Vanta

Active, privately held.

Sources 1, 2, 3, 4, 5, 6 · checked 2026-11-08

• ISO 42001 framework: policy and document templates, mapped controls, AI-specific risk scenarios, AI system and people scoping, nonconformity management, and access to ISO 42001-accredited auditors in the platform
• EU AI Act framework: guided workflows and templates, AI inventory of tools and use cases, EU AI Act-aligned impact assessments, and evidence reuse from ISO 42001 and NIST AI RMF
• NIST AI RMF framework: mapped controls, AI risk registers, automated evidence collection from connected tools, continuous control monitoring, and exportable gap assessments
• Trust Center for sharing AI governance materials with customers

Sources 1, 2, 3, 4, 5, 6 · checked 2026-11-08

• Companies already running SOC 2 or ISO 27001 that want to add ISO 42001, EU AI Act, or NIST AI RMF in the same platform
• Teams that want auditor access and evidence automation in one tool

Sources 1, 2, 3, 4, 5, 6 · checked 2026-11-08

Contact vendor (pricing page lists Essentials, Plus, Professional, and Enterprise plans with personalized pricing by demo)

Sources 1, 2, 3, 4, 5, 6 · checked 2026-11-08

• SOC 2 Type 2 (listed in Trust Center)
• ISO/IEC 27001:2022 and ISO/IEC 27701:2019 (certificate listed in Trust Center)
• ISO/IEC 42001:2023 (scope limited to the AI management system supporting the Vanta trust management platform)

Listed as stated by the vendor. Scope can differ by product or subsidiary; request current reports.

Sources 1, 2, 3, 4, 5, 6 · checked 2026-11-08

• No public pricing
• Framework pages show coverage percentages for EU AI Act and NIST AI RMF mapping from ISO 42001 without explaining what they measure; ask for the control mapping
• Vanta's own ISO 42001 certificate covers its trust management platform AIMS only

Sources 1, 2, 3, 4, 5, 6 · checked 2026-11-08