Independent profile. Not owned, sponsored or endorsed by Vanta.
Vanta Customer Reviews & Contacts
Vanta Inc. of San Francisco sells businesses software that automates security and compliance work. Its standard subscriptions renew automatically each year unless written notice is given at least 30 days before the term ends, and fees are generally non-refundable. Support runs through in-app chat and email; its support pages list no phone number. In May 2025 a Vanta code change exposed some customer data to other customers. BBB rates it A+ and shows 0 complaints in the last 3 years; Trustpilot shows 3.1 out of 5 from 33 reviews. No published complaint reports are currently linked to this profile.
Contacts
Customer service & general contact
- Vanta Help Centerhelp.vanta.com ↗
- Customer service email address[email protected]
Privacy requests
- Privacy requests (Data Privacy Officer)[email protected]
Other contacts
- Vanta websitevanta.com ↗
- Formal contract notices (Legal Department, with mailed notice)[email protected]
Locations
- HeadquartersSan Francisco CA
Is Vanta Legitimate?
- Legal name
- Vanta Inc.
- Founded
- 2018
- Business type
- Software company (San Francisco) whose platform automates security and compliance work such as SOC 2 and ISO 27001 readiness
- Website
- vanta.comSource: Vanta official website, checked 2026-11-04
- Headquarters
- San Francisco, CASource: Wikipedia article on Vanta, checked 2026-11-04
Vanta Inc. is a Delaware corporation whose Master Subscription Agreement lists a place of business at 655 Montgomery Street, Suite 1600, San Francisco, CA 94111. Its About page says it was founded in 2018 and names Christina Cacioppo as CEO and founder; the company is privately held and backed by venture and growth investors. Customer service runs through in-app chat and [email protected], and Vanta's Help Center and Support Policy list no customer service phone number.
Independent Sources
Shown for context — not merged with USAComplaints' own numbers.
Complaint record and external profiles
No published complaint reports are currently linked to this profile.
BBB. The BBB profile for Vanta lists the business at 369 Hayes St, San Francisco, in the Security category, rates it A+ and marks it not BBB Accredited; BBB says businesses are under no obligation to seek accreditation. It shows 0 complaints in the last 3 years and 0 customer reviews. The BBB address differs from the one in Vanta's own legal documents (655 Montgomery Street), so a written complaint or notice is better sent to the address in your agreement.
Trustpilot. Vanta has claimed its Trustpilot profile, which shows a TrustScore of 3.1 out of 5 from 33 reviews, 31 of them posted in the last 12 months: 55 percent 5 stars and 42 percent 1 star. Trustpilot notes that the company has not invited customers to review it recently, so the reviews may not be representative. Favorable reviews praise ease of use, automated evidence collection, audit readiness and responsive support staff. In the 1-star reviews, reviewers describe being refused early termination of a contract, disputed renewal and auto-pay charges, slow support and little onboarding. These are the reviewers' own accounts. Some 1-star reviews are not about this company: Vanta has replied that it offers no real estate services and has no link to Vanta Commerce LLC.
AWS Marketplace. Vanta's AWS Marketplace listing shows 4.5 out of 5 from 2,855 ratings, nearly all of them drawn from G2 and PeerSpot.
These figures come from separate sources and are not combined with each other or with this site's reports.
Had an experience with Vanta? Tell other people what happened.
