Established · Cybersecurity Compliance
Vanta
Vanta automates compliance work for SOC 2, ISO 27001, HIPAA, PCI DSS and GDPR, with security monitoring, evidence collection and an AI GRC agent. The company is remote-first, with offices in San Francisco, New York, Dublin, London and Sydney.
What it does
Compliance automation for SOC 2, HIPAA, ISO 27001, PCI and GDPR, continuous security monitoring, vendor risk, trust centre, GRC agent
Named customers
RampupcoverCarter Newell LawyersDuolingoSynthesiaClayPendoSnowflakeAtlassianSamsara
Rules covered
Recent news
- C5:2026 (German BSI cloud attestation) readiness support
- Introduces AI Governance (AI risk and compliance product)
Why it matters
Vanta raised a $150 million Series D led by Wellington Management in July 2025. In 2026 it launched an AI Governance product and added readiness support for Germany's BSI C5:2026 attestation, and it covers DORA, NIS2 and the EU AI Act.
