May 26, 2026

New in Vanta | May 2026

Written by

Amulya Uppala

Reviewed by

Accelerating security solutions for small businesses
‍

Tagore offers strategic services to small businesses.

A partnership that can scale
‍

Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate.

Standing out from competitors
‍

Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

This past month, the Vanta team launched new features to help you:

‍

Get compliant with ISO 22301, the international standard for business continuity
Cut through access review fatigue with AI-powered recommendations
Automatically deprovision Zoom and Figma accounts during offboarding
Track your SPRS Score directly in Vanta for CMMC Level 2 compliance
Sync contracts into Customer Commitments directly from SharePoint

‍

New framework: ISO 22301

‍

Vanta now supports ISO 22301, the international standard for Business Continuity Management Systems (BCMS). ISO 22301 helps organizations prepare for, respond to, and recover from disruptive incidents (from cyberattacks to natural disasters) with a structured, auditable framework.

‍

With Vanta's support for ISO 22301, customers can map existing controls, track compliance against the standard's requirements, and streamline evidence collection, all within the same platform they use for their other frameworks.

‍

Available to all customers.

‍

AI recommendations for access reviews

‍

Access reviews are supposed to surface risk, but when reviewers are staring at thousands of accounts, fatigue sets in fast and the accounts that actually need attention get lost in the noise.

‍

Vanta now generates an AI recommendation for every account at the start of a review: Approve, Deny, or Needs Review. Each recommendation surfaces the signals behind it (employment status, last login, access control policy, previous decisions, prior access requests) so reviewers understand why an account was flagged, not just what the verdict is.

‍

The result: Low-risk accounts can be bulk-approved in seconds, freeing reviewers to spend their time on the accounts that actually matter. This is the first release in a broader AI-powered access review experience. More coming soon!

‍

Available in preview to all customers with access reviews.

‍

Automatic deprovisioning for Zoom and Figma

‍

When someone leaves your organization, their accounts need to be shut down immediately. Vanta has long helped teams see what access terminated employees had and track remediation through tasks and admin notifications. Now Vanta can pull the trigger automatically.

‍

Zoom and Figma now support automatic deprovisioning through Vanta's offboarding workflow, joining existing integrations like Calendly and OpenAI. When a team member is offboarded in Vanta:

‍

Zoom: The user is deactivated immediately. They can no longer sign in, their license is freed, and their data (meetings, recordings, chats) stays intact.
Figma: The user is deactivated via Figma's SCIM API, removing org access while preserving their data.

‍

Available with Access Management.

‍

SPRS score tracking for CMMC Level 2

For organizations pursuing CMMC Level 2 certification, the Supplier Performance Risk System (SPRS) Score is a fundamental requirement: a self-assessed score submitted to the DoD that reflects your current compliance posture against all 110 NIST SP 800-171 security requirements.

‍

CMMC Level 2 customers can now track their SPRS Score automatically, directly inside Vanta. The score is calculated at the requirement level and updates in real time as you mark controls as Implemented or Not Applicable. When you hit 110 points, Vanta surfaces the guidance you need to complete your self-assessment and submit to the SPRS portal.

‍

Defense contractors using Vanta to manage their CMMC programs can now handle SPRS Score tracking end-to-end without leaving the platform — further strengthening Vanta's position as the leading compliance automation solution for government and defense-adjacent companies.

‍

Included with CMMC framework purchase. Available on Vanta Government Cloud (app.vanta-gov.com) and commercial.

‍

SharePoint integration for Customer Commitments

‍

Keeping your Customer Commitments inventory complete requires that contracts actually make it into the system. Manual uploads work, but they don't scale. Every missed upload is a commitment that goes untracked.

‍

Customers can now use SharePoint as a contract source for Customer Commitments. Connect your existing SharePoint environment directly from the Commitments settings page, and Vanta will continuously and automatically sync your contracts. Because this builds on Vanta's existing SharePoint connection, there's no additional OAuth setup required.

‍

The result: A scalable, low-maintenance way to keep your commitments inventory up to date, without the operational overhead of manual uploads or custom API workflows.

‍

Available with the Customer Commitments add-on.

‍

Try it for yourself!

Log in to your Vanta account to try out these new features today. If you’re not a Vanta customer and want to learn more, request a demo.

As always, we welcome your feedback. Let us know what you think by reaching out to your Customer Success Manager, and stay in the loop on Vanta news on LinkedIn.

Access Review Stage	Content / Functionality
Across all stages	Easily create and save a new access review at a point in time View detailed audit evidence of historical access reviews
Setup access review procedures	Define a global access review procedure that stakeholders can follow, ensuring consistency and mitigation of human error in reviews Set your access review frequency (monthly, quarterly, etc.) and working period/deadlines
Consolidate account access data from systems	Integrate systems using dozens of pre-built integrations, or “connectors”. System account and HRIS data is pulled into Vanta. Upcoming integrations include Zoom and Intercom (account access), and Personio (HRIS) Upload access files from non-integrated systems View and select systems in-scope for the review
Review, approve, and deny user access	Select the appropriate systems reviewer and due date Get automatic notifications and reminders to systems reviewer of deadlines Automatic flagging of “risky” employee accounts that have been terminated or switched departments Intuitive interface to see all accounts with access, account accept/deny buttons, and notes section Track progress of individual systems access reviews and see accounts that need to be removed or have access modified Bulk sort, filter, and alter accounts based on account roles and employee title
Assign remediation tasks to system owners	Built-in remediation workflow for reviewers to request access changes and for admin to view and manage requests Optional task tracker integration to create tickets for any access changes and provide visibility to the status of tickets and remediation
Verify changes to access	Focused view of accounts flagged for access changes for easy tracking and management Automated evidence of remediation completion displayed for integrated systems Manual evidence of remediation can be uploaded for non-integrated systems
Report and re-evaluate results	Auditor can log into Vanta to see history of all completed access reviews Internals can see status of reviews in progress and also historical review detail