Vanta

What do you like best about the product?

Checking the data security of our inventory management and delivery integrations is no longer a massive manual chore. I can instantly see if a new point-of-sale plugin actually meets privacy standards before we roll it out to our kitchens.

What do you dislike about the product?

Traditional ingredient suppliers and local distributors still use paper records and get completely spooked by automated compliance emails. We waste hours manually uploading their physical food safety certificates into the system just to clear the annoying red dashboard errors.

What problems is the product solving and how is that benefiting you?

Major grocery chains demand strict proof that our third-party logistics tools won't expose their internal delivery schedules. Providing a live Vanta report clears their procurement hurdles immediately and gets our products onto their retail shelves faster.

What do you like best about the product?

Ease of use. I have used other compliance platforms and while Vanta has some areas of opportunity, it definitely excels in many areas that I need it.

What do you dislike about the product?

Questionnaire automation needs work. It does not provide good answers.

What problems is the product solving and how is that benefiting you?

Automating compliance. It helps us to avoid gaps in our compliance by streamlining SLA's, important dates, etc.

What do you like best about the product?

I like that it’s an all-in-one GRC tool that centralizes all our compliance efforts in one place, making it easier to manage everything from a single hub while reducing the cost and need for additional tools. I also appreciate the AI agent, which makes the platform even easier to use, and the extensive range of integrations available allowing Vanta to be fed from numerous sources. Support is also quick and efficient.

What do you dislike about the product?

The information in some sections is not as well organized and categorized as it is in other tools. Additionally, performance can be impacted when an integration ingests a large volume of data.

What problems is the product solving and how is that benefiting you?

The consolidation of GRC information and resources in a single place.

What do you like best about the product?

What I like most about Vanta is its detailed security profiles and clear guidance on the measures required to achieve standards such as ISO 27001. This has a major positive impact on companies preparing for certification, as the controls are straightforward, practical, and easy to follow.

What do you dislike about the product?

Vanta often lacks simple options for handling exceptions. Newly discovered vendors require constant review, and the limited flexibility can create false positives for example, users being flagged as improperly offboarded when a valid special case applies. The controls are straightforward, but exception handling still needs improvement.

What problems is the product solving and how is that benefiting you?

The preparation for ISO compliance and overview about security tracking automatisations it offers.

What do you like best about the product?

Whenever our field teams want to integrate a new weather forecasting API, I just run the provider's domain through the portal. Vanta grabs their actual compliance history immediately, which stops us from blindly trusting their sales pitch.

What do you dislike about the product?

We work with several equipment manufacturers that still keep all their data policies in physical filing cabinets instead of digital trust centers. The automated dashboard constantly yells at me about missing documents until I manually upload a scanned copy of their ancient contracts.

What problems is the product solving and how is that benefiting you?

Massive agricultural cooperatives are terrified of handing over their crop yield data to a leaky platform. Showing them exactly how we isolate and monitor our third-party software connections instantly wins their trust and gets the enterprise contracts approved.

Recommendations to others considering the product:

To improve efficiency, consider digitizing all data policies and integrating them into a centralized digital trust center. This will streamline document management and reduce manual uploads.

What do you like best about the product?

Vanta gives us a single place to monitor the security certificates for all the external carbon-tracking and ESG data platforms we rely on. I can instantly verify if a new environmental analytics tool actually protects sensitive metrics before we connect it to our main database.

What do you dislike about the product?

A lot of the newer sustainability startups we partner with get completely overwhelmed by Vanta's automated security questionnaires and end up ignoring them. My team constantly has to jump on video calls just to hold their hands through uploading a basic data privacy policy to clear the alerts.

What problems is the product solving and how is that benefiting you?

Major corporate clients demand absolute proof that their internal emissions data won't get exposed by our third-party software stack. Handing their auditors a live Vanta vendor dashboard immediately kills their security concerns and gets our consulting agreements signed without delay.

