet.
RISK ¥
Risk management
Access Likelihood scoring scale Edit
Vendors
Vulnerabilities SCORE LABEL DESCRIPTION
®

ORCANIZATION NG A threat event is so unlikely that it can be assumed that
i its occurrence may not be experienced. A threat source is
|Add category X
+
Cancel


Searching integrations (marketing)

pageType: Marketing

screenElements: Badge Avatar

screenElements:
Search Bar
Badge
Avatar

pageType: Marketing Marketing

screenKeywords:
vanta Product v Solutions v Customers  Plans  Resources v Company v Login
aha Q
Collections Aha! Ahal
New Task management
Coming Soon Explore -
Built by Partner
Built by Vanta
1
Categories
All
Background checkers
CRM platforms
Cloud providers
Communication platforms
Data warehouse providers
Datastore providers
Document management
Endpoint security @
HRIS
|vanta Product v  Solutions v  Customers Plans Resources v  Company v Login
Find an app Q
Collections 1 3\ 13 Security oa Password ‘ 360Learning
New \ Vulnerability scanners Other Security training
Coming Soon Explore > Explore > Explore >
Built by Partner
Built by Vanta
ame 4me 8x8 8x8 m ADP Workiorce
X ~ Now
Categories Other Other R
All Explore = Explore = Explore =
Background checkers
CRM platforms
aws AwS o AWS = AWS GovCloud

Cloud providers N CodeCommit WS GovCloud (US)
Communication platforms Cloudproviders e — Cloud providers
Data warehouse providers Explore > Explore > Explore -
Datastore providers
Document management

AWS GuardDuty [} AWS Inspector s AccessOwl
Endpoint security - @ OWL


Disconnecting an integration

pageType: Application Application Application Application Application Application

screenKeywords:
Tests
Integ rations © Missing an integration? Let us know! (2
COMPLIANCE ~ Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.
Frameworks
Controls
B Connected (4)  Available (258)
Policies —_—
Documents CATEGORIES Q Integration capability v
TRUST ~ Al
- R Background checkers aws . [/
HUESE [FEe > Amazon Web Services Fleet J Jamf Pro
Questionnaires Cloud providers BUILT BY PARTNER
Communication platforms Access Inventory Access Computers Inventory Access Computers Inventory
RISK ~
CRM platforms Vulnerabilities
Risk management .
Datastore providers
Access i f f f P f
Vendors
Document management
Vulnerabilities Endbolnt it
ndpoint security .
JumpCloud i€ Kandiji 6 Kolide
ORGANIZATION ~ HRIS -
BUILT BY PARTNER
People Identity providers Access Computers Groups Computers Inventory Access Computers Inventory
Computers Incident management Inventory
Inventory MDM
Observability View details View details View details
¥ Integrations Other
Settings Security trainings
Product updates Task management G Google Workspace ﬂ Office 365 okta Okta
Mobbin Version control systems
Admin Access Groups People Access Groups People Access Groups People
Vulnerability scanners ®
|Disconnect Vercel X

Vanta will stop monitoring Vercel and delete all associated Vercel data. Existing Vanta

users will not be deleted. This action is not reversible.

If you want to update your credential without deleting data, use the Edit button instead.
Cancel
|Vanta < Integ rations © Missing an integration? Let us know! (2
Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.
Finish Starter Guide
15/20 tasks completed Connected (7)  Available (255)
Q Goto s2+K CATEGORIES Q vercel Integration capability v Clear
All
OVERVIEW ~
Other
o Vercel
Tests COLLECTIONS
Access Missing an integration?
Built by Vanta
COMPLIANCE ~ Request an integration
Frameworks
Comimals View details Manage
Policies
Documents
TRUST ~
Trust Report
Questionnaires
RISK ~
Risk management
Vendors
Vulnerabilities
ORGANIZATION ~
|@ Refresh the page to get the latest version of Vanta! Reload
&Vanta
@ Refresh the page to get the latest version of Vanta! Reload
WE].C 0 me b a @ Refresh the page to get the latest version of Vanta! | Reload
@ Refresh the page to get the latest version of Vanta! Reload
Sign into Vanta
@ Refresh the page to get the latest version of Vanta! Reload ‘
G Continue with Google
@ Refresh the page to get the latest version of Vanta! Reload
o
B Continue with Microsoft
@ Refresh the page to get the latest version of Vanta! Reload
(o] Continue with Okta
@ Refresh the page to get the latest version of Vanta! Reload
(1] Continue with OneLogin \
@ Refresh the page to get the latest version of Vanta! Reload
Enter your email address
@ Refresh the page to get the latest version of Vanta! Reload
@ Refresh the page to get the latest version of Vanta! Reload g/ L.
Don't have an account? @ Refresh the page to get the latest version of Vanta! Reload /
@ Refresh the page to get the latest version of Vanta! Reload @ Support
‘ 7N\
I \onT7)
|Connected Vercel API tokens X
API TOKEN
Vanta
|Vanta < Integratlons e Missing an integration? Let us know! (3
Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.
Finish Starter Guide
15/20 tasks completed Connected (7)  Available (255)
Q Goto $+K CATEGORIES Q vercel Integration capability v Clear
All
OVERVIEW ~
Other
Home Vercel
Tests COLLECTIONS
Access Missing an integration?
Built by Vanta
COMPLIANCE ~ Request an integration
Frameworks
Controls View details Manage
Policies 2 Edit
Documents I Delete
TRUST ~
Trust Report
Questionnaires
RISK ~
Risk management
Vendors
Vulnerabilities
ORGANIZATION ~


Tests

screenElements:
Top Navigation Bar
Logo
Icon
Side Navigation
Progress Indicator

screenPatterns: Home Progress

pageType: Application Application

screenKeywords:
Vanta ® ® @& (N
<Ll s Home @ View tasks
I @ Home .
Compliance progress Last updated less than a minute ago
Y= Tests
[ Reports SOC 2 >
i )
Compliance 99/0
@ Trust Center D
103 controls complete 104 total
[J Risk P
& Vendor
= Assets Monitoring
22 Personnel .
= Policies > L Tests >
¥ Integrations Needs attention ® Needs attention ®
. D
15 OK 15 total 141 OK 148 total
© Vendors > [0 Documents >
Needs attention ® Needs attention ®
. D
46 OK 46 total 37 OK 39 total
€|
|Vanta ® ® @& (N
Tests: All 2 Edit SLAs

@ Home

CATEGORY

I Y= Tests

All 1 .

@ Reports OK 0 Needs attention 1
P HR 1

T 0% Overdue 0
Compliance

Policy © Due soon 1
@ Trust Center

Engineering 00K 1total © Needs remediation (no SLA assigned) 0
[0 Risk

Risks
& Vendor

Custom
= Assets Q Framework v Control v Integration v Owner v Type (1) v Status (1) v =
22 Personnel DEACTIVATED Rollout v Clear

All deactivated
U Integrations @) Name Category Owner Type Status 1 Dued

O Contractor agreement Human JL Document © Due soon 5 O
resources
1to 1 of 1results Show per page 20 v
€|


Completing a guided tour

actions:
Starting & Completing
Browsing Tutorial

pageType: Application Application Application Application Application

screenKeywords:
Vanta p Risk management Risk register More v Create snapshot
Review all of the risks that have been identified for your business. For each risk, review and describe the
ASSESSMENT risk treatment plan.
Finish Starter Guide Register (0)
— Library
12/20 tasks completed
Action tracker Getting started with your risk management View guided tours X
0 out of 5 completed

Q Go to... #+K Settings P
OVERVIEW ~
Home Inherent risk Residual risk
Tests

5 5
COMPLIANCE ~
Frameworks Low Low

- ®0 - ®0
Controls § §

£ Med £ Med
Policies - ©0 - ©0
Documents High High

1 20 1 =0
TRUST ~ 1 Likelihood 5 1 Likelihood 5
Trust Report
Questionnaires @
RISK ~ Q Owner v Categories v CIA Categories v Source v m
Risk management
Access You don't have any risks

Start with the Identify Risk section above.
Vendors
Vulnerabilities
®

ORGANIZATION ~
|Vanta p Risk management Risk register X
Review all of the risks that have been identified for your business. For GUIdEd tours
ASSESSMENT .
risk treatment plan. Getting started with your risk assessment
Finish Starter Guide Register (0)
— Library
12/20 tasks completed 0 of 5 completed
Action tracker Getting started with your risk management
0 out of 5 completed
Q Go to... #+K Settings i
; Add 2 sgenatia O  snow me how
OVERVIEW ~
. Score and add a treatment plan for that scenario

Home Inherent risk
VR Approve it

5
COMPLIANCE ~ .

Repeat for all scenarios ® that apply to you (SOC 2
Frameworks ho(")" requires that you include Fraud risk)
Controls §
. E Med Create a history snapshot ® to track your progress

Policies “0
Documents High

1 ®0
TRUST ~ 1 Likelihood 5
Trust Report
Questionnaires @
R < Q Owner v  Categoriesv  CIACe
Risk management
Access You don't hi

Start with the Identit
Vendors
Vulnerabilities
®

ORGANIZATION ~
|How can | create my own risk scenarios? %
You can keep track of any risk scenarios you
come up with here.

Common ways to identify risks include auditing
your assets, doing a disaster recovery or
security tabletop exercise, etc.

(]
|Home
Tests Risk management Risk register :
Review all of the risks that have been identified for your business. For GUIdEd tours
ASSESSMENT :
COMPLIANCE ~ risk treatment plan. Getting started with your risk assessment
Frameworks B ()
Library
Controls 1 of 5 completed
bolici Action tracker ™ Getting started with your risk management PR
olicies
. 1 out of 5 completed
Settings .
Documents @ Addeseenario® Show me how
[ERUSTRNS . Score and add a treatment plan for w
Trust Report Inherent risk that scenario
Questionnaires
@ 5 Approve it
RISK ¥
: Low . Repeat for all scenarios © that apply to you (SOC 2
R ehedement 5 ®0 requires that you include Fraud risk)
[
Vendors =0 Create a history snapshot @ to track your progress
Vulnerabilities High
1 ®0
1 Likelihood 5
ORGANIZATION ~
People
Computers
Inventory Q Owner v Categories v CIA Ce
A SCENARIO OWNER
Integrations
Settings Company data is breached due to
human error and/or misunderstanding Unassigned
Product updates of company requirements.
Mobbin
View-only Admin @
1-1 of 1 result Show 20 v results per page
|Need inspiration creating your own risk X
scenario?
You can browse through predefined risk
scenarios from Vanta’s risk library.

