Vendor profile
Vanta: where is customer data stored and processed?
Vanta stores customer data in Europe (country not stated), the USA, and Australia, with Australia only for customers outside the EU/EEA; the EU option is given without naming a country, and it is not stated how customers choose region. Vanta Inc. is headquartered in the USA, and the data processing addendum has been read, but it does not state where data is stored, so storage location comes from other sources. Processing runs on AWS infrastructure in the US, EU or Australia, and customers outside the EU/EEA may be processed in the USA. Logging and monitoring (Datadog), customer notifications (Courier) and AI sub-processors (including OpenAI, Anthropic and Google) are located in the USA, and support tooling (Intercom) is documented as US-based.
Checked 19 October 2026 · based on the vendor's own public documents
See the map and sources
Where data is stored and processed
| Activity | In the EU/EEA | Outside the EU/EEA |
|---|
| Storage | Europe (country not stated) | USA
Only for customers in other regions: Australia |
|---|
| Processing | Europe (country not stated) | –
Only for customers in other regions: USA, Australia |
|---|
| Logs and telemetry | – | USA |
|---|
| Analytics and metadata | – | USA |
|---|
| Notifications and email | – | USA |
|---|
| Support | – | USA |
|---|
| AI features | – | USA |
|---|
Only outside the EU/EEA, with no European alternative stated: Logs and telemetry, Notifications and email, Support, AI features, Analytics and metadata.
Ownership and agreements
| Headquarters | USA |
|---|
| Data processing agreement | Found and read |
|---|
| Certifications | SOC 2, ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 42001, PCI DSS, FedRAMP |
|---|
Sub-processors (42)
| Name | Country | Purpose |
|---|
| Amazon Web Services | USA | Infrastructure Hosting |
| Mongo DB Inc. | USA | Database Hosting |
| Chameleon Intelligent Tech, Inc. | USA | Application notifications |
| Cloudflare | USA | Hosting and Content Delivery |
| Confluent | USA | Platform Data Streaming |
| Datadog | USA | Logging & Monitoring |
| Courier | USA | Customer Notification Delivery |
| svix | USA | Webhook Delivery |
| Snowflake Inc. | USA | Data Warehouse |
| Sigma | USA | BI Analytics |
| Coefficient.io | USA | Analytics & Reporting |
| Dagster Labs | USA | Data pipeline orchestration |
| Fivetran | USA | Logging & Monitoring |
| Qlik | USA | Analytics support |
| Polytomic | USA | Data Integration and Streaming |
Sources