Vanta Logo
Vanta Logo
Platform
Products
Platform
Compliance
Get compliant quickly and painlessly with automation.
Continuous GRC
Join the modern way to GRC.
Personnel and Access
Easily control user access and permissions.
Risk Management
Proactively manage risk to drive smarter decisions.
Third Party Risk Management
Manage vendor onboarding and security reviews in one place.
Questionnaire Automation
Automate security questionnaire responses.
Trust Center
Showcase your compliance status and documentation.
Streamlined audits
Automate audit prep and evidence collection.
Customer Commitments
Centralize, track and act on every customer commitment.
AI Governance
Govern AI as fast as you adopt it.
Vanta AI
Automate compliance and uncover insights with AI.
Agentic Trust Platform
Build and prove trust from a single, unified platform.
Integrations
Automatically pull data from 400+ tools.
Vanta API
Build custom integrations and workflows.
NEW RELEASE
See what's new from
Vanta Delivers
Learn more
PRODUCTS
Compliance
Get compliant quickly and painlessly with automation.
Personnel and Access
Easily control user access and permissions.
Risk Management
Proactively manage risk to drive smarter decisions.
Third Party Risk Management
Manage vendor onboarding and security reviews in one place.
Questionnaire Automation
Automate security questionnaire responses.
Trust Center
Showcase your compliance status and documentation.
Streamlined audits
Automate audit prep and evidence collection.
Customer Commitments
Centralize, track and act on every customer commitment.
AI Governance
Govern AI as fast as you adopt it.
Vanta AI
Automate compliance and uncover insights with AI.
PLATFORM
See an interactive demo
Agentic Trust Platform
Build and prove trust from a single, unified platform.
Integrations
Automatically pull data from [integrations_count] tools.
Vanta API
Build custom integrations and workflows.
Solutions
Size
Industry
Frameworks
Find a partner
Startups
Automate compliance so you can keep building.
Mid-market
Expand your security and compliance program as you scale.
Enterprise
Gain a unified view of your compliance, security, and trust workflows.
Vanta is the one-stop shop that helps us scale as a business. The future of Vanta is an exciting one for us.
Paul Yoo
Head of Platform Security
Ramp logo
Healthcare
Protect sensitive info more easily by automating HIPAA and HITRUST.
Government
Proactively monitor emerging threats and automate security workflows.
Fintech
Stay ahead of evolving regulations and keep financial data secure with ease.
Vanta has saved us hundreds of hours and well over six figures in potential lost deals or added headcount.
Everett Berry
GTM Engineering
Clay logo
SOC 2
ISO 27001
GDPR
HIPAA
HITRUST
USDP
NIST AI Risk Management Framework
ISO 42001
Custom frameworks
All frameworks
Service provider directory
Discover world-class service providers.
Auditor directory
Connect with top compliance auditors.
AWS
Continuous compliance for teams building with AWS
Size
Startups
Automate compliance so you can keep building.
Mid-market
Expand your security and compliance program as you scale.
Enterprise
Gain a unified view of your compliance, security, and trust workflows.
“
Vanta just worked out of the box. It pulled in the right data and gave us a solid foundation for a secure, audit-ready program.”
Cursor logo
Industry
Healthcare
Protect sensitive info more easily by automating HIPAA and HITRUST.
Government
Proactively monitor emerging threats and automate security workflows.
Fintech
Stay ahead of evolving regulations and keep financial data secure with ease.
How Ramp keeps its global financial operations platform compliant with Vanta
Ramp logo
Frameworks
SOC 2
ISO 27001
GDPR
HIPAA
HITRUST
USDP
NIST AI Risk Management Framework
ISO 42001
Custom frameworks
All frameworks
Find a partner
Service provider directory