[ J


Test detail

screenElements:
Editable Text
Breadcrumbs

screenPatterns:
Other Content
Other Content

screenKeywords:
Vanta ® ® @ (N
Help #+K Tests / Contractor agreement
& Contractor agreement ® OK @ Pause @ Mark as not relevant More v
Home
Sensitive ® X v
I Y= Tests
[L) Reports Files (1) Add file v
Compliance loum Uploa...
mjnzgw?9.pdf
@ Trust Center Inzg P
Recurrence start: Oct 9, 2023 « Jane Smith (You)
[@ Risk
& Vendor
= Assets
22 Personnel
U Integrations
v Details
Description Notes
Provide your most recent contractor or consultant agreement which should Add additional context about this specific document
include Security, Confidentiality, and a Breach Notification clauses at a
minimum. If contractor agreements are referenced in other relevant policies or
standardized agreements, include those here instead.
Note: This is only applicable if you have contractors or consultants at your
€l organization.
|Vanta ® ® @& (N
X
@ Home
I Y= Tests

@ Reports v Related frameworks and controls + Add control
Compliance FRAMEWORK SECTION CODE CONTROL OWNER
@ Trust Center

SOC 2 cc1 Code of Conduct acknowledged by contractors Alex Smith xR
@ Risk
& Vendor SOC 2 CC11 Confidentiality Agreement acknowledged by contractors Unassigned =N
= Assets
22 Personnel
. ) Tasks
¢ Integrations

GitHub (0)  Notion (0)

To create and see GitHub issues here, please grant write access
Grant write access
> Related audits
€l
|Vanta ® ® @ (N
X Help.. #+K Tests / Contractor agreement
Contractor —
@ Home ® OK @ Pause @ Mark as not relevant More v
agreement
I Y= Tests
Sensitive ®
[ Reports
Files (1) Add file v
Compliance
@ Trust Center e Uploa...
mjnzgw?9.pdf
[@ Risk
Recurrence start: Oct 9, 2023 « Jane Smith (You)
& Vendor
= Assets
202 Personnel
U Integrations
v Details
Description Notes
Provide your most recent contractor or consultant agreement which should Add additional context about this specific document
include Security, Confidentiality, and a Breach Notification clauses at a
minimum. If contractor agreements are referenced in other relevant policies or
standardized agreements, include those here instead.
€|
Note: This is only applicable if you have contractors or consultants at your
|Vanta ® ® @& (N
Tests: All 2 Edit SLAs

@ Home

CATEGORY

I Y= Tests

All 1 .

@ Reports OK 0 Needs attention 1
P HR 1

T 0% Overdue 0
Compliance

Policy © Due soon 1
@ Trust Center

Engineering 00K 1total © Needs remediation (no SLA assigned) 0
[0 Risk

Risks
& Vendor

Custom
= Assets Q Framework v Control v Integration v Owner v Type (1) v Status (1) v =
22 Personnel DEACTIVATED Rollout v Clear

All deactivated
U Integrations @) Name Category Owner Type Status 1 Dued

O Contractor agreement Human JL Document © Due soon 5 O
resources
1to 1 of 1results Show per page 20 v
€|
|Vanta ® ® @& (N
v Details
@ Home
I ¢= Tests Description Notes
[ Reports Provide your most recent contractor or consultant agreement which should
include Security, Confidentiality, and a Breach Notification clauses at a
) . minimum. If contractor agreements are referenced in other relevant policies or
Compliance standardized agreements, include those here instead.
@ Trust Center Note: This is only applicable if you have contractors or consultants at your
organization.
@ Risk . , ) . -
Guidance: Here's a sample contractor agreement with a confidentiality clause.
= Vendor Google docs template / Docx template
= Assets
= Category
22 Personnel
Employees
¥ Integrations
Time sensitivity & recurrence
© Upload anytime
2 Renew annually  Edit
Owner
Alex Smith Edit
Subscribers ®
X
€|


Documents

screenElements: Table Checkbox Badge

screenPatterns: Select Misc

screenKeywords:
Vanta ® ® @& (N
Q Help... stk Documents: All ¥ Export all Add document v
@ Home
CATEGORY Q Search all documents 1selected Deselect % Alex Smith v =
Y= Tests
All
[@J Reports HR e Name Frameworks Category Owner Status Due date
a ; IT Proof of completed access Human
Compliance : soc 2 resources J © Needs document & Sep 2
. review
Policy Account setup
Frameworks
Engineering Human
Controls O Contractor agreement SOC 2 resources JL A Needs update 0 Oct 8,
Risks Employees
Policies
Custom i i i
0O Public change log or release S0ck Engineering 5 © ok .
Documents notes Software develop...
DEACTIVATED
Audits i i i i
) 0O Cystomer support site or email s002 Engineering e oK -
All deactivated alias Software develop...
@ Trust Center
s Engineering
i Application status page SOC 2 JT OK —
@ Risk D PP pag Software develop... e
S Vi
& Vendor . . . .
O Pull?llcly available privacy S0ck Eol!u_:y 5 ® oK .
i
= Assets policy olicies
22 Personnel 0O Publfcly available terms of S002 Policy e ® oK _
service Policies
U Integrations _ I Polic
N s O Cookie Policy SOC 2 e Y JT © 0K —
olicies
O Employee termination security S0ck P0|I(-:y 5 © oK .
policy Policies
. . Engineerin
(@) Product documentation site SoC 2 9 9 JT Q0K —
Software develop...
€l Human
O Company organization chart SoC 2 resources JL QoK -
|Vanta ® ® @& (N
25 LG L3 Documents: All ¥ Export all Add document v
@ Home
earch all documents atus v ubcategory v requency v ramewor v riority v =
CATEGORY Qs halld t Stat Subcategory Freq y F k (1) Priority =
Y= Tests
All Owner v Time Sensitivity v Clear
Reports
W Rep HR
. N IT C] Name Frameworks Category Owner Status Due date
Compliance
Policy Human
Proof of completed access
[FETEELE O A P SoC 2 resources JL © Needs document & Sep2
Engineering review
Account setup
Controls
Risks Human
Policies Cust O Contractor agreement soc 2 resources JL A Needs update @ Oct 8,
ustom
Employees
Documents
4 DEACTIVATED 0O Public change log or release — Engineering e ® ok .
Audits notes Software develop...
All deactivated
@ Trust Center O Customer support site or email — Engineering i © oK B
. alias Software develop...
@ Risk
- Engineerin
& Vendor @) Application status page SOC 2 9 9 JT © OK —
Software develop...
Saplss Publicly available pri Poli
ublicly available privac
O — privacy soc 2 olicy o © oK —
22 Personnel policy Policies
. ) 0O PubI!cIy available terms of — Policy e ® oK .
¢ Integrations service Policies
. . Polic
O Cookie Policy soc 2 licy JT © 0K —
Policies
0O Employee termination security — Policy e ® oK .
policy Policies
. i Engineerin
@) Product documentation site SOC 2 9 9 JT © OK —
€| Software develop...
|Vanta ® ® @& (N
Q Help... #+K Documents: All ¥ Export all Add document v
@ Home
CATEGORY Q  Search all documents 1selected Deselect £ Alex Smith v =
Y= Tests
[@J Reports HR e Name Frameworks r Status Due date
X Remove assignee
. . IT .
I Compliance :\c:ic;fwof completed access soca Jane Smith © Needs document & Sep 2
Policy
Frameworks John Doe
Engineering
Controls O Contractor agreement soc 2 A Needs update  Oct8,
Risks
Policies
Custom i Admin
0O Public change log or release S0ck " oK o
Documents notes Software develop...
DEACTIVATED
Audits i i i i
) 0O Cystomer support site or email S002 Engineering e oK -
All deactivated alias Software develop...
@ Trust Center
s Engineering
i Application status page SOC 2 JT OK —
@ Risk D PP pag Software develop... e
= Vi
& Vendor . . . .
O Pull?llcly available privacy S0ck Eol!u_:y e oK .
= Assets policy olicies
22 Personnel 0O Publfcly available terms of o9 Policy o © oK o
service Policies
U Integrations B A i
N s O Cookie Policy SOC 2 E:I!::(':: JT © 0K —
Icies
O Employee termination security S0cE Policy 5 © oK o
policy Policies
O Product documentation site socC 2 Engineering JT © 0K —
Software develop...
€l Human
O Company organization chart SoC 2 resources JL © 0K -


Searching integrations

screenKeywords:
Tests
Integ rations © Missing an integration? Let us know! (2
COMPLIANCE ~ Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.
Frameworks
Controls
B Connected (4)  Available (258)
Policies —_—
Documents CATEGORIES Q Integration capability v
TRUST ~ Al
- R Background checkers aws . [/
HUESE [FEe > Amazon Web Services Fleet J Jamf Pro
Questionnaires Cloud providers BUILT BY PARTNER
Communication platforms Access Inventory Access Computers Inventory Access Computers Inventory
RISK ~
CRM platforms Vulnerabilities
Risk management .
Datastore providers
Access i f f f P f
Vendors
Document management
Vulnerabilities Endbolnt it
ndpoint security .
JumpCloud i€ Kandiji 6 Kolide
ORGANIZATION ~ HRIS -
BUILT BY PARTNER
People Identity providers Access Computers Groups Computers Inventory Access Computers Inventory
Computers Incident management Inventory
Inventory MDM
Observability View details View details View details
¥ Integrations Other
Settings Security trainings
Product updates Task management G Google Workspace ﬂ Office 365 okta Okta
Mobbin Version control systems
Admin Access Groups People Access Groups People Access Groups People
Vulnerability scanners ®
|L]
Vanta < Integ rations © Missing an integration? Let us know! (2
Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.
Finish Starter Guide
2/20 tasks completed Connected (0)  Available (260)

CATEGORIES i ili
Q Go to... 38+K Q. google Integration capability v Clear

All
OVERVIEW ~ .

Cloud providers .
o Google Cloud Platform Google Drive Google Workspace

Document management
Tests . .

Identity providers Access Inventory Documents Policies Access Groups People
COMPLIANCE ~ Vulnerability scanners Vulnerabilities
Frameworks

COLLECTIONS
Controls )

Built by Vanta
Policies
Documents
TRUST ~

Missing an integration?
Trust Report
Request an integration

Questionnaires @ q 9
RISK ¥
Risk management
Vendors
Vulnerabilities
ORGANIZATION ~


Adding a document

actions:
Adding & Creating
Selecting & Choosing

screenKeywords:
Compliance 7 Monitoring o
Add standards 2 Infrastructure security & Organizational security
Documents Edit  Add v
D Code of Conduct
¥ Download # Product security @ Internal security procedures
La Data and privacy
:
|Compliance 7 Monitoring o
Add standards 2 Infrastructure security & Organizational security
Documents Edit ~ Add v
Add document from Vanta
D Add Upload new document
Download # Product security @ Internal security procedures
D Add Document
Download
La Data and privacy
D Add Document
Download
®
|Add documents from Vanta X
DOCUMENT NAME
Code of Conduct Recommended
Uploaded Oct 9, 2023
Cancel
|Compliance 7 Monitoring o
Add standards 2 Infrastructure security & Organizational security
Documents Edit  Add v
D Add Document
Download # Product security @ Internal security procedures
D Add Document
Download
La Data and privacy
D Add Document
Download
®
|Add documents from Vanta X
O DOCUMENT NAME
Code of Conduct
o Uploaded Oct 9, 2023 Recommended
Cancel m


Connecting an integration

screenElements:
Grid List
Progress Indicator
Chip

pageType: Application Application Application Application Application Application Application

screenKeywords:
Tests
Integ rations © Missing an integration? Let us know! (2
COMPLIANCE ~ Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.
Frameworks
Controls
B Connected (4)  Available (258)
Policies —_—
Documents CATEGORIES Q Integration capability v
TRUST ~ Al
- R Background checkers aws . [/
HUESE [FEe > Amazon Web Services Fleet J Jamf Pro
Questionnaires Cloud providers BUILT BY PARTNER
Communication platforms Access Inventory Access Computers Inventory Access Computers Inventory
RISK ~
CRM platforms Vulnerabilities
Risk management .
Datastore providers
Access i f f f P f
Vendors
Document management
Vulnerabilities Endbolnt it
ndpoint security .
JumpCloud i€ Kandiji 6 Kolide
ORGANIZATION ~ HRIS -
BUILT BY PARTNER
People Identity providers Access Computers Groups Computers Inventory Access Computers Inventory
Computers Incident management Inventory
Inventory MDM
Observability View details View details View details
¥ Integrations Other
Settings Security trainings
Product updates Task management G Google Workspace ﬂ Office 365 okta Okta
Mobbin Version control systems
Admin Access Groups People Access Groups People Access Groups People
Vulnerability scanners ®
|X Connect AWS © ® Help Center
© Select products Select products
Select the products used within your organization
2 AWS accounts
Policy creation
q o 2

Role creation What products should | integrate with in Vanta?

