Company
Vanta is a compliance automation platform helping companies obtain and maintain certifications like SOC 2 and ISO 27001.
The startup's agents draft security policies and gather audit evidence, and its founders say a person still approves each policy while an independent auditor still signs the report.
Perspective Coverage
3 publishersReality
Suman Shashikumar's open-source evidence collector reads AWS and GitHub controls and labels each finding with the criterion it proves. The branch-protection check is where the labelling gets hard.
Reality
The London GRC startup has raised $7.3m in seed funding for agents that assess third-party risk and show a citation and a confidence score for every conclusion. The part that audits other companies' AI agents is still being built.
Reality
The library maps to ISO 27001 and 42001 rather than asking for a new certificate, which is why trying it costs a scoping meeting. The 22 buyer-side controls are the half that will end up in vendor questionnaires.
Reality
A scan of public AI repositories found the code competent and the paperwork absent, which is the harder problem. The team that ran it puts a from-zero Annex IV package at three to six months, and 2 August 2026 is behind us.
Reality