Explore sessions

Vanta leadership opens the day with the state of the partnership—where we're investing, what's new for partners, and what it means for your business—so you walk into every session after with the bigger picture in hand.

Build and publish a Trust Center live in this session, configuring branding, document access, and automated NDA gating, so you leave equipped to help mid-market and upmarket clients turn their compliance into a proactive sales and security tool instead of a static page.

Set up a real vendor review workflow in Vanta—importing vendors, applying risk tiers, and launching an automated assessment—so you can help downmarket and mid-market clients replace fragmented, email-driven vendor reviews with a structured TPRM program that doesn't require a dedicated team to run.

Configure workspaces, scoping rules, and access reviews against a real org structure during the session, so you leave able to help enterprise clients map Vanta to how their business actually operates—connecting the right people, systems, and business units so security scales without adding operational overhead.

Connect to the Vanta MCP and build working agentic workflows during the session—querying failing tests, triaging remediation, and pushing fixes to Jira—so you leave able to help upmarket and enterprise clients close integration gaps, automate engineering remediation, and unlock agentic compliance workflows in tools like Claude Code and Cursor.

Build and publish a Trust Center live in this session, configuring branding, document access, and automated NDA gating, so you leave equipped to help mid-market and upmarket clients turn their compliance into a proactive sales and security tool instead of a static page.

Set up a real vendor review workflow in Vanta—importing vendors, applying risk tiers, and launching an automated assessment—so you can help downmarket and mid-market clients replace fragmented, email-driven vendor reviews with a structured TPRM program that doesn't require a dedicated team to run.

Configure workspaces, scoping rules, and access reviews against a real org structure during the session, so you leave able to help enterprise clients map Vanta to how their business actually operates—connecting the right people, systems, and business units so security scales without adding operational overhead.

Connect to the Vanta MCP and build working agentic workflows during the session—querying failing tests, triaging remediation, and pushing fixes to Jira—so you leave able to help upmarket and enterprise clients close integration gaps, automate engineering remediation, and unlock agentic compliance workflows in tools like Claude Code and Cursor.

Join us for the official launch of Vanta's new Partner Program, including the investments we're making in the infrastructure and support behind it, so you're the first to know what's changing and what it means for your business.

A candid conversation with industry experts on where compliance and security are headed next, and what it means for you as a partner in the room.

An open floor with Vanta's executive team—ask about the partner program, the product roadmap, or where things are headed next.

Vanta leadership closes out the day with final thoughts and what's next for the partnership, sending you off with the big picture in hand.

Wind down after a full day of sessions with drinks and light bites, connecting with fellow partners and the Vanta team as the partner summit wraps.

Build and publish your Trust Center live in this session, configuring branding, document access, and automated NDA gating so you leave with a working page that accelerates security reviews instead of stalling them.

Set up a real vendor review workflow in your own Vanta instance—importing vendors, applying risk tiers, and launching an automated assessment—to replace email-chasing with a repeatable program no dedicated team is required to run.

Configure workspaces, scoping rules, and access reviews against your actual org structure during the session, so you walk out with Vanta mapped to how your business really operates rather than a generic default.

Connect to Vanta MCP and build working agentic workflows during the session—query failing tests, triage remediation, and push fixes to Jira—so compliance runs inside your engineering tooling by the time you leave.

Build and publish your Trust Center live in this session, configuring branding, document access, and automated NDA gating so you leave with a working page that accelerates security reviews instead of stalling them.

Set up a real vendor review workflow in your own Vanta instance—importing vendors, applying risk tiers, and launching an automated assessment—to replace email-chasing with a repeatable program no dedicated team is required to run.

Configure workspaces, scoping rules, and access reviews against your actual org structure during the session, so you walk out with Vanta mapped to how your business really operates rather than a generic default.

Connect to Vanta MCP and build working agentic workflows during the session—query failing tests, triage remediation, and push fixes to Jira—so compliance runs inside your engineering tooling by the time you leave.

Join us for the official kickoff reception — grab your badge, enjoy food and drinks, and start networking before the conference officially begins tomorrow!

Everyone is writing an AI governance policy. Far fewer have one that actually works. Two practitioners who've built AI governance programs from scratch share the five decisions that made the biggest difference: what they'd do again, what they'd skip, and where they got it wrong the first time. Bring your questions; most of the session is yours.

The best insight at any conference usually happens in the hallway, not on stage. This session moves it into the room. A moderator-guided discussion turns the audience into the panel, surfacing how peers are actually solving the problems everyone is quietly wrestling with. Come with a question you haven't been able to answer — you'll likely leave with three ways others have solved it.

Most GRC problems get talked about at conferences. Here, you'll build a solution to one. Ayoub from Lovable and Justin from Vanta open with the GRC engineering problems worth solving right now, then attendees break into groups of 3–6 to tackle one of three universal pain points using Vanta's MCP, Lovable, or whatever else you reach for. No engineering background required, just a willingness to build. Space limited to 75 attendees.

Should you govern the AI your company is adopting, or use AI to fix the governance program you already have? Most teams are trying to do both and making slow progress on each. Two sharp voices take opposing sides on this chicken-and-egg problem, arguing for where a resource-constrained team should actually place its bets. Expect strong opinions and a clear takeaways

Every GRC program passes the audit. Only some become something the business genuinely relies on. Three GRC leaders pull back the curtain on the decisions, habits, and unconventional moves that transformed their programs and their careers. Less theory, more what they actually did differently.

Shake off the post-lunch lull with David Kwong — magician, mentalist, and New York Times crossword constructor. Expect sleight of hand, wordplay, and a few puzzles you'll be solving together, whether you meant to or not.

AI risk conversations tend to swing between hype and hand-waving. This fireside chat cuts through both, with practitioners discussing where AI risk is genuinely heading — from novel vulnerability discovery to failure modes that don't map to any existing control framework. The focus is practical: what GRC teams should start building now to stay ahead of risks that haven't fully arrived yet.

Some of the biggest risks facing your company don't have a framework, a control mapping, or a precedent to point to. Seasoned risk practitioners share how they make defensible decisions in that gap — how they scope the unknown, document their reasoning, and hold the line when leadership pushes back. Short, practical playbooks followed by open Q&A.

The Vanta Agent isn't a roadmap item, rather teams are running real work through it now. This hands-on session walks through exactly how, step by step, with the specific workflows customers have handed off and the ones they've deliberately kept human. You'll leave knowing where to point it first in your own program.

In a market where every company claims to be AI-powered, product differentiation gets copied in a quarter. Trust doesn't. This session makes the case that the companies winning enterprise deals aren't the ones with the best models — they're the ones whose customers believe them. A practitioner walks through how to build trust as a durable competitive advantage rather than a cost center.

The GRC role is being rewritten in real time by AI, automation, and rising executive expectations. Hiring managers and senior practitioners discuss where the job is heading, which skills will separate good from great, and what to start building now. If you're thinking about your next move — or the next five years — this is the session to sit in on.

What happens when a GRC team gets programmatic access to their own compliance data? A Vanta customer walks through an application they built on the MCP: why they built it, how it came together, and the measurable impact on their controls and their team's time. A candid look at what's possible when GRC starts building instead of just buying.

Grab a coffee, recharge, and get ready — because the closing keynote is coming up next, and you won't want to miss it.

The sessions are done, but the night isn't over. Join us for one last round of drinks, food, and conversation before we all head our separate ways. Trade contact info, swap takeaways from the day, and celebrate a great conference well spent.