Vanta supports scanning for the following Amazon Web Services products:
3 M " " ¢ Amazon Web Services
anagement accoun « AWS CodeCommit
. . e AWS |IAM Identity Center (successor to AWS Single Sign-On)
Policy creation . .
e Amazon Inspector / Basic scanning

Role creation i . P
We recommend enabling all the products used within your organization in

Role ARN order to continuously monitor compliance controls in Vanta. This allows Vanta
to do the tedious leg work for you and tells you what is out of compliance the

Region selection moment it happens. This can be edited later on.

4 Configure scope

Amazon Web Services @ ()
Enable this option if you use Amazon Web Services as a cloud provider.
AWS CodeCommit @
Enable this option if you use AWS CodeCommit as a version control ()
system.
AWS |IAM Identity Center (successor to AWS Single Sign-On)
Enable this option if you use AWS IAM Identity Center (successor to ()
AWS Single Sign-0n).
||X Connect AWS © ® Help Center
- Amazon web Services © ()
Enable this option if you use Amazon Web Services as a cloud provider.
@ select products
2 AWS accounts
. . AWS CodeCommit @
Policy creation Enable this option if you use AWS CodeCommit as a version control ()
Role creation system.
3 Management account
Poli i AWS IAM Identity Center (successor to AWS Single Sign-On)
olicy creation Enable this option if you use AWS IAM Identity Center (successor to ‘)
Role creation AWS Single Sign-0n).
Role ARN If you would like Vanta to monitor AWS IAM Identity Center users for this AWS
. account, please specify your Identity store ID and ARN. These are found in IAM
Region selection : : : .
Identity Center, under Settings. Otherwise, please go back and disable
Amazon IAM Identity Center when selecting products. For more information on
4 Configure scope finding these values, see this link (2
() Identity store ID
@) 1AM Identity Center ARN
arn
Amazon Inspector / Basic scanning @
Enable this option if you use Amazon Inspector / Basic scanning as a c
vulnerability scanner.
|X Connect AWS © ® Help Center
1 Select products Configure scope
D Aws . Keep resources in scope if they can access user data, sensitive information, like keys, or if they are supporting your customer experience. Learn about scoping resources.
accounts
Policy creation
Role creation @ All your resources have finished loading.
Can | configure scope at a later time?
3 Management account
Policy creation All resource types v All resources v
Role creation
Role ARN Q Search resources
Region selection IAM Users in scope 3/3 Mark all in « Mark all out
@ Configure scope
jsmith.mobbin@gmail.com
john.mobbin@gmail.com
amanda.mobbin@gmail.com
am: «©
Lambda Functions in scope 1/1 Mark all in « Mark all out
= «©
ECR Container Repositories in scope 1/1 Mark all in « Mark all out
|X Connect AWS © ® Help Center
1 Select products Region selection
Select which regions you would like to monitor
2 AWS accounts
Policy creation o Select all regions with Mobbin production infrastructure. Once
. completed, click Next.
Role creation
Note: By default, Vanta will select all regions that you are
©® Management account currently using, but you can select the "X" to remove any
regions that you don't wish to be monitored. If removed, Vanta
Policy creation will not monitor any resources within that region in the
account.
Role creation
Role ARN Select regions
| Regionicelection us-east-2 X us-east-1 X us-west-1 X
4 Configure scope us-west-2 X ) +Add region
|Vanta < Integ rations (i ] Missing an integration? Let us know! (2
Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.
Finish Starter Guide
15/20 tasks completed Connected (6)  Available (256)
Q Goto $+K CATEGORIES Q aws Integration capability v Clear
All
OVERVIEW ~ Cloud i
oud providers aws .
Home > Amazon Web Services
Other
Tests . . . N
Version control systems Access  Inventory Missing an integration?
COMPLIANCE ~ Vulnerability scanners Vulnerabilities Request an integration
Frameworks
COLLECTIONS
Somils View details Manage
Built by Vanta
Policies
Documents
TRUST ~
Trust Report
Questionnaires
RISK ~
Risk management
Vendors
Vulnerabilities
ORGANIZATION ~


Adding a security review

actions:
Adding & Creating
Uploading & Downloading
Marking

screenPatterns:
Upload & Download
Acknowledgement & Success

pageType: Application Application Application Application Application Application Application Application

screenKeywords:
81% completed
Vendors / WorkOS
OVERVIEW ~ WorkOS
Home @ High risk score
Tests
Executive report Overview  Risk management  Security review Additional details >
COMPLIANCE ~ . . Info
Security review —
Frameworks
Controls Name WorkOS
- Reviews
Policies
Website https://workos.com/
Documents
® Requirements Auth method Not specified
TRUST ~ » Upload a security assessment
Trust Center Auditor visibility Visible ®
Security owner ® Unassigned
Audits
Business owner ® Unassigned
RISK ¥ Files
Risk management No files uploaded yet.
Get started by adding a review.
Access Dates
VG Last review — a8
Vulnerabilities
Account manager
ORGANIZATION ~
People Name Incomplete
Computers Email Incomplete
Inventory
Services provided
Integrations ®
DNDecerihe the cervice thie vandaor ic
|81% completed
Vendors / WorkOS
OVERVIEW ~ WorkOS
Home @ High risk score
Tests
Executive report Overview  Risk management  Security review Additional details >
COMPLIANCE ~ . . Info
Security review —
Frameworks
Controls Name WorkOS
- Reviews
Policies
Website https://workos.com/
Documents
® Requirements Auth method Not specified
TRUST ~ » Upload a security assessment
Trust Center Auditor visibility Visible ®
Questionnaires
. . Security owner ® Unassigned
Avalis Review in progress Mark review as complete
Vanta recommends uploading a security assessment (e.g. . ]
RISK SOC 2 report) for audit documentation. Business owner ® Unassigned
Risk management "
g Files (View templates)
Access . . i Dates
8 Upload files Generate questionnaire request
VErEEE Last review — a8
Vulnerabilities Summary of findings ®
Account manager
ORGANIZATION ~
People Name Incomplete
Computers Email Incomplete
Inventory
Files
. Services provided
Integrations No files uploaded yet. ®
Get started by adding a review. Dececribe the carvice thie vendar ic
|Upload files from computer X
Upload documents
Drag & drop or select .docx, .jpg, .pdf, .png, .xIsx documents up to 50 MB.
%) Upload document
E File#1 o
Filename
WorkOS SOC 2 Type 2 Report Final.pdf
File type
Select an option v
Description (optional)
Enter...
Cancel
|Upload files from computer X
Upload documents
Drag & drop or select .docx, .jpg, .pdf, .png, .xIsx documents up to 50 MB.
%) Upload document
E File#1 o
Filename
WorkOS SOC 2 Type 2 Report Final.pdf
File type
SOC 2 Report v
Description (optional)
Enter..
Cancel Upload
|Upload files from computer X
Upload documents
Drag & drop or select .docx, .jpg, .pdf, .png, .xIsx documents up to 50 MB.
) Upload document
Cancel
|Upload files from computer X
Upload documents
Drag & drop or select .docx, .jpg, .pdf, .png, .xIsx documents up to 50 MB.
%) Upload document
E File#1 o
Filename
WorkOS SOC 2 Type 2 Report Final.pdf
File type
Select an option v
ISO 27001 Report
Other
Other Security Assessment
PCI Attestation of Compliance
Penetration Test Report
Cancel
Public Portal or Website
SOC 2 Report
SOC 3 Report
|81% completed ‘, = =
@ High risk score
OVERVIEW ~
Home Overview Risk management  Security review Additional details £4
Tests
. . Info
Executive report Security review —
COMPLIANCE ~ Name WorkOS
Reviews
Frameworks
Website https://workos.com/
Controls
Policies ® Requirements Auth method Not specified
« Upload a security assessment
Documents
Auditor visibility Visible ®
TRUST ~
q q Security owner ® Unassigned
Trust Center Review in progress Mark review as complete
Vanta recommends uploading a security assessment (e.g. . .
Questionnaires SOC 2 report) for audit documentation. Business owner ® Unassigned
Audits
Files (View templates)
RISK ~ Dates
Risk management GHENAME VR UPLOAD DATE / BY DESCRIPTION Last review —a
Access WorkOS SOC 2 Type 2 Report Final.pdf May 7, 2024
SOC 2 Report Jane Doe
Vendors Account manager
Vulnerabilities 5 Upload files Generate questionnaire request Name Incomplete
il 2l Summary of findings ® Email Incomplete
People
Computers
Services provided
Inventory
Describe the service this vendor is
providing
Integrations ®
Cilace
|81% completed ‘, = =
@ High risk score
OVERVIEW ~
Home Overview  Risk management  Security review Additional details >
Tests
. . Info
Executive report Security review —
COMPLIANCE ~ Name WorkOS
Reviews
Frameworks
Website https://workos.com/
Policies Auth method Not specified
Documents
: Auditor visibilit Visible
-, Congrats on completing a new ¥ @
Ced .
TRUST ~ 5% review!
Security owner ® Unassigned
Trust Center
Questionnaires Business owner ® Unassigned
i May 7, 2024 2
RISK ~ Dates
Risk management Last review May 7, 2024 &
Files
Vendors NAME UPLOAD DATE UPLOADED BY Account manager
Vulnerabilities
. Name Incomplete
WorkOS SOC 2 Type 2 Report Final.pdf May 7, 2024 Jane Smith
SOC 2 Report * Review on May 7, 2024
ORGANIZATION ~ .
Email Incomplete
People 1-1 of 1 result
Computers
Services provided
Inventory
Describe the service this vendor is
providing
Integrations ®


Terms and privacy

screenPatterns:
Settings & Preferences
Terms & Conditions
Privacy Policy
Browser

screenKeywords:
9:41 all ¥ @)
[ )
&) SsuPPORT
% GET NEWSLETTER
W TERMS & PRIVACY
wY FoLLOW ON TWITTER
1 VISIT WEBSITE
7] MUSIC BY THOMAS WILLIAMS

-0°0-

THE !'BORING SOFTWARE CORPORATION MAKES FUN
SOFTWARE FOR LIFE'S BORING MOMENTS.
»— SEATTLE, USA —

1.4 (2)

. ]
|G ol T .
< Vibes

(Not Boring) Terms
of Use & Privacy
Policy
This page is used to inform visitors
regarding our policies with the collection,
use, and disclosure of Personal Information
when using the services provided by Andy
Works LLC.
If you choose to use our services, then you
agree to the collection and use of
information in relation to this policy. The
Personal Information that we collect is used
for providing and improving our products.
We will not use or share your information
with anyone except as described in this
Privacy Policy.

