Stage Checklist

  • ✓ Research (.md file)
  • ✓ POC App
  • ✓ POC UI (templates)
  • ✓ Microservice
  • ✓ Containerized (Dockerfile)
  • ✓ Helm Chart
  • ✓ CI/CD Pipeline
  • ✓ Frontend Page
Download Research Download Implementation Guide

AI Research

Last researched: 2026-03-05

Refund Rules

Vanta typically does not offer refunds for unused seats or mid-cycle cancellations, as their compliance-focused business model requires continuous monitoring and evidence collection throughout audit periods. However, they may provide prorated refunds for billing errors or if contracted services cannot be delivered. Annual contracts are generally non-refundable once the audit period begins, as compliance frameworks require year-long evidence collection.

Credit Policies

Vanta offers service credits for documented downtime that impacts compliance monitoring or evidence collection. They may provide credits for integration failures that prevent automated evidence gathering. Credits are typically issued as service extensions rather than monetary refunds. For enterprise customers, they may offer credits for delayed framework implementations or audit timeline issues caused by platform problems.

Contractual Terms

Annual contracts with 30-60 day cancellation notice required for non-renewal. Auto-renewal clauses are standard with 30-day opt-out windows. Price increases typically capped at 5-10% annually for existing frameworks. Employee count changes can trigger mid-contract pricing adjustments. Framework additions require contract amendments. Cancellation during audit periods may result in penalties as it disrupts compliance certification timelines.

Integration Complexity

★★☆☆☆

Technical Notes

REST API with Bearer token authentication. Well-documented endpoints for people, frameworks, and integrations. Standard rate limiting (typically 100-1000 requests/hour depending on plan). Key endpoints: /v1/people for employee data, /v1/frameworks for compliance status. Employee scope changes require careful handling as they affect billing. API tokens need specific scopes (people.read, integrations.read). No webhook support for real-time updates - polling required for fresh data.