“For more details about how Vanta uses these technologies, and your opt-out opportunities and other options, please see Vanta’s Cookie Policy.”
“8.3 Vanta shall maintain records sufficient to demonstrate its compliance with its obligations under this DPA, and retain such records for a period of three (3) years after the termination of the Agreement.”
“4.4 If Customer does not object to the engagement of a third party in accordance with Section 4.2 within ten (10) days of notice by Vanta, that third party will be deemed a Sub-Processor for the purposes of this DPA.”
Downstream
Who's behind Vanta, as listed in its own subprocessor documents. No subprocessors identified · coverage incomplete: no subprocessor document is on file; the names below come from other documents, if any.
Model providers
- none listed
Hyperscalers
- none listed
Other subprocessors
- none listed
Reviewer notes
Extracted by deterministic rules (rules/v1), no language model. Coverage is limited to recognisable clauses and a gazetteer of common subprocessors; absent values mean 'not matched', not 'not present'. no training clause matched
Documents read
- privacy policy https://www.vanta.com/privacyHTTP 200 · 2026-09-05
- dpa https://www.vanta.com/legal/dpaHTTP 200 · 2026-09-05
Document changes
No document changes yet. These appear when a later reading of a page differs from the previous one; no model involved.
Fact changes
No changes recorded yet. Changes appear here when a later reading differs from an earlier one.
Corrections
No correction requests. Anyone may dispute a fact with a source; requests and resolutions are public and ledger-entered.
Facts are as stated in Vanta's public documents on the date read. This is a record, not legal advice. Work for Vanta? Claim this profile · Something wrong? Request a correction.