AA & andyworksco.notion.site C

M m


Rhythm settings

screenElements:
Bottom Sheet
Icon

screenPatterns:
Settings & Preferences
Reminder
Reminder

screenKeywords:
9:41 wll T @m)
[am———
VIBES X
AA  RHYTHM
! ACHIEVEMENTS
22 HAPTICS .
7O> KEEP SCREEN ON .
M ouick cuIpe
SUPER ! BORING
. MEMBERSHIP SUPER
. APP ICON GRAPHITE
= ADD A WIDGET
* WALLPAPERS
APPS
7 & ~
e e SV
|9:41 all ¥ @)
[ )
< RHYTHM X
@ WwAKE uP 8:15 AM
/== BEDTIME 12:00 PM
|9:41 all ¥ @)

(AR —

< RHYTHM X
@ WAKE uP 9:15 AM
/== BEDTIME 12:00 PM
|9:41 all T @)
[————
< RHYTHM X

@ WAKE uP 8:15 AM

== BEDTIME
8 15 AM
|9:41 ull T .
[
< RHYTHM X

@ WAKE uP 9:15 AM

&= BEDTIME
9 15 AM


Editing company information

screenKeywords:
Tests
Settings Information
COMPLIANCE ~ Complete general information about your business and its physical location to inform policies and satisfy
COMPANY compliance requirements.
Frameworks
Notifications
Controls
User permissions Display name
Policies
Roles Mobbin
Documents
Information
Legal name
TRUST ~ Security
Mobbin Pte. Ltd.
Trust Report Billing (4
Questionnaires Frameworks Incorporated in the US
Language
RISK ~ gua9 URL
Risk management MY ACCOUNT
Access ificati
Notifications Mailing address
Vendors Language
Vulnerabilities
ORGANIZATION ~
Telephone
People P
Computers
Inventory Company information URL
Integrations e.g. https://rocketship.com/about
€3 Settings
Company logo
Product updates . "
@ logo_mobbin.png Upload new file
Mobbin Upload a JPG, PNG, or SVG file.
Admin
. . @
Update information
|OVERVIEW ~ A .
. Settings Information
ome
Complete general information about your business and its physical location to inform policies and satisfy
Tests COMPANY compliance requirements.
Notifications
COMPLIANCE ~
User permissions Display name
Frameworks
Roles Mobbin
Controls
Information
Policies Legal name
Security
Documents Mobbin Pte. Ltd.
Billing (4
TRUST ¥ Frameworks Incorporated in the US
Trust Report Language
p guag URL
Questionnaires .
MY ACCOUNT https://mobbin.com
RISK ~ ificati
Notifications Mailing address
Risk management Language 75 Ayer Rajah Crescent
Access #02-02
Singapore 139953
Vendors
Vulnerabilities Telephone
ORGANIZATION ~
People Company information URL
Computers
Inventory e.g. https://rocketship.com/about
Company logo
Integrations . "
@ logo_mobbin.png Upload new file
{33 Settings Upload a JPG, PNG, or SVG file.
®
broduictilipdates Update information
Mobbin
|OVERVIEW ~ A .
. Settings Information
ome
Complete general information about your business and its physical location to inform policies and satisfy
Tests COMPANY compliance requirements.
Notifications
COMPLIANCE ~
User permissions Display name
Frameworks
Roles Mobbin
Controls
Information
Policies Legal name
Security
Documents Mobbin Pte. Ltd.
Billing (4
TRUST ¥ Frameworks Incorporated in the US
Trust Report Language
p guag URL
Questionnaires .
MY ACCOUNT https://mobbin.com
RISK ~ ificati
Notifications Mailing address
Risk management Language 75 Ayer Rajah Crescent
Access #02-02
Singapore 139953
Vendors
Vulnerabilities Telephone
ORGANIZATION ~
People Company information URL
Computers
Inventory e.g. https://rocketship.com/about
Company logo
Integrations . "
@ logo_mobbin.png Upload new file
€3 Settings Upload a JPG, PN, i
Thanks! We've saved your information. ®
Product updates Update inforn
Mobbin


Searching audits

screenPatterns:
Misc
Timeline & History

screenPatterns:
Search
Empty State

screenElements:
Search Bar
Avatar

screenPatterns:
Search
Empty State
Misc
Timeline & History

screenKeywords:
Vanta ® ® @& (N
Audits
@ Home Active  Completed
Y= Tests
Audit firm v Framework v Status v
[ Reports
I Compliance O
Frameworks Q
No results found
Controls
Try adjusting your search or filter

Policies

Documents

Audits
@ Trust Center
[ Risk
& Vendor
= Assets
22 Personnel
¥ Integrations

€l
|Vanta ® ® @& (N
Q Help... #+K A
: . Audits
S e Active  Completed
Y= Tests
Q Search Audit firm v Framework v Status v
[ Reports
I Compliance .
SOC 2 Type Il Audit & Awaiting report Openaudit -
Frameworks @
& Auditing ACME LLP RC CS KC MB +6
Controls
Policies ) Auditor gets access May 9, 2024 Audit progress
D 1 c_________________________________________________________________[ J
ocuments
b9 Audit starts May 9, 2024 ) )
® Not ready for audit 1 ® Flagged by auditor 0
Audits
L) Audit ends August 9, 2024 ® Ready for audit 185 ® Accepted 0
@ Trust Center
® Not applicable 9
[ Risk
& Vend
s vendor E No reports available yet
= Assets
22 Personnel
U Integrations @ S0OC2 Type Il Audit = Awaiting report Open audit
& Auditing ACME LLP JA
L) Auditor gets access May 9, 2024 Audit progress
c___________________________________________________________________[ )
b9 Audit starts May 9, 2024 ) )
® Not ready for audit 1 ® Flagged by auditor 0
<l L) Audit ends August 9, 2024 ® Ready for audit 185 ® Accepted 0


Filtering reports

screenPatterns: Dashboard Charts

screenPatterns:
Filter & Sort
Dashboard
Charts

screenKeywords:
Vanta ® ® @& (N
Q Help... #+K Reports
Program overview ©
@ Home
Y= Tests Last 30 days (Aug 11, 2024 - Sep 10, 2024) v Framework v =
I @] Reports Last 7 days (Sep 3, 2024 - Sep 10, 2024)
_ Last 30 days (Aug 1, 2024 - Sep 10, 2024)  ~ \over thelast 30 days © <
Compliance
Last 60 days (Jul 12, 2024 - Sep 10, 2024)
Trust Center f ; f
Y Last 3 months (Jun 10, 2024 - Sep 10, 2024) Remediated past due date Remediated without due date
i 36 of 521 2 of 521
[ Risk Last 6 months (Mar 10, 2024 - Sep 10, 2024) 7% _ ° 0% |, ¢
& Vendor Last 12 months (Sep 10, 2023 - Sep 10, 2024) v 18% Compared to the previous 30 day period ® v 9% Compared to the previous 30 day period ®
= Assets Custom
22 Personnel
Inherent risk Assigned controls
i . Risk scenarios over time grouped by risk level Control owner assignment status over time
¢ Integrations
8 120
M
[}
o €
P o
2 4 S 60
£ o
s 3
3 2 30
=]
= I I I I I
Aug 13 Aug 20 Aug 27 Sep 03 Sep 10 Aug 13 Aug 20 Aug 27 Sep 03 Sep 10
@ High © Med B Low @ Assigned Unassigned
Framework progress Audits as of today © ®
Total progress completion of frameworks over time
€| All  Upcoming Inaudit Awaiting report Completed
100% —
|Vanta ® ® @& (N
Q Help... #+K Reports
Program overview ©
@ Home
Y= Tests Last 12 months (Sep 10, 2023 - Sep 10, 2024) v Framework v 2=
I [ Reports

Program task completion rate within SLA over the last 30 days © «
Compliance How often you remediated items within SLA
@ Trust Center Remediated by due date Remediated past due date Remediated without due date

Risk 0/ 4830f521 o 36 of 521 o 2 of 521

O 93 /o S 7 /o - o /o [l
& Vendor A 27% Compared to the previous 30 day period ® v 18% Compared to the previous 30 day period ® v 9% Compared to the previous 30 day period ®
= Assets
22 Personnel

Inherent risk Assigned controls
i . Risk scenarios over time grouped by risk level Control owner assignment status over time
¢ Integrations

8 120

2

£ 6 2 90

2 £

P o

£ 4 £ 60

s 3

g 2 g 30

E z

= - - - I — — — — —

Sep 2023 Nov 2023 Jan 2024 Mar 2024 May 2024 Jul 2024 Sep 2024 Sep 2023 Nov 2023 Jan 2024 Mar 2024 May 2024 Jul 2024 Sep 2024

@ High © Med B Low @ Assigned Unassigned

Framework progress Audits as of today © ®

Total progress completion of frameworks over time

€| All  Upcoming Inaudit Awaiting report Completed
100% —_—
|Vanta ® ® @& (N
Q Help... $+K Reports
Program overview ©
@ Home
Y= Tests Last 30 days (Aug 11, 2024 - Sep 10, 2024) v Framework v =
I [ Reports
Program task completion rate within SLA over the last 30 days © «
Compliance How often you remediated items within SLA
@ Trust Center Remediated by due date Remediated past due date Remediated without due date
Risk 0/ 4830f521 o 36 of 521 o 2 of 521
© 93 /o N 7 /o - o /o [
‘é’ Vendor A 27% Compared to the previous 30 day period ® v 18% Compared to the previous 30 day period ® v 9% Compared to the previous 30 day period ®
= Assets
22 Personnel
Inherent risk Assigned controls
i . Risk scenarios over time grouped by risk level Control owner assignment status over time
¢ Integrations
8 120
2
° P
s °® g %
5 £
= o
£ 4 S 60
= o
s 3
5] 2 30
E
I I I I I
Aug 13 Aug 20 Aug 27 Sep 03 Sep 10 Aug 13 Aug 20 Aug 27 Sep 03 Sep 10
@ High © Med B Low @ Assigned Unassigned
Framework progress Audits as of today © ®
Total progress completion of frameworks over time
€| All  Upcoming Inaudit Awaiting report Completed
100% —_—


