Participation

EU-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 1/14/2018
Next Certification Due Date: 4/23/2024
Data Collected: NON-HR

Swiss-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 1/14/2018
Next Certification Due Date: 4/23/2024
Data Collected: NON-HR

Purpose of Data Collection

Vanta provides online information security monitoring tools so that our customers can monitor aspects of their security posture and their business' compliance. In providing these services, Vanta processes data our customers submit to the Services or instruct us to process on their behalves in connection with the services ("Customer Data.") While our customers decide what data to submit, Customer Data typically includes full names, email addresses, and in some cases, a personal telephone number. Vanta may disclose that information to our third-party infrastructure provider, Amazon Web Services.

Privacy Policy

HR and Non-HR Data

Description:

Privacy Policy

Effective Date: 10/26/2021

Verification Method

Self-Assessment

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Vanta at:

Matt Cooper
Principal, Cybersecurity & Data Privacy
Vanta
Vanta
369 Hayes St.
San Francisco, California 94102

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Vanta to your question or complaint, please contact the independent recourse mechanism listed below


NON-HR RECOURSE MECHANISM



Appropriate statutory body with jurisdiction to investigate any claims against Vanta regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission