Managing Risk-to-Control Relationships Fully Through Vanta's REST API Now Available
Risk-to-control relationships, now fully API-able
I've decided API-able is a word now.
Get ready, ๐[private feed]: You can now manage risk-to-control relationships entirely through Vanta's REST API; no UI required. Link controls to risk scenarios, view what's connected, update link types, remove links. The full workflow, all programmatically.
For teams already managing Vanta through code, this closes the last gap in your risk program automation. And for anyone feeling adventurous, yes, this means you can wire up an AI assistant like Claude or ChatGPT to help map and maintain risk-control relationships at scale. The possibilities are genuinely exciting.
What's new:
POST link a control to a risk scenario
GET view all controls associated with a risk
PATCH update the link type (existing vs. treatment control)
DELETE remove a risk-control link
๐ Developer docs here