What do you like best about the product?

The process was very fast and secure, and it was completed within a few minutes. This is a good option for organizations that don’t want to spend on in-house experts in the respective domain.

What do you dislike about the product?

Nothing specific at the moment. If I notice anything, I’ll report it in a separate review.

What problems is the product solving and how is that benefiting you?

Multiple compliance requirements for the organization are taken care of in one place.

What do you like best about the product?

Managing ISO/SOC II compliance under one umbrella

What do you dislike about the product?

Not very user-friendly. The UI feels cumbersome, and auditing is a pain because the auditor has to download each and every document, which makes the whole process clumsy.

What problems is the product solving and how is that benefiting you?

Please make it more user-friendly and easier to follow, because right now it feels like it’s going haywire.

What do you like best about the product?

Integrations, reminders for employees, and everything connected in one place.

What do you dislike about the product?

There are a few duplicate tests/controls, and they have to be disabled manually. It’s not a big deal, though.

What problems is the product solving and how is that benefiting you?

It helps ensure that everything is within the framework standards and can be audited any time

I used the solution for SOC2, HIPAA, and HITRUST compliance.

The solution did not contribute to any improvements in the organization.

There were no valuable features identified.

There is significant room for improvement in support, product clarity, and flexibility for small startups. Our experience with Vanta has been terrible. We previously used Sprinto, with which we completed our SOC 2 readiness in about one week, with the help of a real person who guided us over Zoom. She remained available during the audit, answered questions, and helped resolve issues. I was largely hands-off and couldn’t have been happier. We switched to Vanta primarily for HITRUST and decided to manage SOC 2 and HIPAA there as well. That turned out to be a roughly $14,000 mistake. Initially, the salesperson pressured us to make a quick decision and then stopped responding after the sale. I followed up three times simply trying to determine who our account manager was and received no response. The implementation support fell short of our expectations, as Vanta relies on Workstreet, whose initial engagement with us was limited to approximately 30 days. Communication involved delays, and we did not receive the live, hands-on Zoom guidance we had experienced with our previous compliance provider.

In practice, “assistance” was very different from having someone take ownership and help us reach completion. The platform is extremely confusing. Vanta’s sales messaging emphasized automation and suggested that the product was intuitive enough that extensive account management would not be necessary. That was not our experience. We were left to interpret a substantial portion of the requirements, figure out what evidence was needed, update policies, and even use ChatGPT to understand how to complete Vanta’s own HITRUST tasks.

When it became clear that we had no intention of continuing with Vanta, we tried to reach a reasonable resolution. We are a small startup and proposed that Vanta keep everything we had already paid—even though our platform usage had been minimal—and simply cancel the unpaid remainder of the contract. We later offered to pay an additional monthly installment as an early-termination fee. Vanta refused every proposal, citing its policy against mid-contract cancellations and its revenue-recognition practices. Instead, it repeatedly offered more onboarding and Workstreet support, even after we clearly explained that we had decided not to use Vanta or maintain our compliance program and policies there. The most disappointing part was the complete lack of flexibility. We were not asking for previous payments back. We were asking Vanta to stop charging a small startup for a platform it would not use. Vanta chose to enforce the remaining commitment anyway. Based on our experience, I cannot recommend Vanta to an early-stage company expecting hands-on compliance support. I recommend understanding exactly how much work your team will still be responsible for, what assistance is time-limited, and that Vanta may hold you to the entire contract even if the platform is not a workable fit.

I used the solution for 3 months.

We previously used Sprinto for HITRUST.

Do not sign the contract until you're thoroughly happy with their platform. They will not help in any way possible and will point to the contract or MSA to get out of helping you.

We considered alternate solutions, but it was not enough.

Vanta's sales practices are outlandishly predatory. They made us use AWS Marketplace Subscription as a way to make it sound like it's a subscription that can be cancelable whenever we wish.

Amazon Web Services (AWS)