Submit a ComplaintRenewal, cancellation, refunds and support: what Vanta's own pages say
Contract terms. Vanta's Master Subscription Agreement (last revised November 21, 2025) says subscriptions default to one-year terms and, unless the Order Form states otherwise, "will automatically renew for successive one- (1) year Service Periods." To stop renewal, the customer must give notice "at least thirty (30) days prior to the end of the then-current Service Period" (Section 3.1.2). Section 2.1.1 says: "Except as expressly set forth in this MSA, all payment obligations are non-cancelable and Fees are non-refundable and not subject to set off." The main exception is termination for cause: either party may end the agreement or an Order Form by written notice of a material breach that the other side has not cured within ten days (Section 3.2), and a customer that terminates for Vanta's uncured material breach "shall be entitled to a pro-rata refund of any prepaid, unused Fees" (Section 3.3). To dispute an invoice, the customer must contact Vanta within 30 days of the invoice date; after that, the agreement treats the invoiced fees as owed (Section 2.1.2). If you pay by credit card or a similar online method, Vanta bills that method for all fees due, including renewals and add-ons, unless you ask in writing for another payment method (Section 2.1.1). If an invoice is still unpaid fifteen days after its due date, Vanta may suspend access until the balance is paid and charge interest on the past-due amount at 1.5 percent or the highest rate the law allows, whichever is lower (Section 2.1.1). Price changes take effect only at the start of the next Service Period, with reasonable notice of any fee increase (Section 2.2). If you bought Vanta through a cloud marketplace such as AWS, Google Cloud or Microsoft Azure, fees are billed through that marketplace account and any refund may come as a marketplace credit (Section 2.3); if you bought through an authorized reseller, your fees are set in your separate agreement with the reseller, and the subscription cannot be canceled except for cause under Section 3.2 (Section 2.5).
More detailShow less
These are the standard terms; your Order Form can differ, so read it first. Vanta's terms FAQ confirms it offers no termination for convenience and says its Data Processing Addendum incorporates addenda covering the EU Data Act.
Pricing. Vanta's pricing page lists plans named Essentials, Plus, Professional and Enterprise and publishes no dollar amounts; it says "Request a free demo today to discuss your business needs and get personalized pricing." Ask for the billing cycle in the demo, or check your Order Form.
How to send a non-renewal or other formal notice. Section 10.5 of the agreement says a customer must give notice to Vanta in writing by overnight courier or U.S. mail to 655 Montgomery Street, San Francisco, CA 94111, Attn: Legal Department, and also by email to [email protected]. (The opening paragraph of the agreement gives the same building with Suite 1600.) An emailed notice counts as given on delivery; a mailed one on receipt or two business days after mailing, whichever is earlier.
More detailShow less
To stop an auto-renewal, send both well before the 30-day cutoff, name your company, account and Order Form, and keep copies of the letter, the courier or postal receipt and the email.
Support. Vanta's Help Center article "Contacting Vanta Support" says requests start from the question-mark help icon in the Vanta app header ("Chat with us"), where Vanta's AI assistant answers first and hands off to a support specialist when needed; if you cannot get into chat, the article gives [email protected].
More detailShow less
It lists live chat "Mon–Thu: 6 AM–8 PM ET & Fri: 6 AM–7 PM ET" and email support "Mon–Fri: 24/5 ET", with reduced capacity on US and local holidays. Neither that article nor Vanta's Support Policy lists a customer service phone number. For "Contracts, billing, invoices, renewals, and payment inquiries" the article points to the Account Manager; it notes that dedicated Account Managers depend on the plan, and that customers unsure whether they have one should ask Vanta Support. A chat message or an email to your Account Manager is not the written notice the agreement requires, so for non-renewal or termination also send the formal notice described on this page.
Disputes. Raise a billing or service problem with your Account Manager in writing first; if you have none, ask Vanta Support who handles your account. Dispute an invoice within 30 days of its date rather than simply not paying, because non-payment for 30 days after the due date is itself a material breach (Section 3.2).
More detailShow less
If Vanta is in material breach and does not fix it, the agreement's route is written notice under Section 3.2, which starts the ten-day cure period. Vanta sells to businesses, so consumer-purchase rules such as cooling-off periods generally do not apply; the Order Form and this agreement set the terms. The agreement says it is governed by California law and that disputes "shall be resolved in a court of general jurisdiction in San Francisco County, California" (Section 10.6), so that is where a lawsuit over the contract would be filed. A complaint can also be filed with the BBB through its Vanta listing. Privacy requests go to [email protected] (Privacy Policy, effective February 25, 2026); that policy does not cover data Vanta processes on behalf of a customer, so if your data is in Vanta because your employer uses it, start with your employer.