Rating Vanta

actions:
Giving Feedback
Reviewing & Rating

screenPatterns: Feedback Feedback

screenKeywords:
V t FRAMEWORKS / SOC 2
anta <
SOC 2 2 Create system description More v + Create new control
Finish Starter Guide
Q Control status v Owner v
13/20 tasks completed
Q Go to... 84K REQUIREMENT CATEGORIES €l .
Completion
CC 1.0 Control Environment
OVERVIEW ~
CC 2.0 Communication and Controls OK Test 2 46/66
Home Information o .
24 /o N 70%
Tests CC 3.0 Risk Assessment
aEEEE—— Document @ 0/42
CC 4.0 Monitoring Activities 0%
COMPLIANCE ~ 19 controls 80 total °
CC 5.0 Control Activities
Frameworks
CC 6.0 Logical and Physical
Controls Access Controls
Audit timeline View as auditor View audits
Policies CC 7.0 System Operations
Documents CC 8.0 Change Management No audit scheduled. Contact your auditor to enter a date.
CC 9.0 Risk Mitigation
TRUST ~
SD - SOC 2 Supporting
Trust Report Compliance Documentation
Questionnaires
RISK ¥ .
CC What are the primary reasons % t
Risk management for the score you gave?
Access
Love the product
C P Add control
Vendors y
Vulnerabilities
c( EVIDENCE PROGRESS OWNER ®
ORGANIZATION ~
N Emblovee backaround checke nerformed
|V t FRAMEWORKS / SOC 2
anta <
SOC 2 2 Create system description More v + Create new control
Finish Starter Guide
Q Control status v Owner v
13/20 tasks completed
Q Go to... 84K REQUIREMENT CATEGORIES €l .
Completion
CC 1.0 Control Environment
OVERVIEW ~
CC 2.0 Communication and Controls OK Test 2 46/66
Home Information o .
24 /o N 70%
Tests CC 3.0 Risk Assessment
aEEEE—— Document @ 0/42
CC 4.0 Monitoring Activities 0%
COMPLIANCE ~ 19 controls 80 total °
CC 5.0 Control Activities
Frameworks
CC 6.0 Logical and Physical
Controls Access Controls
Audit timeline View as auditor View audits
Policies CC 7.0 System Operations
Documents CC 8.0 Change Management No audit scheduled. Contact your auditor to enter a date.
CC 9.0 Risk Mitigation
TRUST ~
SD - SOC 2 Supporting
Trust Report Compliance Documentation
Questionnaires
RISK ¥ .
CC What are the primary reasons % t
Risk management for the score you gave?
Access The product and experience
C P ) ) P Add control
Vendors has been incredibly useful to p
Vulnerabilities
c( EVIDENCE PROGRESS OWNER ®
ORGANIZATION ~
N Emblovee backaround checke nerformed
|V t FRAMEWORKS / SOC 2
anta <
SOC 2 2 Create system description More v + Create new control
Finish Starter Guide
Q Control status v Owner v
13/20 tasks completed
Q Go to... 84K REQUIREMENT CATEGORIES €l .
Completion
CC 1.0 Control Environment
OVERVIEW ~
CC 2.0 Communication and Controls OK Test 2 46/66
Home Information o .
24 /o O 70%
Tests CC 3.0 Risk Assessment
CE— Document 4 0/42
CC 4.0 Monitoring Activities 0%
COMPLIANCE ~ 19 controls 80 total °
CC 5.0 Control Activities
Frameworks
CC 6.0 Logical and Physical
Controls Access Controls
Audit timeline View as auditor View audits
Policies CC 7.0 System Operations
Documents CC 8.0 Change Management No audit scheduled. Contact your auditor to enter a date.
CC 9.0 Risk Mitigation
TRUST ~
SD - SOC 2 Supporting
Trust Report Compliance Documentation
Questionnaires
RISK ¥ .
CC 1.0 Control Environment
Risk management
Access How would you rate your overall X
satisfaction with this page? Add control
Vendors
- nooono
Very dissatisfied Very satisfied EVIDENCE PROGRESS OWNER @
ORGANIZATION ~
N Emblovee backaround checke nerformed
|V t FRAMEWORKS / SOC 2
anta <
SOC 2 2 Create system description More v + Create new control
Finish Starter Guide
Q Control status v Owner v
13/20 tasks completed
Q Goto... 04K REQUIREMENT CATEGORIES €l .
Completion
CC 1.0 Control Environment
OVERVIEW ~
|Cr)]?ofﬁg)aSgrr]nmunication and Controls OK Test 2 46/66
Home 24 % aEE—— 70%
Tests CC 3.0 Risk Assessment
CE— Document 4 0/42
CC 4.0 Monitoring Activities 0%
COMPLIANCE ~ 19 controls 80 total °
CC 5.0 Control Activities
Frameworks
CC 6.0 Logical and Physical
Controls Access Controls
Audit timeline View as auditor View audits
Policies CC 7.0 System Operations
Documents CC 8.0 Change Management No audit scheduled. Contact your auditor to enter a date.
CC 9.0 Risk Mitigation
TRUST ~
SD - SOC 2 Supporting
Trust Report Compliance Documentation
Questionnaires
RISK ¥ .
CC 1.0 Control Environment
Risk management
Access
CC11-~ Add control
Vendors
Vulnerabilities
Thank you for sharing feedback! & X EVIDENCE PROGRESS OWNER ®
ORGANIZATION ~
N Emblovee backaround checke nerformed


Filtering tasks

screenElements: Drawer Drawer

screenKeywords:
Vanta ® ® @& (N
Q Help... B3l Home @ Hide tasks
I @ Home .

o Compliance progress Last updated 6 minutes ago
Y= Tests Open Tasks X
[ Reports

SOC 2 > Priority (1) v
Compliance o

99 /° 9 Items due soon
@ Trust Center D
O Risk 103 controls complete 104 total 1 document >
& Vendor
= Assets Monitoring 2tests ’
22 Personnel L.

= Policies > 4L Tests > 1 vulnerability finding N
¥ need remediations

Int ti

v Integrations Needs attention ® Needs attention ®

. ] . ]

15 OK 15 total 141 OK 148 total

© Vendors > [0 Documents >

Needs attention ® Needs attention ®

. ] .}

46 OK 46 total 37 OK 39 total

€|
|Vanta ® ® @& (N
< Lk e Home ® Hide tasks
I @ Home .
o Compliance progress Last updated 6 minutes ago
Y= Tests Open Tasks X
[ Reports
SOC 2 > Priority v
Compliance o
99 /° © Items overdue
@ Trust Center D
O Risk 103 controls complete 104 total 1 document >
& Vendor
: 3 4 tests >
= Assets Monitoring
22 Personnel L.
= Policies > L Tests > * Items due soon
O Integrations
v < Needs attention ® Needs attention ® 1 document >
. ] . ]
2 tests >
15 OK 15 total 141 OK 148 total
1 vulnerability finding N
need remediations
© Vendors > [0 Documents >
Needs attention ® Needs attention ®
"> ————————————
46 OK [ © You do not have permission to perform that action. 39 total
€|
|Vanta ® ® @& (N
Q Help... #8+K Home © Hide tasks
I @ Home .
o Compliance progress Last updated 6 minutes ago
Y= Tests Open Tasks X
[ Reports
SOC 2 > Priority (1) v
Compli ()
%) Compliance 99% Due soon 2 soon
@ Trust Center D Overdue
103 controls complete 104 total
@ Risk P nt >
Clear
& Vendor
: 3 2 tests >
= Assets Monitoring
22 Personnel L.
= Policies > 4L Tests > 1 vulnerability finding N
¥ need remediations
Int ti
v Integrations Needs attention ® Needs attention ®
. . ]
15 OK 15 total 141 OK 148 total
© Vendors > (O Documents >
Needs attention ® Needs attention ®
. .}
46 OK 46 total 37 0K 39 total
€l
|Vanta ® ® @& (N
< Lk e Home ® Hide tasks
I @ Home .
o Compliance progress Last updated 6 minutes ago
Y= Tests Open Tasks X
[ Reports
SOC 2 > Priority v
Compliance o
2] p 99% Due soon srdue
@ Trust Center D Overdue
103 controls complete 104 total
@ Risk P nt >
& Vendor
: 3 4 tests >
= Assets Monitoring
22 Personnel L.
= Policies > 4 Tests > 8 Items due soon
O Integrations
v < Needs attention ® Needs attention ® 1 document >
. ] . ]
2 tests >
15 OK 15 total 141 OK 148 total
1 vulnerability finding N
need remediations
= Vendors > [0 Documents >
Needs attention ® Needs attention ®
. ] .}
46 OK 46 total 37 OK 39 total
€l


Widget

hotspotType: Scroll Horizontally

screenPatterns:
Walkthrough
Feature Info

screenElements:
Bottom Sheet
Icon
Page Control

screenPatterns:
Settings & Preferences
Walkthrough
Feature Info
Walkthrough
Walkthrough
Walkthrough

screenKeywords:
9:41 wll T @m)
[am———
VIBES X
AA  RHYTHM
! ACHIEVEMENTS
22 HAPTICS .
7O> KEEP SCREEN ON .
M ouick cuIpe
SUPER ! BORING
. MEMBERSHIP SUPER
. APP ICON GRAPHITE
= ADD A WIDGET
* WALLPAPERS
APPS
7 & ~
e e SV
|< WIDGETS X
WIDGETS BRING
APPS T0 YOUR HOME
SCREEN
30
|< AN X
SEARCH FOR VIBES
AND GHOOSE A
WIDGET
o
|< WIDGETS X
HOLD DOWN ON ANY
APP TO EDIT YOUR
HOME SGREEN
@
|< WIDGETS X
HOLD DOWN ON THE
WIDGET T0 EDIT
SETTINGS
|< WIDGETS X
TAP THE PLUS
BUTTON IN THE TOP
LEFT CORNER
)


Logging out (old)

screenKeywords:
Tests
Home ® View tasks
COMPLIANCE ~
Frameworks
Framework v
Controls
Policies
Compliance progress
Documents p p g
TRUST ~
SOC 2 >
Trust Report
Questionnaires 24%
G
RISK ¥
19 controls complete 80 total
Risk management
Access
Vendors Monltorlng
Vulnerabilities
ORGANIZATION ~ = Policies > L Tests >
People i
janesmith@mobbin.com Needs attention @
Computers Admin 37
Inventory Event log ——
. 15 total 310K 68 total
Starter guide
Integrations Earn $500
Settings Vanta status
Product updates Privacy policy
, > 2 Vendors >
Mobbin Sign out
Admin
Needs attention @ Needs attention @ ®
|%Vanta
Welcome back!
Sign into Vanta ‘
G Continue with Google
o
H Continue with Microsoft
(o] Continue with Okta
(1] Continue with OneLogin ( ] ) \
Enter your email address J
71 g
Don't have an account? Contact us. ® us v /«
he NN
|Tests
COMPLIANCE ~
© Vulnerabilities > = Vendors >
Frameworks
Controls Needs attention @ Needs attention @
Policies 4 8
. ]
Documents
10 OK 14 total 0 OK 8 total
TRUST ~
Trust Report
Questionnaires
2. People > (O Documents >
RISK ~
Needs attention @ Needs attention @
Risk management 0 41
.____________________________________________________________________________J -
Vendors 26 OK 26 total 10K 42 total
Vulnerabilities
ORGANIZATION ~
People
P Trust Report View Trust Report page
Computers
Inventory
Number of Trust Report views @ R Individual page views @ D Document downloads ©
A % si % si % since | K
Integrations 0 +0% since last week 3 +0% since last week 0 +0% since last wee
Settings
Product updates
Mobbin
Admin @


