Vanta is acquiring Pillar Security to turn AI policy into real-time protection. As AI agents gain access to sensitive data and take action across business systems, knowing what AI you have is only the first step. You also need to understand what it can do, set boundaries, and make sure those boundaries hold up. Pillar brings capabilities to help Vanta deliver on that vision:

Read more on the announcement and tune in to VantaCon on Thursday and 🔒[private feed] throughout this week and next for a closer look at our AI governance roadmap and a conversation with Pillar’s founders about the future of AI security and governance. This is just the beginning, folks. Keep an eye on Announcements, because there’s more coming later in the week!

Keep the conversation on the assessment itself Assessment owners and privacy managers can now leave comments on a version of an assessment in a dedicated Notes Comments tab. Comments can be added even after an assessment is approved, so feedback and annotations stay tied to the assessment record instead of living in other tools. --- Availability: Customers using privacy assessments. Availability varies by plan and purchased products, so confirm with your account team or support@vanta.com

Hi everyone. We’ve had some interesting questions in the channel lately. I’m having this conversation on Ai Governance on 11/18th to talk about the new module and all things Ai Governance. I’ll also answer any kinda question you have. Like this to get a zoom invite directly from me. C.C. Jake T., Rudy M., Griffin N.

This week in the Vanta Community Members we met in 🔒[private feed]: Kevin A. rohan.dwyer Stephanie E. New members we welcomed this week and last week (please share your intro in 🔒[private feed] when you’re ready!) Bence D. Evan D. Cole E. Steven E. John B. skaur Taylor W. jjames Murtadha A. Jessica Tushar W. Jeremy S. edgar.rocha Marlon Jack G. Stacie G. Carlos C. Amar D. Reginy M. pradonich Craig G. Sahar S. daniel_romanogarcia Krystal M. John P. Viraj A. Ben S. Boaz M. Jonathan T. Sam S. austin635 candace.snow Chris W. Eric O. Jeff P. Sarah N. Adam G. Ayesha S. Ravikumar celia Alex M. kusai.esseid Aoife K. Agustin C. Daniel P. VANTACON IS NEXT WEEK

💼 New jobs and open to work folks

Going through SOC 2? Want to hear from a peer who’s been there?

Discussion-starters and highlights: Please jump into these conversations and offer your POV

lock in, clock in, join 🔒[private feed], and get ready for the AI governance event of the year

Delegate vendor reviews without handing over the keys Getting business owners into vendor reviews no longer means emailing questionnaires back and forth or making everyone an admin. Assign a Collaborator as a vendor’s business owner or an assessment owner, and they get read and write access to that vendor and all its assessments, and nothing else in TPRM. There’s no new setup, because the existing owner fields are the access grant.

Right access, right people, no chasing. --- Availability: Customers with TPRM Advanced / TPRM Advanced with Continuous Monitoring

Vanta Community Networking Hey you (yes—you!): Need a break? Want to expand your network? Well, now's your chance! Meet a peer here in the Vanta Community for a casual, no-pressure chat. Think coffee chat vibes (minus the commute). Swap stories, trade tips, vent a little, or spark your next big idea with someone who gets it. Who knows? You might leave with a fresh perspective, a new connection, or even a go-to sounding board. How do we meet? However you want! You can swap info via DM and set a time/date, jump on a huddle here in Slack, or schedule it on a different platform. Note: Per Community Guidelines, please refrain from sharing emails and phone numbers in Slack channels. Only via DM, thank you! Get started Click the button below and let Slack do the rest! --- This is a biweekly reminder populating right here in GRC, so don't worry, the opportunity will always be available here in the Community!

Show the revenue your security questionnaires help close When leadership asks what the security program contributed this quarter, a count of completed questionnaires only tells half the story. Revenue influenced reporting now covers Questionnaire Automation, so you can connect completed questionnaires to closed-won revenue and bring real numbers to your next business review or leadership update.

Where to find it: The Revenue influenced widget now includes questionnaire data. It’s on the Customer Trust overview page and under Activity > Revenue influenced. Filter by Questionnaires, Trust Center, or All to see each one’s contribution on its own or combined. How it’s counted: An opportunity counts when a questionnaire linked to that account was completed before the opportunity moved to closed-won. That’s handy to have ready when someone asks how the number is calculated.

From questionnaire counts to revenue stories. 🎥 demo! --- Availability: Questionnaire Automation customers

Vercel integration, rebuilt The Vercel integration has been rebuilt from the ground up, so you decide which projects Vanta syncs before the first sync. Narrowing what comes in used to mean creating a more narrowly scoped token and reconnecting. Team members are always synced. For visibility along the way:

Syncs are also faster and more reliable, with better data coverage. --- Availability: Available for customers connecting Vercel for the first time. Existing Vercel customers will move over progressively, with no action required

Linear integration, rebuilt: you choose what Vanta can do The Linear integration has been rebuilt around what you want from it, instead of one access level for everything. What’s new:

Syncs are also faster and more reliable, with better data coverage. Your Linear, your rules. & tagging in Jamie F. bc what would a post about linear be without you, jamie???? --- Availability: Available today for customers connecting Linear for the first time. Existing Linear customers will move over progressively, with no action required

Manage more of your controls from the Vanta Agent and MCP Keeping your controls library tidy no longer means leaving your agent workflow. Authorized users can now handle more control tasks from the in-app Vanta Agent or any tool connected through MCP, with existing permissions applied. Custom controls Delete them: Remove custom controls along with their framework, test, and evidence mappings. Only custom controls can be deleted. Vanta-managed controls and Vanta controls your org has modified are rejected, with a reason for each. Deletions are recorded in the event log and attributed to the person who made them. Common controls (MCP)

Deactivated controls Review past decisions: Retrieve an individual deactivated control, with its details and state, through the Agent or MCP. It’s strictly read-only, so nothing is reactivated or changed --- Availability: MCP users, per appropriate access levels