Vanta has been a valuable platform helping us to automate our SOC 2 Type II audit process. Vanta provides a clear structure around control management, evidence collection, policy creation and renewal, and ongoing monitoring, which has led to many hours saved. Vanta has also been extremely helpful with automation and completion of client DDQs.

Vanta has a product with good potential - overall, there are definitely some benefits to implementing it. That said, there are still some notable immaturities and shortfalls in the product (some of which may seem surprising for a fully fledged GRC tool). It is certainly not (in my opinion) the absolute gamechanger that it is advertised/sold as, but if you review the product carefully against your needs and understand its limitations (and achieve an appropriate price) then it can still be a valuable tool. The support has been reasonably good overall. The initial pricing and early negotiations were extremely inflated, but after some hard pushing, we arrived at a more reasonable price point.