New in Vanta | January 2025

This past month, the Vanta team launched new features to help you: 

• Streamline the policy approval process with multiple policy approvers 
• Ensure all information is up-to-date with a new documents experience
• Automate the vendor security review process by pulling documents from Trust Center
• Keep your documents up-to-date and retain analytics with document versions in Trust Center 
• Automate even more third-party systems with integrations with Opsbook and Astra Security

‍

Streamline the policy approval process with multiple approvers

As a part of their security and compliance program, all companies need to create policies and follow their internal process for approval, which includes bringing in the right people at the right time.

‍

To better support this, Vanta now offers the flexibility to add more than one approver to a policy. This includes the ability to create approval steps, where one or more people must first approve the policy before it moves on to the next level of approvers. If an approver makes changes to the policy anywhere along the way, they can designate whether they want to restart or continue the approval process. In order for a policy to be approved, all of the designated approvers must sign off. 

‍

‍

Ensure all information is up-to-date with a new documents experience

Security and compliance frameworks require gathering a variety of documents in order to prove that you are meeting obligations. Some document requests need more than one file, and in order to satisfy the requirement, all documents must be uploaded. If some, but not all, of the documents have been uploaded, then the document request has not yet been completed.

‍

With the new documents experience in Vanta, the status of your documents now reflects if you have completed the request or if more work is required. The test won’t pass until all files required for the document have been uploaded, and you’ll be alerted if any file associated with the document expires. 

‍

You can see the new documents experience here. 

‍

Automate the vendor security review process by pulling documents from public trust centers 

Take another step towards automating the evidence gathering process with your vendors who have a Vanta Trust Center. To accelerate the vendor security review process, we’ve created an automated and integrated experience for gathering evidence quickly and directly from a vendor’s Trust Center. 

‍

Whenever you need to gather evidence for a security review from a vendor that has a Trust Center, you’ll be able to import any of their public Trust Center documents directly from within Vanta Vendor Risk Management. You’ll no longer need to ask your vendor for this information. This removes multiple clicks, the tedious task of switching between browsers to search for, download, and upload documents as well as the need to engage the vendor for these documents. 

‍

‍

To learn more, check out this Help Center article.

‍

Keep your Trust Center documents up-to-date and retain analytics with document versions 

Trust Center centralizes information about an organization's data security, privacy practices and policies, and compliance with frameworks and regulations, ensuring buyers can easily self-serve the information they need when making a purchasing decision. 

‍

As your organizations’ security posture evolves, so should the information hosted on your Trust Center. Instead of deleting specific documents from your Trust Center in order to post a new version, you can now simply upload a new version in its place. This helps to retain the visitor analytics on the document over time and ensures uploading new versions doesn’t disrupt any workflows that may contain the document. Questionnaire Automation will also pull the updated information from the latest documentation into auto-generated responses. 

‍

If an update is made to a current policy in Vanta, you’ll get a notification that a new version is available, prompting you to publish the latest policy to your Trust Center with one click. This makes it easy to ensure that your latest policies are always reflected on your Trust Center page. 

‍

‍

Learn more about this feature in this Help Center article. 

‍

Integrate and automate with even more third-party systems, like Opsbook and Astra Security

In December, we introduced two new integrations—Opsbook and Astra Security. Customers using Opsbook to conduct tabletop exercises like disaster recovery, ransomware, and data breach scenarios can upload those documents to Vanta via the integration, centralizing proof of compliance. Customers using Astra Security for pentesting and application security can upload documents to Vanta via the integration to satisfy evidence requests.

‍

Explore all our integrations or tell us about others you’d like to see.

‍

Try it for yourself!

Log in to your Vanta account to try out these new features today. If you’re not a Vanta customer and want to learn more, request a demo.

As always, we welcome your feedback. Let us know what you think by reaching out to your Customer Success Manager and stay in the loop on Vanta news on LinkedIn.