Discover world-class service providers.
Auditor directory
Connect with top compliance auditors.
AWS
Continuous compliance for teams building with AWS
Partners
Partner program overview
Set yourself apart with Vanta.
Service providers
Build, scale, and grow your business.
Auditors
Elevate your clients' experiences.
Partner program overview
Set yourself apart with Vanta.
Service providers
Build, scale, and grow your business.
Auditors
Elevate your clients' experiences.
We don’t partner with anyone else. We’ve gone all in on Vanta.
Steve Spence
CEO
Cognisys Logo
Resources
Customers
Company
Compliance resources
All resources
Customer stories
Hear from leaders who trust Vanta
Help center
Find the help you need to get started with Vanta.
Vanta Academy
Deepen your security knowledge and learn new skills.
Vanta Community
Connect with fellow Vanta users and security experts.
Instructor-led training
Live, interactive training to help you master the product and progress quickly.
About
Learn more about Vanta.
Security
Understand Vanta's security and compliance strategy.
Press
See the latest in Vanta news and press releases.
Careers
Join our team!
SOC 2
Learn everything you need to know about SOC 2.
Trust
Get the guide to all things trust.
HIPAA
Get the guide for HIPAA compliance.
TPRM
Implement and optimize your TPRM program.
GRC
Implement a GRC program with ease.
ISO 27001
Get the guide to ISO 27001 certification.
ISO 42001
Get your resource for ISO 42001 certification.
GDPR
Get the guide to GDPR compliance.
CMMC
Hear from leaders who trust Vanta
Cyber essentials
Get the guide to Cyber Essentials certification.
HITRUST
Get the guide to HITRUST certification.
FedRAMP
Get the guide to FedRAMP compliance.
All resources
Find all your security and compliance content here.
Blog
Explore security trends and thought leadership.
Guides and reports
Find ebooks, checklists, whitepapers, and more.
Events
Watch on-demand webinars on trending security topics.
Videos
Watch videos on security trends and expert insights
Product updates
See what's new across the Vanta platform.
Vanta graphic with tagline 'AI can run your GRC program. Build anything, anywhere.' featuring photos and titles of Adam Eickhoff, Justin Pagano, and Dongting Yu.
Register for the event ->
NEW RELEASE
See what's new from
Vanta Delivers
Learn more
Customers
Customer stories
Hear from leaders who trust Vanta
Help center
Find the help you need to get started with Vanta.
Vanta Academy
Deepen your security knowledge and learn new skills.
Community
Connect with fellow Vanta users and security experts.
Instructor-led training
Live, interactive training to help you master the product and progress quickly.
Product updates
Learn what's new on the Vanta Platform.
Company
About
Learn more about Vanta.
Security
Understand Vanta's security and compliance strategy.
Press
See the latest in Vanta news and press releases.
Careers
Join our team!
Compliance resources
SOC 2
Learn everything you need to know about SOC 2.
Trust
Get the guide to all things trust.
HIPAA
Get the guide for HIPAA compliance.
TPRM
Implement and optimize your TPRM program.
CMMC
Learn everything to need to know about CMMC.
GRC
Implement a GRC program with ease.
ISO 27001
Get the guide to ISO 27001 certification.
ISO 42001
Get your resource for ISO 42001 certification.
GDPR
Get the guide to GDPR compliance.
Cyber essentials
Get the guide to Cyber Essentials certification.
HITRUST
Get the guide to HITRUST certification.
FedRAMP
Get the guide to FedRAMP compliance.
All resources
All resources
Find all your security and compliance content here.
Blog
Explore security trends and thought leadership.
Guides and reports
Find ebooks, checklists, whitepapers, and more.
Events
Watch webinars and videos on trending security topics.
Product updates
See what's new across the Vanta platform.
Plans
Log inLog in
Get a demo
Get a demo

