Trust Center: block access requests by country
Keeping certain locations out of your Trust Center documents no longer means maintaining a list of email domains. Admins can now choose countries to block, and access requests from those locations are blocked automatically. This is now generally available.
To set it up: Settings > Customer trust > Trust Center > Blocked countries
What to know:
The country block takes priority over auto-approval rules, so an allowlisted domain requesting from a blocked country is still blocked
It covers access requests only. Publicly viewable content stays visible, and access already granted to existing viewers isn’t revoked
--- Availability: Trust Center customers
Frameworks & Controls
Read frameworks, framework requirements, and associated controls.
Read controls and associated documents and tests.
Create, update, deactivate, and reactivate controls, and manage control custom fields.
Map and unmap tests and documents to controls.
Read, create, and update common controls and their mappings to framework controls. (admin-only)
Tests & Remediation
Read tests and associated entities.
Generate prompts for remediating failing compliance tests.
Read per-resource evidence for automated tests.
Assign test owners, trigger test reruns, and deactivate or reactivate tests and individual test entities.
Read and update remediation SLA settings.
Policies & Documents
Read, upload, and download policies and other documents.
Generate draft policy content from templates.
Search policy contents and read policy acceptance statistics.
Read controls mapped to policies, including AI-suggested mappings.
Create and delete policies, update policy details, and submit policy drafts for approval.
Map and unmap controls to policies. (admin-only)
Read policy contradictions and SLA inconsistencies across policies.
Create custom documents (recurring evidence requirements).
Read the extracted contents of uploaded evidence documents. (admin-only)
Risk Management
Read, create, and update risk scenarios.
Read, create, update, and delete risk registers.
Vendors & Vendor Risk
Read vendor records and discovered vendors.
Read vendor compliance data (documents, findings, security reviews).
Read vendor risk attributes and security review details.
Read vendor assessment questionnaires, findings, and documentation. (admin-only)
Read vendor assessment configuration: assessment types, rules, automations, and custom fields. (admin-only)
Contracts & Commitments
Read customer contracts and the commitments extracted from them, including gap analysis.
Read the standard commitment library and standard papers.
Personnel & Computers
Read comprehensive details for personnel records. (admin-only)
Read personnel groups, including membership and assigned tasks.
Read computers and devices.
Users & Teams
Look up user accounts and teams, e.g. to assign owners.
Access Management
Read access accounts.
Read access requests, reviews, and detailed review information.
Read access systems.
Read apps in the access program and their access requests.
Retrieve offboarding tasks for terminated employees.
Audits
Read metadata and status details for audits.
Read individual audit requests.
Edit audit observation dates and auditor early-access dates.
Privacy
Read data processing activities and categories.
Read data processing vendors or controllers.
Read details for privacy impact assessments.
Create, update, delete processing activities and categories
Create, update, delete privacy impact assessments of different types (DPIA, LIA, TRA)
Create, update, delete data processing controllers
Link/unlink processing activities to impact assessments
Link/unlink risks to impact assessments
Submit privacy impact assessments for approval.
Upload privacy impact assessments and new assessment versions, and create new in-platform versions.
Read, create, update, and delete data inventory (ROPA) custom fields.
Read, create, and update data subject requests (DSRs), and attach or remove DSR evidence.
Questionnaire Automation & Knowledge Base
Search the trust knowledge base and answer library.
Read details for security questionnaires.
Read knowledge base coverage analysis and insights.
Issues
Read and update issues.
Integrations & Vulnerabilities
Read connected integrations.
Read vulnerabilities in your Vanta account.
Read assets monitored by vulnerability scanners.
68 (!!) more MCP tools, now open to non-admins
No admin badge required. 68 additional MCP tools are now available to non-admins and the agents they connect, so more of your team can pull answers and take action from the AI tools they already use.
Each tool follows the permissions of the person who’s connected, so everyone sees and does only what their role allows.
See thread for list of updated capabilities 🧵
---
Availability: Customers with the MCP connected
i followed up on this, rudy, thanks for your patience!
Manage audits without leaving the Vanta Agent
Two audit chores you can now hand to the Vanta Agent, or to any tool connected through Vanta’s MCP.