May 2025 product bug that showed some customer data to other customers
Vanta itself published a root cause analysis, "Root Cause Analysis (RCA) of Product Bug (Inc-868)", on June 13, 2025. According to it:
More on regulatorsShow less
- A code change deployed to production on May 22, 2025 (5:11 PM PT) "removed a domain ID filter" in data-ingestion API calls, the APIs customers use to sync third-party data through custom integrations; because resource IDs were unique only within each customer's installation of an integration, data from one customer's third-party integrations could be written into another customer's tenant. Vanta says this happened in some cases, when the receiving customer had soft-deleted resources with identical IDs, and that active data already stored in Vanta and data fetched by its native integrations were not impacted.
- A customer told Vanta Support on May 26, 2025; engineering confirmed the bug on May 27 and the change was reverted that morning. Vanta says that after the revert the data corrected itself through later syncs for more than 98 percent of impacted customers. It began notifying affected customers on May 29, finished cleanup in downstream systems for more than 95 percent of them on May 30 and for all of them on June 3, 2025.
- Vanta states the exposed data came from fewer than 20 percent of its third-party integrations, that fewer than 4 percent of its customers were impacted, and that the data could include metadata about employee security training records, tool access, devices and vulnerabilities. It states MFA credentials, passwords, API keys, financial information and healthcare information were not affected, and says the event was not security related and did not involve API keys, credentials or an intrusion.
- Vanta said in June 2025 that it had added tests that check customer data stays separated before code is deployed, and that it would add database-level safeguards against cross-customer queries to all third-party integrations by July 18, 2025 and have an outside firm review its code base for other high-risk areas by Q4 2025. Customers can ask Vanta Support whether those steps were completed.
Vanta's guidance to customers was that no action was needed on their side. TechCrunch reported the incident on June 2, 2025, quoting Vanta's chief product officer on the same under-20 percent and under-4 percent figures; at that time a Vanta spokesperson would not say which types of data were involved. One affected customer told TechCrunch that Vanta's notice said the data generally includes employee names, roles and details of how some tools are configured, such as multi-factor authentication use. Customers who want to know whether their account was affected can ask Vanta Support ([email protected], the address Vanta gave for questions about the analysis) or their Account Manager. An employee whose data reached Vanta through an employer's account should start with that employer.
Who Vanta is and what the product does
Vanta Inc. is a Delaware corporation; its Master Subscription Agreement lists a place of business at 655 Montgomery Street, Suite 1600, San Francisco. Its About page says Vanta "was founded in 2018", lists Christina Cacioppo as CEO and founder, and describes a remote-first company with offices in San Francisco, New York, Sydney, Dublin and London. Cacioppo started it with Erik Goldman after both worked at Dropbox. Vanta is privately held; its investors include Sequoia Capital, Craft Ventures, Y Combinator, J.P. Morgan, Goldman Sachs and Wellington Management, which led a $150 million Series D round in July 2025 at a reported $4.15 billion valuation. Fortune reported in April 2026 that Vanta serves more than 16,000 customers. The company says its platform connects to a customer's cloud and software tools to collect evidence for security and compliance frameworks such as SOC 2 and ISO 27001 and to prepare for audits; the audit itself is performed by a separate auditor.
The name is also used by unrelated businesses; this page covers only Vanta Inc. and vanta.com.
Frequently Asked Questions
Does a Vanta subscription renew automatically?
Under the standard terms, it does. Vanta's Master Subscription Agreement (last revised November 21, 2025) says subscriptions "will automatically renew for successive one- (1) year Service Periods" unless the Order Form says otherwise, and that notice to stop renewal must be given at least thirty days before the end of the current Service Period (Section 3.1.2). If you pay by credit card or a similar online method, Vanta bills that method for renewals and add-ons unless you ask in writing for another payment method. The notice goes in writing by courier or U.S. mail to 655 Montgomery Street, San Francisco, CA 94111, Attn: Legal Department, and also by email to [email protected].
Can I cancel Vanta in the middle of a term?