Prove your AI agents are truly safe

Cover the unique risks traditional audits miss. With Agentic Trust Controls, effortlessly extend your current compliance program, put evidence collection on autopilot, and assure buyers your agents are safe.

Request a demo
Dashboard interface for Agentic Trust Controls showing evidence completion at 81% with progress bars for tests and documents, control status at 75%, and total evidence overlap at 89% with a Venn diagram. The dashboard includes sections for audit and assurance steps, relevant industries and geographies, typical implementation scope, and benefits of compliance. Below are features listed with check marks: 400+ integrations, automated tests, policy templates, control monitoring, and AI remediation.

The Agentic Trust Platform powering security for over [customer_count] customers

Jasper logo
Pendo logo
Autodesk logo
NinjaOne logo
Ramp logo

Easily catch what standard audits miss

Effortlessly extend your compliance program with controls, policies, and tests for agent identity, tool use, memory, delegation, and more—risks traditional compliance leaves exposed.

Request a demo
Dashboard showing completion status of controls with overall 81% completion, test at 65%, and document at 90%. Sections include Agent Identity & Authority with 6 of 8 controls OK, showing verifiable agent identity control AID-01 with evidence readiness 1 of 1 and owner named Elena, and Tool Use & Execution with 3 of 5 controls OK.

Adapt controls to how you actually work

Secure your agents without changing how you work. Pick a developer baseline for built agents, a user baseline for deployed agents, or both—with role-specific controls spanning identity, guardrails, vendors, and training.

Request a demo
Screenshot of Vanta's Agentic Trust Controls dashboard for Acme Co showing 81% controls completion with automated tests at 65% and documents at 90%, and a popup window asking to change the framework's control set with options Developer (checked) and User.

Automate compliance from day one

Stay continuously compliant without the manual work. Vanta runs [tests_count] automated tests to review evidence, flag gaps, and suggest fixes, integrating with [integrations_count] tools, including AI platforms like OpenAI and Anthropic.

Request a demo
Diagram showing Agentic Trust Controls at the center connected to six technology logos with test status labels: Cloudflare and Google Cloud show 'All tests passing,' HashiCorp and AWS show 'Needs remediation,' Datadog shows '3/4 tests passing,' and GitHub shows '2/3 tests passing.'
Dashboard showing completion status of controls with overall 81% completion, test at 65%, and document at 90%. Sections include Agent Identity & Authority with 6 of 8 controls OK, showing verifiable agent identity control AID-01 with evidence readiness 1 of 1 and owner named Elena, and Tool Use & Execution with 3 of 5 controls OK.
Screenshot of Vanta's Agentic Trust Controls dashboard for Acme Co showing 81% controls completion with automated tests at 65% and documents at 90%, and a popup window asking to change the framework's control set with options Developer (checked) and User.
Diagram showing Agentic Trust Controls at the center connected to six technology logos with test status labels: Cloudflare and Google Cloud show 'All tests passing,' HashiCorp and AWS show 'Needs remediation,' Datadog shows '3/4 tests passing,' and GitHub shows '2/3 tests passing.'

Additional features

Request a demo

Centralized control management

Track control ownership, evidence, and status across all 12 risk domains in one place.

Continuous monitoring

Vanta tests your controls automatically and flags gaps as they appear, so you're not re-checking agent posture by hand.

Agent policy management

Draft, update, and maintain agent policies with built-in templates and the Vanta Agent, then track employee acknowledgment automatically.

Risk management

Identify, assess, and reduce agent risk with tailored scenarios, mapped controls, and continuous monitoring across all 12 risk domains.

Trust Center

Share your agent control status, policies, and readiness artifacts with buyers during security reviews.

AI-powered compliance

Use the Vanta Agent to flag evidence gaps, map controls, and speed up remediation across your agent program.

A-lign logoSchellman logoFrazier & Deeter logoInsight Assurance logoPrescient Security logo

“

When organizations leverage Vanta for automated compliance, they reduce their audit completion times by 50%.”

Andrew Steioff headshot
Andrew Steioff
Global Strategic Alliances,
A-LIGN
Read the case study

“

When organizations leverage Vanta for automated compliance, they reduce their audit completion times by 50%.”

Andrew Steioff headshot
Andrew Steioff
Global Strategic Alliances,
A-LIGN
Read the case study

“

When organizations leverage Vanta for automated compliance, they reduce their audit completion times by 50%.”

Andrew Steioff headshot
Andrew Steioff
Global Strategic Alliances,
A-LIGN
Read the case study

“

When organizations leverage Vanta for automated compliance, they reduce their audit completion times by 50%.”

Andrew Steioff headshot
Andrew Steioff
Global Strategic Alliances,
A-LIGN
Read the case study

“

When organizations leverage Vanta for automated compliance, they reduce their audit completion times by 50%.”

Andrew Steioff headshot
Andrew Steioff
Global Strategic Alliances,
A-LIGN
Read the case study

“

Vanta is very forward-looking, as to what they believe their customers’ needs are going to be—the addition of frameworks, different features—it keeps pace with our growth.”

Bob Maley
Bob Maley
Chief Security Officer, Black Kite
Read the case study

Learn more about Agentic Trust Controls

AI Governance Checklist cover image

AI Governance Checklist

Use this 6-step checklist to build a scalable, compliant AI governance program.

