San Francisco-based Vanta, an AI-powered trust management platform, announced it has raised $150 million in Series D funding, valuing the company at $4.15 billion. The round was led by new investor Wellington Management and included existing investors such as Growth Equity at Goldman Sachs Alternatives, Sequoia, J.P. Morgan, Craft Ventures, Y Combinator, Atlassian Ventures, and CrowdStrike Ventures. This funding brings Vanta’s total capital raised to $504 million since 2021.
Christina Cacioppo, CEO of Vanta, stated, “We started Vanta with a simple belief: if we made it easier to share trust between businesses, all companies could grow faster and more securely. Today, we’re helping businesses earn and prove trust—enabling over 12,000 companies to scale security and GRC the way they scale software. With this new funding, we’ll accelerate Vanta’s AI innovation and expansion into new areas like third-party risk and government compliance—solving more of the real, day-to-day challenges our customers face.”
Vanta, founded in 2018, initially focused on automating SOC 2 compliance for startups. It has since evolved into a comprehensive AI trust management platform. The platform serves over 12,000 companies across 58 countries, ranging from seed-stage businesses to Fortune 50 corporations, by continuously monitoring risk, maintaining compliance, and demonstrating trust in real time. Vanta reports 10 million Trust Center views and 200 million resources continuously monitored. According to IDC, customers achieve a 526% ROI over three years, with compliance teams becoming 129% more productive and preparing 142% more framework and attestation-related audits annually. The platform supports zero-touch verification across various compliance and security controls, offering integrated tools for vendor risk management, access reviews, and risk management, alongside Trust Centers that provide real-time transparency.
Vanta’s newly introduced AI Agent integrates across the platform to assist teams with workflows, identify inconsistencies, answer policy questions, and automate tasks like evidence verification, potentially saving teams up to 12 hours per week. Its AI-powered Questionnaire Automation drafts more than 80% of responses to security questionnaires, with a 95% acceptance rate, reducing security review times by half. These AI innovations aim to address common challenges faced by GRC and security teams, such as evidence collection and managing fragmented tools.
Matt Witheiler, Head of Late-Stage Growth at Wellington Management, commented on the investment, “Vanta’s AI-driven platform is moving beyond the standard for security and compliance — with real-time, continuous verification that’s essential for every industry in today’s business environment. Christina and Vanta have created something truly special and we look forward to seeing their impact grow as they expand into new markets and push the boundaries of what’s possible for trust management in the age of AI.”
Businesses including Icelandair, Intercom, Mistral AI, Omni Hotels, and Salvation Army Australia utilize Vanta for their trust management. Specific examples include Duolingo, which reports saving 12 hours per week and hundreds of thousands of dollars with AI-powered Vendor Risk Management (VRM). Snowflake uses its Compliance Center, powered by Vanta, to save security team time and expedite manual customer due-diligence. Atlassian enables over 400 partners to demonstrate trust through compliance milestones and Trust Centers. Ramp utilizes Vanta to integrate custom controls into continuously monitored frameworks, eliminating the need for spreadsheets. WRITER has reduced vendor reviews and access audits from multiple hours to under 20 minutes using Vanta AI.
In the past year, Vanta expanded its platform and global presence significantly. This included launching 350 new features, such as the Vanta AI Agent and AI Assessments, and acquiring Riskey to enhance continuous, AI-driven vendor security reviews. Vanta introduced Vanta for Marketplaces to assist ecosystem leaders like Atlassian and Snowflake in managing partner trust, and rolled out Policy Builder for startups to create and maintain audit-ready policies. The company also expanded support for government compliance frameworks including FedRAMP, CMMC, and NIST 800-53. Globally, Vanta opened an office in London, launched an Australian data center, and grew to over 1,000 employees worldwide, with offices in Dublin, London, New York, San Francisco, and Sydney.
