Jira integration, rebuilt: you choose what Vanta can do The Jira integration has been rebuilt around what you want from it, instead of one access level for everything. What’s new:

Syncs are also faster and more reliable. Your Jira, your rules. Some photos in thread 🧵 --- Availability: Available today for customers connecting Jira for the first time. Existing Jira-connected customers will will see this as a progressive rollout across the coming weeks, with no action required.

note the highlighted statement

Not sure if this is the right place to post this question, but here goes: Recently GitHub changed some of their data storage profiles and we started seeing errors coming out of Vanta stating that older PRs previously reviewed/approved/merged are now showing up as "unapproved". Has anyone else seen this:

Connect DocuSign to Customer Commitments Your executed agreements already live in DocuSign, so there’s no reason to upload them again by hand. Now, connect your DocuSign account directly to Vanta, and eligible contracts flow into the Customer Commitments processing you already use, ready to extract, organize, and analyze. You can see how it’s configured, check what was ingested, and get clear failure handling when something goes wrong, so you know what to fix. Beautiful. --- Availability: Customer Commitments customers

15 new automated tests for Azure and Azure Government More of your Azure environment is now covered by continuous monitoring. Fifteen new automated tests span network security, data protection, logging and auditing, application security, threat detection, and operational resilience, across services including Firewall, SQL Database, App Service, Storage, and Microsoft Defender. They cover both the Azure and Azure Government integrations and their compliance frameworks, so you see compliance gaps sooner and catch regressions earlier. --- Availability: Across all plans, where Azure integration is used

A weekly digest of overdue documents, on your schedule Chasing document owners one by one is nobody’s favorite job. The new Evidence Tasks Report, a custom agent template, builds a weekly digest of every document that’s overdue or due soon, with links, owners, due dates, status, and suggested next steps. It runs on the schedule you choose, so compliance leads can follow up without tracking anything by hand. Beautiful! Your follow-up list, ready when you are. --- Availability: Across plans with AI opt-in/custom agents enabled

Im good for now but I'm sure I'll be back here in a panic 🚨 at some point in the future, but seriously it is a better description name

👀 You may have noticed a little name change around here… Hello GRC. GRC-World is now GRC. A little less “GRC theme park,” a little more “here’s exactly where to ask your question.” The idea is simple: if you have a GRC question, this is the place to ask it, and I’m here to help. I’m Kareem, and I specialize in GRC, Identity Governance, and AI Governance. Whether you’re untangling a framework requirement, preparing for an audit, sorting out access reviews, or figuring out AI governance, I enjoy working through real problems with you. Drop your question here and tag me, Kareem M.. Big questions, small questions, “I feel like I should already know this” questions—all welcome. What’s been keeping you and your risk register up at night? 👇

Automate vendor intake with the Vanta Agent When a vendor request lands in your inbox, someone has to research the vendor, size up the risk, and scope the right assessments. Now the Vanta Agent can run that intake for you, using the context you’ve set in TPRM settings and your custom agent, facts from public sources, and your answers when it needs a human decision. What it handles:

Want to make it yours? Fork the Vendor Intake template and edit the prompt with your own rules. The five skills behind it (intake, placement, fact sourcing, risk profile review, and assessment scoping) can also be run on their own, any time, in the Agent. --- Availability: Customers with TPRM Advanced, TPRM Advanced with Continuous Monitoring

Sharing evidence in TPRM just got smoother, for vendors and for you Evidence moves between vendors and buyers on every assessment, so small bits of friction add up fast. Here’s what’s cleaner now:

--- Availability: TPRM customers