Read more
AI Governance Checklist
AI Governance Checklist
EU AI Act Checklist cover image

The EU AI Act Checklist

Get our free checklist to understand what’s required under the EU’s AI Act, how ISO 42001 fits in, and how compliance builds trust—and a competitive advantage.

Read more
The EU AI Act Checklist
The EU AI Act Checklist
ISO 42001 cover image

ISO 42001 Compliance Checklist

The ISO 42001 compliance checklist helps to lay the foundation for what your organization should expect when working towards certification.

Read more
ISO 42001 Compliance Checklist
ISO 42001 Compliance Checklist

FAQ

What are Agentic Trust Controls?

Agentic Trust Controls (ATC) are a control set for agentic AI risk: 65 controls across 12 domains, delivered as two baselines. They map to ISO 27001, ISO 42001, AIUC-1, CSA AICM, MITRE ATLAS, NIST AI RMF, and OWASP Top 10. Agentic Trust Controls started as an open source project with over 350 contributors in its first month. Now, we've built these controls into Vanta and introduced it as a framework.

What risks do the 12 domains cover?

The 12 domains cover agent identity and authority (AID), tool use and action execution (TUE), reasoning and instruction integrity (RII), memory and state integrity (MEM), multi-agent systems and delegation (MAS), human oversight under autonomy (HOA), runtime behavioral monitoring (RBM), supply chain and component provenance (SCP), adversarial robustness and testing (ADV), output integrity and anti-fabrication (OUT), resource and cost abuse (RES), and agentic governance and accountability (GOV).

How is this different from AIUC-1, the CSA AI Controls Matrix, or OWASP guidance?

AIUC-1 is a standalone auditable standard. The CSA AI Controls Matrix is broader, covering AI systems generally. OWASP offers technical guidance rather than an audit-ready baseline. ATC layers agent-specific controls onto frameworks you already hold.

How do ATC controls get audited?

You declare the ATC controls in scope for your next ISO 27001 or ISO 42001 audit. Because they sit inside a framework your auditor already assesses, the same audit produces third-party evidence for them.

Is this a new framework, or does it extend the one I already have?

Both. Agentic Trust Controls is a standalone framework, and the controls also layer onto your existing ISO 27001 or ISO 42001 categories, so there is no separate control set to manage. The same baseline can map to different frameworks, so you are not locked in.

Which baseline applies to me—build or deploy?

If you build agentic systems, use the developer baseline—43 controls, activated within ISO 42001. If you deploy agents built by others, use the user baseline—22 controls, within ISO 27001.

Get compliant and build trust—fast

Request a demo
G2 Badge Milestone 'Users Love Us'
Product
Automated ComplianceContinuous GRCThird Party Risk ManagementStreamlined Audits
Questionnaire AutomationRisk ManagementTrust CenterPersonnel and AccessCustomer CommitmentsAI GovernanceVanta AI
Frameworks
SOC 2ISO 27001GDPRHIPAAHITRUSTUSDPNIST AI RMFISO 42001CMMC
CJISNIS2DORACPS 234EU AI ActEssential EightCyber EssentialsFedRAMPCRICustom frameworksAdditional frameworks
Platform
Vanta integrationsVanta AI ✨Vanta APIWhat's New
Solutions
StartupMid-marketEnterprise
Customers
Customer storiesRelease notes
Become a partner
Partner program overviewService providersAuditors
Find a partner
Service provider directoryAuditor directoryIntegrationsAWS
Resources
All resourcesSOC 2 collectionISO 27001 collectionISO 42001 collectionGRC collectionTPRM collectionTrust collectionHITRUST collectionCyber Essentials collectionCMMC collectionHIPAA collectionGDPR collectionFedRAMP collection
Help centerVanta AcademyVanta CommunityVanta for developers
Articles
SOC 2 complianceSOC 2 checklistISO 27001 certification
ISO 27001 documentationHIPAA checklistGDPR checklist
Company
About
Careers
HIRING
PressSecuritySystem statusSupport statusTrust center
Linkedin iconFacebook iconTwitter (X) iconYoutube icon
Legal CenterTermsPrivacy
Do Not Sell or Share My Personal Information
Modern Slavery Act Statement
© 2026 Vanta. All rights reserved
SOC 2 Type 2 Compliance Badge for VantaISO 27001 Compliance Badge for VantaISO 42001 badgeGDPR Compliance Badge for Vanta
Request a demo to get started