Early Access: Per-document approval chains: the right approvers for every document This is currently in private preview, but if you want access earlier, keep reading. One approval chain for every document never fit complicated approval processes. You can now assign an approval chain unique to each document, mirroring the policy approval experience you already know. Approvers automatically get access to exactly what they need to review, and that access ends when they’re removed from the chain, so no one needs broad org-level document permissions just to sign off. Existing global-chain approvals keep working as they do today. Want in early? Complete the workflow. ⚠️ Deadline to express interest: Friday, November 6, 12pm EST. --- Availability: Plus plans and above

Bitbucket integration, rebuilt The Bitbucket integration has been rebuilt from the ground up, giving you more control before the first sync and more clarity when something needs fixing. Choose which repositories Vanta syncs before the first sync: all of them, all except specific ones, or only specific ones. During setup, a permission check tells you right away if the connecting account can’t read a workspace, so you hear about it in the connection flow instead of after the first sync. Once you’re connected, you get more visibility:

Syncs are also faster and more reliable, with better data coverage. --- Availability: Available today for customers connecting Bitbucket for the first time. Existing Bitbucket customers will move over progressively, with no action required. Stay tuned

This week in the Vanta Community Members we met in 🔒[private feed]: Griffin N. omieibi.bagshaw Allen H. New members we welcomed this week and last week (please share your intro in 🔒[private feed] when you're ready!) john.costa ankur.​palkar zac Armin N. Haralambos B. mariald mkhokhar Nana K. Vlad S. OlimpiuGD Pete J. Tudor L. danwilliams Ivan S. Pablo A. ramon Hunter M. yassin w. cstark oussama.benzaouia Janet Y. Pablo A. Clement U. bobbystoskopf matej.perkovic Stephanie E. martha.george Maggie M. Vlad S. Kari D. Darshil S. Loyal B. Aimee H. Kelly S. Brandon B. Alex T. Francisco P. Fernanda G. Ben L. Alex K. Kerry S. tyler460 jacob.barnes rafael.martinezmontie Leo Phil M. Jeffrey G. All-things AI Governance and Vanta with GRC expert, Kareem M.

Comunidad LATAM

Who wants to be featured at VantaCon?

Congrats, Aditya R. and team!

Discussion-starters and highlights: Please jump into these conversations and offer your POV

so if you care to find me, look to the western sky 🔒[private feed]

Make Vanta’s risk scoring speak your language Your risk methodology has its own terms, so your risk scoring should too. Admins can now view and edit their scoring profile, stage names, and descriptions right in risk settings, so reviewers see familiar guidance at every stage instead of translating Vanta’s labels into yours. Each scoring stage, such as inherent, residual, and target risk, has a name and a description. Defaults are prefilled if you haven’t set any, and any custom text you already have is preserved. 🎥 demo! --- Availability: New customers now. Existing customers can join early access starting Nov 2, with sign-up required.

Ask the Vanta Agent about your risk score definitions Need to check what your risk score stages mean, or change them? You can now ask the Vanta Agent about your configured stage names and definitions, and make supported updates right in the conversation, with no detour through a separate settings flow. If you change your profile types, the agent walks you through whether your existing scores should count as Inherent or Residual, since teams define “inherent risk” differently, either before or after controls are applied. Your risk vocabulary, one question away. 🎥 demo! A note on timing: This release is for new customers to Vanta. For current customers: If you're interested, early access opens for you starting Nov 2, and you can sign up here. If you have the Advanced Risk Management sku, also get early access to several other new Risk features, shown in this demo. --- Availability: Essentials, Plus, Professional, Scale, and Enterprise (Modular) plans with Compliance & Audit Management, Advanced Risk Mgmt (where applicable).

Automated tests for your AI use cases and AI assessments Proving that your AI documentation stays maintained shouldn’t mean checking it by hand. New automated tests now monitor your AI use cases and AI assessments, and you can link them to controls in AI frameworks, so continuous, automated evidence backs up your compliance work. Let the tests keep watch over your AI documentation. UPDATE: More to come on this at VantaCon!

Iru integration, rebuilt The Iru integration has been rebuilt from the ground up, with more control before the first sync and more visibility when something goes wrong. You decide what comes in before anything syncs. Choose device groups to exclude before the first sync, so there’s no more connecting, letting every device flow in, and cleaning up afterward. Every platform Iru returns now syncs too, including iPhone, iPad, Apple TV, and Android, where the previous integration covered only Mac and Windows. When something needs attention, you get the details:

Syncs are also faster and more reliable, with better data coverage.

Security, compliance, and trust challenges don’t always come with a playbook. Trust Circles brings together groups of practitioners facing similar challenges to swap ideas, share what’s working, and learn from each other through virtual roundtables and ongoing conversations in the Vanta Community.

No product pitches, just real conversations. Guided by the Chatham House Rule, you can share what you learn, but not who you learned it from.

Don’t see one that resonates? We want to hear your ideas! Tell us what your ideal Circle would look like, who you’d want to connect with, and what topics you’d explore together.

Be a Vanta customer: You must be an active Vanta customer to participate Be a Vanta Community member: Trust Circles live within the Vanta Community, so membership is required. If you haven't, request to join the Vanta Community now! Come ready to participate: Be willing to share experiences, exchange ideas, and actively engage with your fellow Circle members.

See thread below for a Trust Circles FAQ

hey guys! we just launched publicly on YC, linkedin, and X! would love any engagement you guys could give! links: x: x.com/ad1tyaranjan/status/2115556461539627321 linkedin:lnkd.in/p/gTSGbP-5 YC: ycombinator.com/launches/Wb9-graypass-the-most-dangerous-actions-happen-after-login

Questionnaire reporting on demand, from the Vanta Agent Showing leadership how your team is doing on questionnaires, whether turnaround is improving, where work stalls, and how much AI answers save you, now takes one question. The Vanta Agent can query and chart your Questionnaire Automation data in natural language, and you can shape each report to fit what you need. The data covers the full lifecycle of questionnaires and questions: when each was created, assigned, answered, approved, and completed, plus where each answer came from, whether AI, the original questionnaire file, or a person. Try asking the Vanta Agent:

🎥 demo! --- Availability: Any Questionnaire Automation customer with AI opt-in enabled