About

pagePatterns:
About Page
About Page
About Page
About Page

pageType: Marketing Marketing Marketing Marketing Marketing Marketing

screenKeywords:
vanta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
Leadership
Inspiring teams for success
Christina Cacioppo
CEO & Founder
Christina Cacioppo is the CEO and co-founder of Vanta, a
leading security and compliance platform backed by
Sequoia Capital and Y Combinator.
Previously, she led product management for Dropbox
Paper. She is based in San Francisco and enjoys running
and reading in her spare time.
© - ©, e
|vanta Product v  Solutions v  Customers Plans Resources v  Company ~ Login
. \
About Security 4 +
, . & +; TryVanta Al
Learn more about Vanta. Understand Vanta's security and compliance .
strategy. N ’aa b
Careers Press \
. , -
Join ourteam! See the latest in Vanta news and press releases. Lo e
Introducing Vanta Al: Powering the future
of trust management
Learn More >
= e T st TssrTr T T J -c:aw .H\gl\- lMedw: ILow- - - IA;ned :asslgned - - - -
Vanta's trust management platform takes the manual work ramework progress opeoming it
out of your security and compliance process and replaces =
it with continuous automation—whether you're pursuing //AT:\_\\— e >
Pt ol . e SOC 2 Type | Audit N
your first framework or managing a complex program. ESivaan : —
p— - e - - ‘ igczrype\lfud“ N
Request a demo 9 Total revenue influenced
$1.75M o
|Van‘ta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
How we got here
Restoring trust in internet businesses ‘ \ e =
Vanta was founded in 2018, in the wake of several high-profile data breaches. [ ' = ,,,,:,
Online security was only becoming more important, but we knew firsthand how B———— — — = T S S
hard it could be for fast-growing companies to invest the time and manpower it I J ;;é::::;;::::;:;:_::—g— S
takes to build a solid security foundation. Vanta was inspired by a vision to : B i S:;—__‘ — i
restore trust in internet businesses by enabling companies to improve and prove ‘ “ e | | |
their security. \:! i " \
e et R S
RGeS S SRS S
R e é’o AN B g e
We started by automating 3 A \g‘ e G AR R ,;Xq X f%_ 1 i
i A8 X Vi MU A A MR s
From our early days automating security monitoring for compliance standards 'A{ ¢ ’2 ﬁg 5 o "(..i\‘;\’ . )k ( J ‘ J — ‘:[' g
like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust o) g, v z \‘ | i X ;;iif o W i 3 —‘w?’ N
Management Platform, our vision remains unchanged. Now more than ever, “’\“ N . f ; by 3 .;“1 .\ s o ug ! \ - @‘E [
making security continuous—not just a point-in-time check— is essential. ! ) C L2 ]~ Lo |04 ’}?» .
Thousands of companies rely on Vanta to build, maintain and demonstrate their 4 > !‘ “i’ e |‘» ~ g, A
trust— all in a way that's real-time and transparent. B B N
|Van‘ta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
Our investors
SEQUOIA Combinator CRAF'T
A ATLASSIAN Ventures HUbSF%t N CROWDSTRIKE
Our values are our St
s ¥ . .
R Put customers first ( ) Win as one team
Vanta’s mission is to protect consumer data and restore trust in
internet business. To do that, we’re building an enduring company
where all Vanta’ns can do the best work of their careers. Building that /\7‘ . . . .
. ; ) . (V, Bias foraction Lead with resilience
enduring company together necessitates articulating how we work and < =
how we make decisions - we call these our principles.
They’re the core tenets that guide how we work, how we hire, and how = . . . .
we interact with customers and partners. EI Decide with frameworks % Do what it says on the tin
|Van‘ta Product v  Solutions v  Customers Plans Resources v  Company Vv Login
Careers
Join our diverse team of smart, respectful, and
passionate individuals.

Locations
We're a remote-first company with team members located around
the world and offices in:
San Francisco, USA
New York, USA
Sydney, Australia

8 @ Dublin, Ireland
_ =
|Vanta Product v  Solutions v  Customers Plans Resources ~  Company v Login
On a mission to
secure the internet and protect
consumer data


Filtering integrations

screenKeywords:
Vanta < Integ rations ;) Missing an integration? Let us know! (2
Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.
Finish Starter Guide
2/20 tasks completed Connected (0)  Available (260)
Q Goto 38+K CATEGORIES Q. google Integration capability (1) v  Clear
All
OVERVIEW ~ .
Cloud providers
. Google Cloud Platform Google Workspace
Identity providers
Tests . L . N
Vulnerability scanners Access  Inventory Access  Groups  People Missing an integration?
COMPLIANCE ~ Vulnerabilities Request an integration
COLLECTIONS
Frameworks .
Built by Vanta
Policies
Documents
TRUST ~
Trust Report
Questionnaires @
RISK ¥
Risk management
Vendors
Vulnerabilities
ORGANIZATION ~
|Vanta < Integ rations © Missing an integration? Let us know! (2
Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.

Finish Starter Guide
2/20 tasks completed Connected (0)  Available (260)
CATEGORIES i ili
Q Go to... 38+K Q. google Integration capability v Clear
All
OVERVIEW ~ , Access
Cloud providers
Home Google Cloud Platform Computers Google Workspace
Document management
Documents
Tests Identit i
entity providers Access Inventory Document upload Access Groups People
COMPLIANCE ~ Vulnerability scanners Vulnerabilities Groups
Frameworks
COLLECTIONS Inventory
Controls )
Built by Vanta
. Clear

Policies

Documents

TRUST ~

Missing an integration?

Trust Report

Request an integration

Questionnaires @ q 9

RISK ¥

Risk management

Vendors

Vulnerabilities

ORGANIZATION ~
|Vanta < Integ rations © Missing an integration? Let us know! (2
Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.
Finish Starter Guide
2/20 tasks completed Connected (0)  Available (260)
google ntegration capability (1) v ear
Q Goto %+K CATEGORIES Q I Int; ti bility (1) Cl
All
OVERVIEW ~ Access
Cloud providers
Home Google Cloud Platform Computers
Identity providers
Documents
LESE) vul bilit Missing an integration?
ulnerability scanners Access Inventory Document upload '
COMPLIANCE ~ Vulnerabilities G Request an integration
COLLECTIONS roups
Frameworks
Built by Vanta Inventory
Controls View details I
. Clear
Policies
Documents
TRUST ~
Trust Report
Questionnaires @
RISK ¥
Risk management
Vendors
Vulnerabilities
ORGANIZATION ~
|L]
Vanta < Integ rations © Missing an integration? Let us know! (2
Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.
Finish Starter Guide
2/20 tasks completed Connected (0)  Available (260)

CATEGORIES i ili
Q Go to... 38+K Q. google Integration capability v Clear

All
OVERVIEW ~ .

Cloud providers .
o Google Cloud Platform Google Drive Google Workspace

Document management
Tests . .

Identity providers Access Inventory Documents Policies Access Groups People
COMPLIANCE ~ Vulnerability scanners Vulnerabilities
Frameworks

COLLECTIONS
Controls )

Built by Vanta
Policies
Documents
TRUST ~

Missing an integration?
Trust Report
Request an integration

Questionnaires @ q 9
RISK ¥
Risk management
Vendors
Vulnerabilities
ORGANIZATION ~


Searching Vanta

screenElements:
Side Navigation
Badge

screenElements:
Search Bar
Tab
Icon
Keyboard Key

screenElements:
Side Navigation
Badge
Search Bar
Search Bar
Tab
Icon
Keyboard Key

screenPatterns:
Dashboard
Search
Command Palette

screenKeywords:
Vanta ¢ Home @ View tasks
Q Go to... 38+K Framework v
OVERVIEW ~
Home Col (%) starter %
Tests
S m Navigation Help Center
COMPLIANCE ~ Navigation
P How to add a start date for background check requirements
Frameworks 4 Starter guide
Controls @ Browse help center
R 2 E How to add a start date for background check requirement To exclude employees employed before a certain date from
To exclude employees employed before a certain date from the backgroun the background check requirement in Vanta, under the
Documents Vanta Integrations that may Require a Premium Service checklist settings, a date can be set for employees that start
...Business Starter Google Drive: Workspace - Business Starter Google Dri\ after a certain date when they will be required to complete a
TRUST ~ Mo Product Updates background check.
... SOC2 Starter Guide Vanta has implemented a SOC2 starter guide for n
Trust Report Trustpage: Trust Center
) ) ...on our Starter plan. Upgrade to a starter plan, then follow these steps to
Questionnaires
| Starting the Security Onboarding Process Procedure >
New to Vanta and looking to get started? It is essential to ensure you begir
RISK ~ N ¢ Go to Checklists
Risk management 1 ¢ Select desired checklist
#BK
Access a @
Vendors 4 OK 15 total 48 OK 100 total
Vulnerabilities
ORGANIZATION ~
People @ Vulnerabilities > = Vendors >
Computers
Needs attention @ Needs attention @ ®
Inventory 4 8
|vanta < Home © View tasks
Finish Starter Guide Framework v
13/20 tasks completed
Compliance progress
Q Go to... ®+K
OVERVIEW ~ S0OC 2 >
Home o
24%
Tests
CEEEEE——
COMPLIANCE ~ 19 controls complete 80 total
Frameworks
Controls
bolicios Monitoring
Documents
= Policies > L Tests >
TRUST ~
Trust Report Needs attention @ Needs attention @
Questionnaires @ 14 37
- . ]
RISK ~ 10K 15 total 310K 68 total
Risk management
Access
Vendors
- © Vulnerabilities > = Vendors >
Vulnerabilities
Needs attention @ Needs attention @ ®
ORGANIZATION ~ 4 5
|Vanta < Home © View tasks
Q Go to... #+K Framework v
OVERVIEW ~
Col
Home ) starter X
Tests
S m Navigation = Help Center
COMPLIANCE ~ Navigation
Frameworks 4 Y  Starter guide
Controls @ Browse help center See more (6) v
Policies 2 How to add a start date for background check requirements
To exclude employees employed before a certain date from the background check requirement in Vanta, under the checklist settings, a date can ...
Documents Vanta Integrations that may Require a Premium Service
...Business Starter Google Drive: Workspace - Business Starter Google Drive: Policy Syncing Mixpanel: Enterprise Paylocity: HR Software Solution...
TRUST ~ MO Product Updates
... SOC2 Starter Guide Vanta has implemented a SOC2 starter guide for new customers. This guide will walk new users through the implementat...
Trust Report Trustpage: Trust Center
i . ...on our Starter plan. Upgrade to a starter plan, then follow these steps to set a custom domain for your Trust Center Begin by clicking the Mana...
Questionnaires ‘ ) ]
1 Starting the Security Onboarding Process >
New to Vanta and looking to get started? It is essential to ensure you begin your employees' onboarding process. The onboarding process ensure...
RISK ~
N O =«
Risk management 1 1 bZ
Access — e
Veanglens 4 0K 15 total 48 OK 100 total
Vulnerabilities
ORGANIZATION ~
EEE © Vulnerabilities > = Vendors >
Computers
Needs attention @ Needs attention @ ®
Inventory 4 8
|Vanta < Home ® View tasks
Q Go to... #+K Framework v
OVERVIEW ~
Col
Home @
Tests
S m Navigation = Help Center
COMPLIANCE ~ Navigation See more (29) v
Frameworks 4 ¥ Integrations
Controls a .
Policies
. 2
Policies
Tests
Documents
Access Reviews
TRUST ~ Mo
Trust Report Trust Report
. i Browse help center See more (523) v
Questionnaires
1 Converting an Employee to a Contractor >
Converting an Employee to a Contractor To convert an employee to a contractor, you first want to offboard the employee. This will ensure the us...
RISK ~
N Vanta & Task Management
Risk management 1 With Task Tracker integrations, Admins can create tickets straight from Vanta into supported task trackers. What will the two-way integration po...
K
Access a ©
Vendors 4 OK 15 total 48 OK 100 total
Vulnerabilities
ORGANIZATION ~
People © Vulnerabilities > = Vendors >
Computers
Needs attention @ Needs attention @ ®
Inventory 4 8


Editing trust report

screenPatterns:
Edit
Internal Tool

screenKeywords:
Banner and colors X
Select a color scheme for your report. Learn more (2
Banner
© Minimal Vanta Custom

W #240642

I #asssr2
Colors
M #7iFce Preview
B #se3ses

Cancel
|Mobbin 2

This is a summary that details company information and how your company views security. Edit the report to add your company mission,

values, and security procedures.

