Setting the Standard for AI Compliance: Vanta Introduces AI Security Assessment

New offering helps organizations easily evaluate vendor AI risk

Vanta becomes first trust management platform to achieve ISO 42001

Debuting new AI achievements and resources at booth #2127 at RSA Conference April 28 – May 1

SAN FRANCISCO--(BUSINESS WIRE)--Vanta, the leading trust management platform, today announced new ways to help organizations confidently demonstrate AI security and evaluate AI risk across their ecosystem. With the launch of Vanta’s new AI Security Assessment offering, customers using, developing or building with AI can now more effectively address critical considerations and proactively strengthen their AI security posture. Vanta will showcase the AI Security Assessment and more during next week’s RSA Conference April 28 – May 1, 2025 in San Francisco at booth #2127.

As AI evolves and becomes increasingly ubiquitous, demonstrating secure practices and managing vendor risk are critical for maintaining trust. According to Vanta’s State of Trust report, 62% of organizations plan to invest more in AI security in 2025, but only 36% of organizations have, or are in the process of putting a company AI policy in place.

“AI has become foundational to how businesses operate, and every company—not just those building AI—need to engage with it responsibly on behalf of their customers, vendors and stakeholders,” said Jeremy Epling, Chief Product Officer, Vanta. “Regulations are moving quickly, and so are the risks. With Vanta’s AI Security Assessment, we’re giving companies a practical, scalable way to assess AI-related risk, demonstrate their AI posture and build trust in a rapidly changing landscape. Earning our ISO 42001 certification reinforces that commitment, setting the standard not just for our customers, but for ourselves and the industry as a whole.”

AI Security Assessment Built by Experts and Powered by Insights

Available today, Vanta’s AI Security Assessment provides a standardized approach to evaluating AI-related security risks and enables companies to have a better understanding of how these risks impact their overall security program. AI Security Assessments feature an accessible and practical set of evaluative questions covering ten critical categories, from governance and organizational management, data privacy and security, bias, human oversight and more.

With AI Security Assessment, customers can:

• Demonstrate AI posture proactively: Completed assessments can be published on a public-facing Trust Center, making them easily accessible to customers and partners.
• Complete questionnaires faster: Assessments can be added to Vanta’s knowledge base to power AI-generated responses in Vanta’s Questionnaire Automation tool—helping security teams cut down the time it takes to respond to incoming security questionnaires.
• Evaluate vendor AI risk: AI Security Assessment questions are now part of Vanta’s Vendor Risk Management questionnaires, enabling customers to confidently assess vendor AI risk.

“As companies race to adopt AI, standardized approaches like Vanta's AI Security Assessment bring much-needed clarity and accountability to how AI systems are secured and governed,” said Ryan Maple, Head of Information Security and Compliance, Writer. “We were glad to contribute input based on what we’re seeing across the industry and hope this helps raise the bar for responsible AI practices.”

Vanta AI Security Assessment questions are aligned to Vanta-supported AI compliance frameworks, including NIST AI RMF, EU AI Act and ISO 42001, helping customers ensure compliance as regulations evolve. The assessment supports customization with tiered questions based on how a company engages with AI:

• For companies using AI, including AI software products or software built with AI: the assessment provides a basic AI security evaluation.
• For companies building with AI, or providing AI-powered products and services: the assessment layers on additional questions to evaluate AI supply chain risks, cross-functional review processes, model training methods, drift and performance degradation, and more.
• For companies developing AI models and training AI systems: the evaluation includes additional questions about access controls, issue reporting protocols, risk level classification, procurement policies and more.

Vanta Achieves ISO 42001 Certification for Responsible AI Practices

As the leading trust management platform, Vanta is the first and only compliance automation and trust management platform to earn its ISO 42001 certification, the international standard for managing artificial intelligence responsibly. Leading by example, Vanta helps customers navigate emerging AI risk and regulation with guidance grounded in firsthand experience with the framework.

“The regulatory landscape around AI continues to evolve, and Vanta is committed to not only keeping pace, but leading with transparency and trust,” said Jadee Hanson, CISO, Vanta. “Achieving our ISO 42001 certification is one step in our ongoing journey to establish trust in the age of AI, and to support the GRC community as we navigate this shift together.”

To benefit its customers, Vanta is expanding its applications of Vanta AI throughout the platform and adopting AI to power operations across its business. This certification ensures that this growth is rooted in responsible practices and demonstrates Vanta’s focus on transparency and continuous improvement.

Vanta’s ISO 42001 badge and certificate are available in its Trust Center, along with its own AI Security Assessment.

Coming Soon – VantaCon 2025: Where the GRC Community Shapes What’s Next

To continue leading the conversation on the intersection of trust and AI, Vanta’s fourth annual user conference, VantaCon, will return to San Francisco on November 19, 2025. The event will host the GRC community, including security and compliance leaders, for a full-day of collaboration and programming focused on how AI is rewriting trust. Featuring product announcements, panels and keynotes from the leaders shaping the industry and collaborative breakout sessions, VantaCon will serve as the forum for the GRC community to collectively shape the future. Registration will open on May 1, 2025 on www.vanta.com.

About Vanta

Vanta is the leading trust management platform that helps simplify and centralize security for organizations of all sizes. Over 10,000 companies including Atlassian, Omni Hotels, Quora, and ZoomInfo rely on Vanta to build, maintain and demonstrate their trust—all in a way that's real-time and transparent. Founded in 2018, Vanta has customers in 58 countries with offices in Dublin, London, New York, San Francisco and Sydney. For more information, visit www.vanta.com.