How Rad AI got audit-ready in 3 months after switching to Vanta

The company

On a mission to empower physicians with AI

Rad AI is transforming how radiologists work by applying artificial intelligence to one of the most demanding areas in healthcare. Its mission is to empower physicians—saving time, reducing burnout, and improving patient care.

Dominic Pace, Director of IT and Security, leads both Rad AI’s IT program and its growing security program. With a lean, focused team, he’s responsible for protecting customer and employee data, as well as protecting the company’s intellectual property. 

“Radiologists often work long hours, in isolated, windowless rooms, reviewing imaging data under pressure,” says Dominic. “We’re building tools that help them move faster and safer.”

Operating in a highly regulated space, Rad AI has made security and compliance central to how it scales. “We’re working with very large healthcare providers who know what they’re looking for,” Dominic says. “We’re focused on building a program that can meet those expectations and grow with the business.”

‍

The challenge

An outdated compliance tool that couldn’t keep up

As Rad AI matured, their security needs quickly outgrew the capabilities of their previous compliance platform. What started as a tactical tool for audit prep became a source of friction—one that couldn’t support the company’s multi-product structure, evolving risks, or operational pace.

Instead of streamlining work, the platform created more of it. Manual processes multiplied, promised features never materialized, and foundational tasks—like access reviews and risk assessments—had to be reworked outside the system just to meet business requirements.

“Multi-product support was hands down the biggest gap,” said Dominic. “It would’ve meant duplicating our entire program across instances. That just sounded like a nightmare to manage.”

The platform lacked depth where it mattered most. Risk management, in particular, was a weak point. “Vanta clearly understands risk management,” Dominic noted. “I can’t say the same for our previous vendor.”

Rather than accelerate their program, the tool began to slow it down. Roadmap promises weren’t kept. “Features that were business requirements for us still weren’t rolled out a year later.” Internal momentum stalled. Every compromise risked disconnecting security from the business itself.

{{quote-2}}

‍

The solution

A modern platform for maturing security 

To keep pace with enterprise growth and evolving risk, Rad AI needed a compliance solution that was both flexible and fast. With Vanta, the team gained automation, visibility, and scalable tooling—all without increasing overhead.

Core workflows like access reviews, risk management, and audit prep improved immediately. What was once manual and fragmented became centralized, structured, and easy to act on. “We can actually show the difference between inherent and residual risk now,” said Dominic. “That’s how it should work.”

AI-powered automation was another standout. From Questionnaire Automation to the soon-to-launch Trust Center, Rad AI unlocked ways to respond faster and deflect repetitive asks. “The sales team loved it right away,” said Dominic. “The idea that they could get real answers without pinging us? That’s huge.”

Vanta’s AI also outperformed other platforms during evaluation. “Our previous vendor’s AI stopped at spreadsheets,” Dominic noted. “Vanta helps us respond to the systems our customers are using now.”

With a transparent roadmap and deeply responsive support, the partnership continues to grow. “A lot of vendors drop off after the sale,” Dominic said. “With Vanta, I reach out to my Vanta team and in-app support, and get real answers”. 

‍

The impact

Faster audits, stronger workflows, and a foundation for growth

With Vanta, Rad AI was able to lift-and-shift its operations, revise workflows, and get SOC 2 audit-ready in just three months. “That might sound like a lot of time,” said Dominic. “But if you’ve worked in audit, you know it’s not. For me, it was probably a record.”

That speed translated directly into value. By automating access reviews, streamlining audit prep, and eliminating tool-related friction, Rad AI reclaimed valuable time across its lean IT and security team. “Our previous vendor was a poor fit—we wasted a lot of time,” Dominic noted. 

Vanta didn’t just support audit delivery, it helped mature the program. Structured risk scoring, better access control, and AI-driven workflows elevated operational confidence and reduced the need for manual backstops.

Leadership took notice, too. Initially skeptical of switching platforms mid-contract, Rad AI’s CEO quickly saw the payoff. “He conveyed that, what initially appeared to be a matter of preference was, in reality, a decision critical to the future of the company,” Dominic said.

Looking ahead, the team plans to roll out Vanta Trust Center, expand usage of Questionnaire Automation, and begin exploring third-party risk and API integrations with tools like Notion. 

With Vanta, security isn’t a blocker, it’s a core enabler of scale.

{{quote-3}}