How Veriff saves 1+ day per week by automating compliance with Vanta

THE COMPANY

Building trust for a global identity leader

Veriff is on a mission to make the internet a safer place to do business. They do this by combating different types of internet fraud. The fast-scaling, AI-driven company is a global leader in identity verification and authentication—helping customers from the banking industry, crypto, ecommerce, and more, make sure that their clients and users are truly who they say they are. 

The company is entrusted with verifying more than a million people from all corners of the globe every single day. Since they leverage AI to match images and personal information, security is crucial to the foundation of their business. 

‍

THE CHALLENGE

Bogged down by manual evidence collection and a lack of visibility

Veriff faced significant challenges in managing security and compliance, primarily due to manual, spreadsheet-driven processes. They were spending more than one full workday of combined human work hours per week on manual evidence collection and suffered from a lack of visibility, which ultimately led to reduced customer confidence in their security posture. This made it difficult to build trust and accelerate business growth.

To manage compliance priorities and demonstrate a strong security posture, Veriff sought to move away from manual, spreadsheet-driven compliance management. They needed a solution that could automate these processes, enhance visibility into their security posture, and streamline how they demonstrate compliance to customers.

Their business needs led them to explore compliance automation solutions. After a positive early experience with Vanta they were curious to test other tools on the market. But those partnerships were ultimately unsuccessful—Veriff encountered issues with inaccurate control mapping functionality, failed integrations with other technology tools in their stack, subpar support, and a poor auditing experience that led to lots of confusion with auditors. After just one year using the other solution, Veriff’s team realized that “auditing was still totally manual work.”

Veriff also needed a more robust, reliable solution to meet growing compliance demands. Those needs—alongside positive memories from their prior partnership—led them right back to Vanta.  

“Maybe a different product worked out better for you. In our case, it turned out to be completely the opposite experience.”  

Viljar Bauman, Deputy CISO at Veriff

‍

THE SOLUTION

Demonstrating trust in the enterprise with Vanta

After switching back to Vanta, Veriff was immediately impressed again by the level of support they received—particularly the speed at which Vanta’s customer support team answered onboarding questions. Another key differentiator for Vanta was their commitment to continuous product improvement. Viljar Bauman, Deputy CISO of Veriff, appreciated how quickly the Vanta team incorporated user feedback. “After struggling with one integration, we said ‘Hey? What do you think about making this feature happen? One month later, it was happening. It was very good to see that Vanta doesn’t just want to scale in terms of sales—they actually want to improve the product,” Viljar says.  

Vanta’s solution automated what was previously a manual, Excel-sheet-based process for tracking compliance. This shift to automation replaced spreadsheets with more efficient processes, leading to a more productive compliance team. 

Vanta’s 375+ integrations were also crucial for Veriff. The AWS integration, in particular,  was useful as it automatically collected information from AWS and indicated compliance with specific controls, while also identifying any misconfigurations. This saves the Veriff team from having to go through DevOps each time to complete specific inquiry requests. 

“With Vanta, we have an integration in place that will collect everything from AWS and show in our dashboards that we are corresponding to those controls. It also gathers intelligence from AWS to say if something is misconfigured there...Vanta helps gather all this intelligence automatically into one place.”

Viljar Bauman, Deputy CISO at Veriff

Similarly, the BambooHR integration empowers Vanta to seamlessly track crucial employee data, such as security training completion and the various stages of onboarding and offboarding. This automated data flow means Vanta can verify access removal, account linking, and other critical security tasks without requiring manual input.

Beyond automation and integrations, a Vanta Trust Center proved to be particularly helpful to Veriff as they sell to larger and more established companies. The Trust Center allows Veriff to transparently showcase their security posture to potential customers, providing assurance that Veriff can properly protect information and data and is a trustworthy partner. This public-facing site acts as an excellent verification of their security posture, directly supporting their sales efforts by exposing this strong posture to thousands of enterprises.

‍

THE IMPACT

Operational efficiency and accelerated business growth 

The implementation of Vanta had a transformative impact on Veriff's security and compliance operations, delivering tangible ROI and enhancing their business capabilities. A significant benefit was the time saved from manual evidence collection, which previously consumed a full day each week. With Vanta, this process is now automatic, allowing Veriff's teams to reallocate that time to more strategic initiatives. Furthermore, Vanta's comprehensive coverage across multiple frameworks, including ISO 27001 and SOC 2, helps Veriff identify overlapping controls and avoid duplicative work.

Vanta powerfully highlights Veriff's robust security posture, consistently demonstrating the company’s strengths with an exceptionally high control pass rate. This high level of control adherence, coupled with Vanta's continuous visibility, provides immense confidence before, during, and after audits. 

The platform has also been instrumental in building and demonstrating trust with their extensive enterprise customer base. The Trust Center, described by Viljar as "the cherry on top of the product when it was launched," is a vital tool for Veriff's sales team, assuring new and existing customers of their transparent and robust security. This external validation of their security posture is invaluable in fostering trust and securing new business.

Looking ahead, Veriff is exploring plans to pursue additional security frameworks (e.g. ISO 42001, NIST, DORA etc.), a testament to their continuous commitment to advanced security in the age of AI. With Vanta's expertise and unmatched program visibility, Veriff can understand precisely how far they are from achieving compliance against this and other frameworks as the business evolves.

"Vanta gives us confidence when we are going into an audit. We already know that auditors are going to be happy with us because we are doing really well with our controls.” 

Viljar Bauman, Deputy CISO at Veriff

‍