Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

Merchant

A merchant is defined as any entity that accepts payment cards showing the logos of any of the five members of PCI Security Standards Council (which includes Visa, Mastercard, American Express, Discover, and JCB) as payment for goods and/or services.

Additional resources you might like:

Compliance
Blog
What is Enterprise Risk Management (ERM)? Everything you need to know

Explore modern enterprise risk management (ERM) and what makes it a strategic business discipline

GRC
Events
What is GRC Engineering? A fresh take on an old space

Join Lovable and Vanta for an exclusive virtual event on what modern GRC actually looks like when it is done right.

GRC
Blog
Building a risk taxonomy: A guide to classifying risks

Learn how to classify and prioritize risks using a structured risk taxonomy.

Additional resources you might like:

Compliance
Blog
What is Enterprise Risk Management (ERM)? Everything you need to know

Explore modern enterprise risk management (ERM) and what makes it a strategic business discipline

GRC
Events
What is GRC Engineering? A fresh take on an old space

Join Lovable and Vanta for an exclusive virtual event on what modern GRC actually looks like when it is done right.

GRC
Blog
Building a risk taxonomy: A guide to classifying risks

Learn how to classify and prioritize risks using a structured risk taxonomy.

GRC
Blog
Understanding inherent risk vs residual risk—and why the gap matters

Learn about inherent and residual risk beyond definitions and see how they influence decisions.

Compliance
Events
Agentic compliance in action with Vanta and Claude

Register to learn how Vanta's MCP Server brings your compliance program directly into Claude.

GRC
Blog
How to write a risk appetite statement in 5 steps

A risk appetite statement isn’t useful unless it drives decisions. Learn how to create one with clear thresholds that help align action with your risk appetite.

GRC
Blog
Risk appetite and risk tolerance: What’s the difference?

Learn what risk appetite and risk tolerance mean, how they differ and formalize them at scale.

Comparisons and reviews
Video
Why enterprise leaders choose Vanta over Drata to prove and manage trust

Learn how Vanta is uniquely equipped to meet the needs of large, complex organizations.

Compliance
Blog
The 9 compliance risks hiding in your organization (and how to fix them)

Learn what compliance risk is and what its most common types are. Find out how to assess and manage your compliance risk and best practices to follow.