Not for convenience under the standard agreement: "Except as expressly set forth in this MSA, all payment obligations are non-cancelable" (Section 2.1.1). Either party may terminate for cause by written notice of a material breach that is not cured within ten days (Section 3.2); if the customer terminates for Vanta's uncured breach, it gets a pro-rata refund of prepaid, unused fees (Section 3.3). Your Order Form may add terms. For EU customers, Vanta's terms FAQ says its Data Processing Addendum incorporates addenda covering the EU Data Act.
Are Vanta fees refundable?
Generally no. Except as the agreement expressly provides, fees "are non-refundable and not subject to set off" (Section 2.1.1). The main exception is a pro-rata refund of prepaid, unused fees when the customer terminates because Vanta did not cure a material breach. To dispute an invoice, contact Vanta within 30 days of the invoice date.
How much does Vanta cost?
Vanta's pricing page lists Essentials, Plus, Professional and Enterprise plans and shows no dollar amounts; it offers a demo and "personalized pricing." Ask for the billing cycle in the demo, or check your Order Form.
How do I contact Vanta support?
Click the question-mark help icon in the Vanta app header and choose "Chat with us"; live chat runs Mon–Thu 6 AM–8 PM ET and Fri 6 AM–7 PM ET. If you cannot use chat, email [email protected]; email support runs around the clock Monday to Friday. Vanta's Help Center article lists no phone line. Billing, contract and renewal questions go to your Account Manager; if you are unsure whether you have one, ask Vanta Support.
What happened in Vanta's May 2025 data exposure?
Vanta's root cause analysis (June 13, 2025) says a code change on May 22, 2025 let some data from fewer than 20 percent of its third-party integrations be written into other customers' accounts, affecting fewer than 4 percent of customers. It says this happened in some cases, when the receiving customer had soft-deleted resources with identical IDs, and that active stored data and data fetched by Vanta's native integrations were not impacted. It says the change was reverted on May 27, 2025, the data corrected itself for more than 98 percent of impacted customers after that, affected customers were notified starting May 29, cleanup was complete on June 3, and no action was needed from customers. Vanta says it was not an intrusion. Questions go to [email protected].
Did Vanta say passwords or API keys were exposed?
Vanta's root cause analysis states that MFA credentials, passwords, API keys, financial information and healthcare information were not affected. It says the exposed data could include metadata on employee security training records, tool access, devices and vulnerabilities. This is Vanta's statement. One affected customer told TechCrunch that Vanta's notice said the data generally includes employee names, roles and details of how some tools are configured, such as multi-factor authentication use.
Where do I send a Vanta privacy or deletion request?
Vanta's Privacy Policy (effective February 25, 2026) names [email protected] for requests such as deletion of personal data, and a mailing address: Vanta Inc., Attn: Data Privacy Officer, 655 Montgomery Street, San Francisco, CA 94111. The policy does not apply when Vanta handles personal information as a processor for a customer, so if your data is in Vanta because your employer uses it, start with your employer.
Which business does this page cover?
Vanta Inc. of San Francisco, the operator of vanta.com. Other businesses that use the name Vanta are not covered.
How do I cancel a Vanta subscription?
Unless your Order Form says otherwise, give written notice of non-renewal at least thirty days before the current Service Period ends (Section 3.1.2): by courier or U.S. mail to 655 Montgomery Street, San Francisco, CA 94111, Attn: Legal Department, and also by email to [email protected] (Section 10.5). A chat message or an email to your Account Manager does not meet that requirement. If you bought through a reseller or cloud marketplace, also check that agreement or offer and tell the reseller. Outside renewal, fees are non-cancelable unless the agreement or your Order Form says otherwise.
Is Vanta a scam?