¥ Contact: sample@company.com
Compliance 7 Monitoring o

Add standards 2 Infrastructure security & Organizational security

Documents Edit  Add v

D Add Document

Download ol Product @ Internal security procedures ©
|Banner and colors X
Select a color scheme for your report. Learn more (2
Banner
Minimal Vanta © Custom
W #240642
Colors
M #77iFce Preview
B #se3ses Hinke
2 . e =
36 6 66
R G B ¢
———
|Mobbin 7

This is a summary that details company information and how your company views security. Edit the report to add your company mission,

values, and security procedures.

¥ Contact: sample@company.com
Compliance 7 Monitoring o

Add standards Infrastructure security Organizational security

Documents Edit ~ Add v

D Add Document

Download Product security Internal security procedures ®
|Banner and colors X
Select a color scheme for your report. Learn more (2
Banner
Minimal Vanta © Custom

B #240642

P #asssr2
Colors
M #77iFce Preview
B #se3ses

Cancel
|Mobbin 2
This is a summary that details company information and how your company views security. Edit the report to add your company mission,
values, and security procedures.
¥ Contact: sample@company.com
Compliance 7 Monitoring o
Add standards Infrastructure security Organizational security
(] o
(] o
Documents Edit  Add v °
D Add Document
Download Product security Internal security procedures ©


Unlocking a focus

hotspotType: Tap & Hold

screenElements:
Animation & Video
Full-Screen Overlay

screenKeywords:
9:41 all ¥ (.
L
s . —— (
4] FOCUS
|E
o
R
4
h @ RISE
|LOC;CHRN RN DA U R R0 CUS)
° o S
.
&
e ® o


Home (old)

screenPatterns:
Guided Tour & Tutorial
Progress

screenElements:
Banner
Side Navigation
Badge

screenPatterns:
Guided Tour & Tutorial
Progress
Dashboard

screenKeywords:
Vanta < Home H I k V X
elp us make Vanta
- . |
Finish Starter Guide Framework v better-
6/20 tasks completed Interested in shaping the future of the Vanta product?
Compliance progress
Q Go to... 38+K Please consider joining our research panel. We'll send you
periodic invites to get your feedback and show you the
OVERVIEW ~ sSOC 2 N latest Vanta features.
eme g
24% -
Tests
CEEEE——
COMPLIANCE ~ 19 controls complete 80 total
Frameworks
Controls
. Monitoring
Policies
Documents
Policies > Tests >
TRUST ~
Trust Report Needs attention @ Needs attention @
Questionnaires 15 38
.}
RISK ¥ 0 OK 15 total 30 OK 68 total
Risk management
Access
Vendors
- Vulnerabilities > Vendors >
Vulnerabilities
Needs attention @ Needs attention @ ®
ORGANIZATION ~ 4 5
|Tests
COMPLIANCE ~
© Vulnerabilities > = Vendors >
Frameworks
Controls Needs attention @ Needs attention @
Policies 4 8
. ]
Documents
10 OK 14 total 0 OK 8 total
TRUST ~
Trust Report
Questionnaires
2. People > (O Documents >
RISK ~
Needs attention @ Needs attention @
Risk management 0 41
.____________________________________________________________________________J -
Vendors 26 OK 26 total 10K 42 total
Vulnerabilities
ORGANIZATION ~
People
P Trust Report View Trust Report page
Computers
Inventory
Number of Trust Report views @ R Individual page views @ D Document downloads ©
A % si % si % since | K
Integrations 0 +0% since last week 3 +0% since last week 0 +0% since last wee
Settings
Product updates
Mobbin
Admin @
|A v Ve ago
OVERVIEW.'™ Home @ View tasks
Home
Tests Framework v
COMPLIANCE ~ .
Compliance progress
Frameworks
Controls @ SOC 2 >
Policies 4°
Documents o
TRUST ~ #Introducing the new 'Audits' page X 80 total
Trust Report
Explore the new 'Audits' page in the side bar,
Questionnaires where you can schedule audits, see and
Audits manage them in one central location. Take a
guided tour now to uncover the new
RISK ~ capabilities. > A Tests >
Risk management . Needs attention @
Do it later
54
Vendors O .
_ 4 OK 15 total 75 OK 129 total
Vulnerabilities
ORGANIZATION ~
ETEE @ Vulnerabilities > = Vendors >
Computers
Needs attention @ Needs attention @
Inventory 4 5
. ]
lQicatiohs 10 OK 14 total 0 0K 5t @
Settings
|. s o 1 .
Finish Starter Guide Welcome to Vanta! Starter Guide Progress
E— Accelerate your account setup and audit prep. Pick up where you left off and check out our in-app help resources if you get
0/20 tasks completed stuck.

Oof4
key systems connected
Q Go to... #8+K
\V} Intro to Vanta 0 of Tcomplete A 0of 3
OVERVIEW ~ Learn about your frameworks and how Vanta works to meet your security and starter policies approved
compliance needs. .

Home Auditor selected

Tests How Vanta works

COMPLIANCE ~ Framework progress

Frameworks

Intro to SOC 2

Controls

Policies Invite collaborators

Documents

TRUST ~

.. Connect your key systems 0 of 4 complete A
Trust Report v
Connecting integrations enables Vanta to automate evidence collection and

Questionnaires @ monitoring for you.

RISK ¥ Connect identity provider

Risk management

Connect cloud provider
Vendors Connect version control system
Vulnerabilities Connect HR system
®
ORGANIZATION ~
|vanta < Home © View tasks
Finish Starter Guide Framework v
13/20 tasks completed
Compliance progress
Q Go to... ®+K
OVERVIEW ~ S0OC 2 >
Home o
24%
Tests
CEEEEE——
COMPLIANCE ~ 19 controls complete 80 total
Frameworks
Controls
bolicios Monitoring
Documents
= Policies > L Tests >
TRUST ~
Trust Report Needs attention @ Needs attention @
Questionnaires @ 14 37
- . ]
RISK ~ 10K 15 total 310K 68 total
Risk management
Access
Vendors
- © Vulnerabilities > = Vendors >
Vulnerabilities
Needs attention @ Needs attention @ ®
ORGANIZATION ~ 4 5


Personnel

screenPatterns: Home Progress

screenKeywords:
Vanta ® ® @& (N
Accounts Export access data ¥
Seeing some accounts that should not be here? Learn more about scoping out resources.
@ Home
Y= Tests Accounts
. Get started with access reviews for %
[ Reports Reviews Try free
pr— Todolit fre e
\ y o [
Compliance 3 ° Save hours every week and eliminate risk from misused
' credentials. Automate manual, time-consuming access
@ Trust Center 1 : . ‘ ; ) A i
3 B ! review processes with our new Access Reviews
. | a : . +
[ Risk : T solution. -
o Okta @ Comected -a
& Vendor Schedule a call »>
= Assets
View guided demo
I 4% Personnel
People
CompLters AWS - Management Acco... v Owner v Type v Status v MFA v Q
Access
Settings ﬁiCM%UNT OWNER GROUPS TYPE STATUS MFA CREATED DEACTIVATED
Y Integrations janesmith@mo  Jane Smith (You) +4 1AM ® Active o May 9, 2023 —
alexlee@mobb  '€x Lee ¢ ma.. IAM ® Deac... — Mar 15, 2024  Apr 22, 2...
Engineer
| +2 IAM ® Active (] May 9, 2023 —
bill... a. 1AM ® Deac... - May 17, 20... Aug 15, 2...
€l 1-4 of 4 results Show 20 v results per page
|Vanta ® ® @& (N
Q Help... #+K
S Computers
Use a MDM to track all computers within your organization and ensure that security-relevant settings are configured
@ Home promptly.
Y= Tests Monitored  Unmonitored
[ Reports
Q Search Monitored by v Status v Operating System v Owner v & Send bulk reminder ¥ Export
Compliance
LAST
@ Trust Center O  DEevIcE OWNER 0S VERSION MONITORING & Pw B HD Q av & sL CHECK
[J Risk — Sam Lee P
_ V]
D R2345AFGG-567EG.. samelee@mo.. b A Vanta Agent ° ° ° 5 days
& Vendor
alexlees-MacBo... Alex Smith L.. P
= Assets O R234EARGE alexemithi@m.. @ mac0S 14.41 Vanta Agent ... (] (] 11 hours
I “% Personnel
O Vanta Agent ... (] (-] (V] 2 hours
People
Computers O Vanta Agent ... (] o (] (] 1 hour
Access .
O Vanta Agent ... (] (] (] 38 minutes
Settings
O Vanta Agent ... (V] (V] (] (V] 1day
U Integrations
O Vanta Agent ... (] (] (] 19 hours
O Vanta Agent ... (] (] (] 4 months
O Vanta Agent ... (] (] 1 month
| O Vanta Agent ... (V] (V] (-] (V] 55 minutes
6
|Vanta ® ® @& (N
Q Help... #8+K Home © View tasks
I @ Home .
Compliance progress Last updated 2 minutes ago
Y= Tests
[ Reports SOC 2 >
i )
Compliance 99/0
@ Trust Center D
103 controls complete 104 total
[J Risk P
& Vendor
= Assets Monitoring
22 Personnel .
= Policies > L Tests >
People
Needs attention ® Needs attention ®
Computers 0 7
Access
. D
Settings 15 OK 15 total 141 OK 148 total
¥ Integrations
© Vendors > [0 Documents >
Needs attention ® Needs attention ®
. D
46 OK 46 total 37 OK 39 total
€|
|Vanta ® ® @& (N
<Ll s Home @ View tasks
I @ Home .
Compliance progress Last updated less than a minute ago
Y= Tests
[ Reports SOC 2 >
i )
Compliance 99/0
@ Trust Center D
103 controls complete 104 total
[J Risk P
& Vendor
= Assets Monitoring
22 Personnel .
= Policies > L Tests >
¥ Integrations Needs attention ® Needs attention ®
. D
15 OK 15 total 141 OK 148 total
© Vendors > [0 Documents >
Needs attention ® Needs attention ®
. D
46 OK 46 total 37 OK 39 total
€|