Modify audit dates. Update an existing audit’s dates in conversation. Changes are checked against audit date eligibility rules and your permissions, anything you don’t change stays as it was, and you get clear feedback if an update can’t go through.
Delete audits. Remove an audit right from your agent workflow instead of switching to manual steps.
This week (and last week! since I was away) in the Vanta Community
Members we met in Intros: Adarsh k. Rachael H. Farbs Phil C. Nathan W. Kara H. Ibitola jschuster Linda B.
New members we welcomed this week and last week (please share your intro in Intros when you're ready!) Cris G. Tom C. nissim_b frank.xu Kayode O. Harsha neha.chandra sequoia.sutherland Dutch C. Ed H. Zoe C. julien.triau bernard.pratz hannah.draper Kyle J. Kelsey P. Kyle L. Craig B. littleneal.felton josephine.tam Julien R. Alaia M. Barnes M. Kimberly M. Laura N. augusto.freitas Eli P. jeroen Parag S. Chi P. yevgeny.ioffe Isabel M. Adnan K. Wania I. Rodrigo M. julian.dieleman natasha.moore Ethan G. jguerra services Jason B. Lokesh K. Todd S. Laurentiu M. Ignacio A. kevin.pierce Jason W. Jake U. Andra N. Mike S. Mike P. Sameer A. Mayra F. Itzik ndaddona Brandon C. Luying W. paul.stamour Alisha Yuichi H. kosei tbadlani aaron.pickell Elahe M. znoor David C. Andy B. Scott B. Cyril M. william.mcguire Linda B. anne.simpson Ryan M. Collin R. Benjamin L. Madhav fernando.nin Tushar B. Alexander J. Elsa Y. Rob L. Tab P.
Get your GRC questions answered by the GRC expert himself: Kareem M.!
Direct access to Vanta's in-house GRC subject matter expert.
Bring your questions; it all goes down on October 21st at 1pm ET in the Slack huddle in GRC
NEXT WEEK: Learn how your peer, Geert V., is building out his GRC program with Vanta and AI
Geert V. from Snitcher (a Vanta customer, just like you!) is hosting a session right here in the Vanta Community, giving a peek inside his GRC program program workflows, using Vanta and AI. Register here
🎨 Anyone here an artist?
Don't look at me (lol) I am definitely not one.
If you had to design the entrance to VantaCon, what would it look like?
Pop in here to submit your design ![]()
btw, who is going to vantacon? if you see this, and youre registered, pop into the thread and tell me top 3 things you're excited about. first one to do that will receive all 3 brand new vanta community merch items when they land in the coming weeks.
Discussion-starters and highlights: Please jump into these conversations and offer your POV
Rudy M. says it's a random question, but I would say it's a great question: Anyone found a way to get a claude generated slack msg post into your desired channel or DM, to actually notify you in slack when it's posted? Respond with your POV here
Farbs is looking for insight on how are others handling Vanta tests for AI-assisted code reviews, single-developer projects, and database access. Respond with your POV here
william.mcguire is hiring! Check it out in 🔒[private feed]
Linda B. wants your take re: ISO 42001 and vendor reviews. Respond with your POV here.
Jake T. wants to know your pentest vendor recommendation! Respond with your rec here.
Where are my CASA folks? Greg B. wants to hear from you. Respond with your POV here.
sandro is looking for your recs for an independent auditor to conduct their internal ISMS audit. Share your rec here.
Vanta CEO, Christina Cacioppo was here, answering your questions.
Start here and scroll down to see the questions she answered.
Vanta engineers, Dennis C. and Enrique F. were here, answering your MCP questions
Start here and scroll down to see the questions they answered
Nathan W. found the ![]()
![]()
stuff inside vanta ![]()
Your Trust Center FAQs, now one question away
The Vanta Agent can now answer questions about the FAQs published on your Trust Center, and so can any tool connected through Vanta’s MCP. Skip the manual hunt through the product and ask in plain language instead.
---
Availability: Across all plans / customers who are using Trust Center and have AI activated in Vanta


.png)
.png)