Vanta Inc. is a Delaware corporation in San Francisco, founded in 2018 and led by CEO Christina Cacioppo, that sells security and compliance software to businesses. BBB rates it A+ and shows 0 complaints in the last 3 years; it is not BBB accredited, which BBB says businesses are under no obligation to seek. Trustpilot shows 3.1 out of 5 from 33 reviews. A 1-star review there calls Vanta a scam: the reviewer says they bought SOC 2 and HIPAA subscriptions, canceled the SOC 2 one and got no human response, onboarding or training. Other 1-star reviews describe contracts that could not be ended early and disputed renewal and auto-pay charges, and some concern other businesses: Vanta has replied that it offers no real estate services and has no link to Vanta Commerce LLC. These are the reviewers' own accounts. Before signing, read the 30-day non-renewal notice and non-refundable fee terms in the Master Subscription Agreement.
Is Vanta legit?
Vanta Inc. operates vanta.com from San Francisco and has offices in New York, Sydney, Dublin and London. Fortune reported more than 16,000 customers in April 2026, and Wellington Management led a $150 million round in July 2025. Its software collects evidence for frameworks such as SOC 2 and ISO 27001; a separate auditor performs the audit itself. Trustpilot's 33 reviews split mostly between 5 stars and 1 star: favorable reviews praise ease of use, evidence collection and audit readiness, while 1-star reviews describe slow support, little onboarding and refused early termination, and some of them concern other businesses. AWS Marketplace shows 4.5 out of 5 from 2,855 ratings, nearly all drawn from G2 and PeerSpot. In May 2025 a Vanta code change exposed some customer data to other customers, which Vanta set out in its own root cause analysis.
What is the Vanta customer service phone number and email address?
Vanta's Help Center and Support Policy list no customer service phone number; use the chat in the Vanta app (the question-mark icon in the header) or the customer service email address, [email protected]. Billing, invoice and renewal questions go to your Account Manager. Treat a phone number on a third-party directory with caution, since Vanta's support pages do not list one. Formal contract notices go to [email protected] and privacy requests to [email protected].
Is there a Vanta lawsuit or class action?
CourtListener lists no federal case with Vanta Inc. in its caption. Federal lawsuits can be looked up by party name on PACER or CourtListener, and California state cases through the county superior court. For a customer with a contract dispute, the Master Subscription Agreement's route is written notice of a material breach with a ten-day cure period (Section 3.2), and any lawsuit over the contract goes to a court of general jurisdiction in San Francisco County, California (Section 10.6).
What do Vanta reviews and complaints say?
BBB shows 0 complaints in the last 3 years and 0 customer reviews. Trustpilot shows 3.1 out of 5 from 33 reviews, 55 percent 5 stars and 42 percent 1 star; praise centers on ease of use and audit readiness, and reviewers criticize refused early termination, renewal charges and slow support. Some of those 1-star reviews concern other businesses. AWS Marketplace shows 4.5 out of 5 from 2,855 ratings, nearly all drawn from G2 and PeerSpot.
Where is the Vanta corporate office?
Vanta's Master Subscription Agreement lists a place of business at 655 Montgomery Street, Suite 1600, San Francisco, CA 94111. Its BBB listing shows a different address, 369 Hayes St, San Francisco, so use the Montgomery Street address for written notices. Vanta also lists offices in New York, Sydney, Dublin and London and describes itself as remote-first.
Who owns Vanta and who is the CEO?
Christina Cacioppo is CEO and founder; she started Vanta with Erik Goldman. Vanta Inc. is privately held. Its investors include Sequoia Capital, Craft Ventures, Y Combinator, J.P. Morgan, Goldman Sachs and Wellington Management.
Sources (13)
Vanta (own site)
- Vanta About page vanta.com
- Vanta Master Subscription Agreement vanta.com
- Vanta Help Center article on contacting support help.vanta.com
- Vanta Support Policy vanta.com
- Vanta terms FAQ vanta.com
- Vanta root cause analysis of product bug Inc-868 vanta.com
Review sites
- BBB listing for Vanta bbb.org
- Trustpilot reviews of vanta.com trustpilot.com
Other
- AWS Marketplace reviews of Vanta aws.amazon.com
- Wikipedia article on Vanta, for its co-founders en.wikipedia.org
- Fortune on Vanta's customers and revenue fortune.com
- SiliconANGLE on the Vanta Series D round siliconangle.com
- TechCrunch report on the Vanta bug techcrunch.com