Vendor (old)

screenPatterns: Misc Dashboard

screenKeywords:
Vanta < Vendors ¥ Export data + Add a vendor
Finish Starter Guide Active  Archived
13/20 tasks completed Q Inherent risk v Security owner v Data agreement status v Review status v 9 Security review due date

Q Go to... ¥8+K

NAME / CATEGORY 1 INHERENT RISK SECURITY REVIEW LAST REVIEW DATE
OVERVIEW ~

Deel ® Unscored > Needs initial review —_
Home
TR GitHub ® Unscored > Needs initial review —
COMPLIANCE ~

Google Cloud Platform ® Unscored > Needs initial review —
Frameworks
Controls Google Workspace ® Unscored > Needs initial review —
Policies
DEslERE WorkOS ® Unscored > Needs initial review —
TRUST ~ 1-5 of 5 results Show 50 v results per page Previous Next
Trust Report
Questionnaires
RISK ¥
Risk management
Access
Vendors
Vulnerabilities

®

ORGANIZATION ~
|vanta < Home © View tasks
Finish Starter Guide Framework v
13/20 tasks completed
Compliance progress
Q Go to... ®+K
OVERVIEW ~ S0OC 2 >
Home o
24%
Tests
CEEEEE——
COMPLIANCE ~ 19 controls complete 80 total
Frameworks
Controls
bolicios Monitoring
Documents
= Policies > L Tests >
TRUST ~
Trust Report Needs attention @ Needs attention @
Questionnaires @ 14 37
- . ]
RISK ~ 10K 15 total 310K 68 total
Risk management
Access
Vendors
- © Vulnerabilities > = Vendors >
Vulnerabilities
Needs attention @ Needs attention @ ®
ORGANIZATION ~ 4 5


Onboarding

screenElements:
Button
Time Picker

screenElements:
Animation & Video
Button
Time Picker
Animation & Video
Animation & Video
Full-Screen Overlay
Illustration
Logo

screenPatterns:
Feature Info
Launch Screen
Reminder
Feature Info

screenKeywords:
..GENERATES SOUNDSGAPES
T0 ENHANGE YOUR FOGUS,
SLEEP, & WORKOUTS
|USE HEADPHONES FOR
SPATIAL AUDIO
|+ w
THI“PRETT VA
x
|+
EED HELP TO F N
W TTER
TAP TO CONTINUE °
|LET'S BUILD YOUR VIBE
|VIBES ANALYZES YOUR
ENERGY RHYTHMS AND...
|SKIP
———————
||WHEN DO YOU GO T0 BED?
VIBES WILL AUTOMATICALLY ADAPT TO HELP
YOU WIND DOWN FOR BED.

12 00 AM
. J]
|VIBES WILL AUTOMATICALLY ADAPT TO HELP
YOU GET MOVING AFTER WAKING UP.
CONTINUE
. J]
|/
v
7’7
‘ .. |
-
!
|| e
e
5 |
Fm &
S
X |
(4 ||
[l o1
¢ * A
NS
SKIP
|ADD ACGTIVITY
VIBES WILL AUTOMATICALLY ADAPT TO YOUR
A\ ATA N A I 211
. J]
|-04'0 S
|WHEN D0 YOU WAKE UP?
VIBES WILL AUTOMATICALLY ADAPT TO HELP
YOU GET MOVING AFTER WAKING UP.

8 1 AM
. J]


Integrations (old)

screenKeywords:
Tests
Integ rations © Missing an integration? Let us know! (2
COMPLIANCE ~ Review your integrations and enable new connections to activate automated evidence collection and
monitoring. Vanta scans your infrastructure from a known IP address in case an allowlist is required.
Frameworks
Controls
B Connected (4)  Available (258)
Policies —_—
Documents CATEGORIES Q Integration capability v
TRUST ~ Al
- R Background checkers aws . [/
HUESE [FEe > Amazon Web Services Fleet J Jamf Pro
Questionnaires Cloud providers BUILT BY PARTNER
Communication platforms Access Inventory Access Computers Inventory Access Computers Inventory
RISK ~
CRM platforms Vulnerabilities
Risk management .
Datastore providers
Access i f f f P f
Vendors
Document management
Vulnerabilities Endbolnt it
ndpoint security .
JumpCloud i€ Kandiji 6 Kolide
ORGANIZATION ~ HRIS -
BUILT BY PARTNER
People Identity providers Access Computers Groups Computers Inventory Access Computers Inventory
Computers Incident management Inventory
Inventory MDM
Observability View details View details View details
¥ Integrations Other
Settings Security trainings
Product updates Task management G Google Workspace ﬂ Office 365 okta Okta
Mobbin Version control systems
Admin Access Groups People Access Groups People Access Groups People
Vulnerability scanners ®
|Tests
COMPLIANCE ~
© Vulnerabilities > = Vendors >
Frameworks
Controls Needs attention @ Needs attention @
Policies 4 8
. ]
Documents
10 OK 14 total 0 OK 8 total
TRUST ~
Trust Report
Questionnaires
2. People > (O Documents >
RISK ~
Needs attention @ Needs attention @
Risk management 0 41
.____________________________________________________________________________J -
Vendors 26 OK 26 total 10K 42 total
Vulnerabilities
ORGANIZATION ~
People
P Trust Report View Trust Report page
Computers
Inventory
Number of Trust Report views @ R Individual page views @ D Document downloads ©
A % si % si % since | K
Integrations 0 +0% since last week 3 +0% since last week 0 +0% since last wee
Settings
Product updates
Mobbin
Admin @


Trust report detail

screenElements:
Tab
Full-Screen Overlay

screenKeywords:
Subprocessors 7
Add subprocessors
FAQ 7
> Add question
> Add question
> Add question
> Add question
POWERED BY: This Trust Report is powered by Vanta. Vanta identifies security flaws and privacy gaps in a company's security
v t posture by connecting to core systems to continuously monitor an organization's cloud infrastructure, endpoints,
an a corporate procedures, enterprise risk, and employee accounts.
Thousands of fast-growing companies trust Vanta to automate their security monitoring and compliance process. ®
Learn more
|Compliance 7 Monitoring o
Add standards 2 Infrastructure security & Organizational security
Documents Edit  Add v
D Add Document
Download # Product security @ Internal security procedures
D Add Document
Download
La Data and privacy
D Add Document
Download
®
|n Overview  Monitoring Trust Report
n Privacy Policy
Mobbin
¥ Contact: security@mobbin.com
Monitoring ® Updated about 1 hour ago

2 Infrastructure security > i Organizational security > # Product security >

@ Intrusion detection system utilized @ Anti-malware technology utilized @ Data encryption utilized

@ Production database access restricted @ Password policy enforced @ System activity logged

@ Remote access MFA enforced @ Confidentiality Agreement acknowledge...

View all 11 controls View all 4 controls View all 2 controls

®
|Mobbin 2
This is a summary that details company information and how your company views security. Edit the report to add your company mission,
values, and security procedures.
¥ Contact: sample@company.com
Compliance 7 Monitoring o
Add standards Infrastructure security Organizational security
(] o
(] o
Documents Edit  Add v °
D Add Document
Download Product security Internal security procedures ©


Home

screenElements:
Top Navigation Bar
Logo
Icon
Side Navigation
Progress Indicator
Card

screenPatterns: Home Progress Dashboard

screenKeywords:
Vanta ® ® @& (N
<Ll s Home @ View tasks
I @ Home .
Compliance progress Last updated less than a minute ago
Y= Tests
[ Reports SOC 2 >
i )
Compliance 99/0
@ Trust Center D
103 controls complete 104 total
[J Risk P
& Vendor
= Assets Monitoring
22 Personnel .
= Policies > L Tests >
¥ Integrations Needs attention ® Needs attention ®
. D
15 OK 15 total 141 OK 148 total
© Vendors > [0 Documents >
Needs attention ® Needs attention ®
. D
46 OK 46 total 37 OK 39 total
€|
|Vanta ® ® @& (N
Q Help... #+K I
Monitoring
I @ Home
ici > >
I= Tests = Policies L Tests
[ Reports Needs attention ® Needs attention ®
Compliance
D . ]
© Trust Center 15 OK 15 total 141 OK 148 total
@ Risk
& Vendor
S Vendors > [0 Documents >
= Assets
.o Needs attention ® Needs attention ®
202 Personnel 0 2
U Integrations D . ]
46 OK 46 total 37 0K 39 total
Trust Center
Total visits Individual page views " Resource downloads
@ 8 +0% since last week E] 21 +0% since last week - 0 +0% since last week
View Trust Center page -
€l


Deleting a custom category

screenKeywords:
vanta <« Risk management Risk management settings
Update settings related to risk management and the risk register.
ASSESSMENT
Finish Starter Guide Register (0)
_—— Library _
12/20 tasks completed Riskregister o ] [ «
Action tracker Advanced Risk Customization
Q Go to... HB+K Settings ' .::. o' : Add-on which greatly extends the customizability of
h :: Vanta's Risk Management solution. Empowers customers
OVERVIEW IR L R to describe, assess, treat, and visualize risk on their own
Ve T o - terms by customizing their risk scoring dimensions,
- score groups, risk register, and more.
Tests p—— e -
g - == Schedule a call

COMPLIANCE ~ -}
Frameworks
Controls .

Custom categories Add
Policies
Documents Data breach 7 o
TRUST ~
Trust Report Custom attributes Add
Questionnaires @

You don't have any custom attributes yet.
RISK ¥
Risk management
Access Likelihood scoring scale Edit
Vendors
Vulnerabilities SCORE LABEL DESCRIPTION
®

ORCANIZATION NG A threat event is so unlikely that it can be assumed that
i its occurrence may not be experienced. A threat source is
|vanta <« Risk management  Risk management settings
Update settings related to risk management and the risk register.
ASSESSMENT
Finish Starter Guide Register (0)
_—— Library _
12/20 tasks completed Riskregister o ] [ «
Action tracker Advanced Risk Customization
Q Go to... RB+K Settings ' il o' : Add-on which greatly extends the customizability of
h :: Vanta's Risk Management solution. Empowers customers
OVERVIEW RS L R to describe, assess, treat, and visualize risk on their own
YGE T o - terms by customizing their risk scoring dimensions,
- score groups, risk register, and more.
Tests P P -
mEEEE — Schedule a call

COMPLIANCE ~ -}
Frameworks
Controls .

Custom categories Add
Policies
Documents You don't have any custom categories yet.
TRUST ~
Trust Report Custom attributes Add
Questionnaires @

You don't have any custom attributes yet.
RISK ¥
Risk management
Access Likelihood scoring scale Edit
Vendors
Vulnerabilities SCORE LABEL DESCRIPTION
®

ORCANIZATION NG A threat event is so unlikely that it can be assumed that
i its occurrence may not be experienced. A threat source is
|Remove category X
Vanta will delete Data breach as a category and remove it
from all risk scenarios (including archived ones). This action is
not reversible. Risk scenarios in snapshots will not be impacted.
This will affect O active risk scenarios and 0 archived risk
scenarios.
Are you sure that you want to delete this category?

Cancel