I like how Vanta helps us with SOC 2 compliance by automating the process and providing proactive notifications about what we need to do to stay compliant. They make it easy to track necessary forms and to build out templates, which simplifies everything compared to doing it manually. The support I received was excellent, with answers provided in plain, step-by-step language. I also appreciate their service and the notifications we get as they help my company stay in good standing.

The automated tests are the biggest win. Once we connected AWS, GitHub and Google Workspace, Vanta continuously checks things like MFA, access reviews and key rotation, and within a couple of months we went from a blank slate to over 95% of automated tests passing. The policy templates let a small team with no dedicated compliance person get almost every SOC 2 policy drafted, reviewed and approved quickly. I also like that the risk register, vendor reviews and evidence requests all live in one place, and that the AI check on uploaded documents tells you right away whether something has gaps before you submit it. The onboarding check-ins with clear readiness criteria ahead of our audit date kept us on track.

I really like the user experience Vanta provides, and it feels seamless with so many integrations available. The trust center is great for centralizing everything, and I really appreciate how I can share things with my remediation agency. It makes managing compliance for ISO 27001, GDPR, SOC 1, and SOC 2 a lot easier. I save time and stay compliant. I also find the setup to be very easy, and having all my tools, like Google, Notion, and GitHub, integrated into my stack is incredibly useful.