Vanta
Security · 100% complete
Stage Checklist
- ✓ Research (.md file)
- ✓ POC App
- ✓ POC UI (templates)
- ✓ Microservice
- ✓ Containerized (Dockerfile)
- ✓ Helm Chart
- ✓ CI/CD Pipeline
- ✓ Frontend Page
AI Research
Refund Rules
Vanta typically does not offer refunds for unused seats or mid-cycle cancellations, as their compliance-focused business model requires continuous monitoring and evidence collection throughout audit periods. However, they may provide prorated refunds for billing errors or if contracted services cannot be delivered. Annual contracts are generally non-refundable once the audit period begins, as compliance frameworks require year-long evidence collection.
Credit Policies
Vanta offers service credits for documented downtime that impacts compliance monitoring or evidence collection. They may provide credits for integration failures that prevent automated evidence gathering. Credits are typically issued as service extensions rather than monetary refunds. For enterprise customers, they may offer credits for delayed framework implementations or audit timeline issues caused by platform problems.
Contractual Terms
Annual contracts with 30-60 day cancellation notice required for non-renewal. Auto-renewal clauses are standard with 30-day opt-out windows. Price increases typically capped at 5-10% annually for existing frameworks. Employee count changes can trigger mid-contract pricing adjustments. Framework additions require contract amendments. Cancellation during audit periods may result in penalties as it disrupts compliance certification timelines.
Integration Complexity
Technical Notes
REST API with Bearer token authentication. Well-documented endpoints for people, frameworks, and integrations. Standard rate limiting (typically 100-1000 requests/hour depending on plan). Key endpoints: /v1/people for employee data, /v1/frameworks for compliance status. Employee scope changes require careful handling as they affect billing. API tokens need specific scopes (people.read, integrations.read). No webhook support for real-time updates - polling required for fresh data.