Vanta

Record your Vanta connection as compliance as code evidence. Automated collection is not available for this provider yet.

Connect with an API token

1. In Vanta:

   1. Sign in to Vanta with admin access and go to Settings › Developer Console, then click Create.
   2. Select Manage Vanta as the application type, enter an application name and description, and save.
   3. Copy the generated client_id, click Generate client secret, and store the secret securely.
   4. Request an access token with a POST to https://api.vanta.com/oauth/token using grant_type client_credentials and scope vanta-api.all:read (read-only).
   5. Paste the returned access_token (starts with vat_) into API token / Personal access token.

   Where to find the other values:

   • Base URL (optional): Vanta's API host is https://api.vanta.com (from the token endpoint in Vanta's setup guide).

   Access tokens expire after one hour, and Vanta allows only one active token per application (requesting a new one revokes the previous one), so a pasted token goes stale fast; client-credential support in the connector would be more durable. The doc does not say explicitly whether the client secret is shown only once.

   Source: developer.vanta.com, checked 2026-10-07.

2. On Compliance › Connectors, open Vanta, click Connect, choose API token and fill in:

   Field	What to enter
   API token / Personal access token	Required. Stored encrypted and never shown again.
   Base URL (optional)	—
   Account / Org / Workspace (optional)	—

3. Click Connect with token.

Frameworks

No automated compliance test reads Vanta yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

Related

• Compliance As Code connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks