Skip to main content

Whether you’re looking for quick answers or in-depth guidance, our resources are here to assist you effectively.

Vanta Connector

SiftHub's Vanta Connector brings your compliance documents, policies and controls from Vanta into SiftHub. Your SOC 2 report, approved security policies and control descriptions become verified sources for answering security questionnaires, RFPs and prospect questions, without anyone needing to open Vanta.

Jump to setup

What Gets Connected

SiftHub lets you:

  • Connect your Vanta account using a dedicated Vanta application
  • Choose exactly which documents, policies and controls to add
  • Add or remove items at any time from the Manage Vanta window
  • Link Vanta items to specific Collections, or link all of them at once

Only the items you add are used for search and AI-generated answers. Nothing else in your Vanta account is indexed.

Supported Content

SiftHub reads and indexes the following from the items you add:

Content type What SiftHub reads
Documents The uploaded files (PDF, Word, Excel and images), plus name, category, sensitivity flag and upload date
Policies Name, description, status, latest approved version and approval date
Controls Name, description, control ID, domain and owner role

Note: A policy can be added only when its latest version is Approved or Renew soon. Policies with only a draft version appear in the list but can't be selected.

How It Works

Once connected, SiftHub:

  • Indexes the documents, policies and controls you add
  • Updates added items once every 24 hours
  • Makes the content searchable and available for AI-generated answers

Changes in Vanta, such as a new upload of an added document or a newly approved policy version, appear in SiftHub after the next daily sync.

Access Control

Vanta permissions are not enforced within SiftHub. All items you add are accessible to all users in your SiftHub account, including documents marked as sensitive in Vanta.

Using Vanta Content in SiftHub

Your connected Vanta content appears in:

  • Search results with relevant snippets and metadata
  • AI-generated Answers and document Autofill as verified sources
  • Conversations and Narratives with AI Teammate

Answers that use Vanta content show a source chip naming the item, for example Vanta Doc: SOC 2 Type II Report, Vanta Policy: Access Control Policy or Vanta Control: MFA on production access.

Vanta Connector Setup

Time to complete: 5 mins

Permissions Required

Ensure you have the following access and permissions before you begin the setup, or contact the respective administrator for the same.

  • Vanta admin access: To create an application in the Vanta Developer Console.
  • SiftHub Admin or Account Owner role: To connect Vanta from the SiftHub Web App > Connectors > Admin apps page.
  • Item access: Vanta items you add are accessible to all users within your SiftHub account. No additional item-level permissions are required.

Note: Vanta admin access is required to set up the Vanta Connector. If you're not a Vanta admin, contact your Vanta admin to complete Step 1 and share the Client ID and Client secret with you securely.

The process for setting up the Vanta Connector includes the following main steps:

  • Step 1: Create a Manage Vanta application
  • Step 2: Connect Vanta in SiftHub
  • Step 3: Add documents, policies and controls

Step 1: Create a Manage Vanta Application

A Manage Vanta application gives SiftHub a Client ID and Client secret, which let SiftHub read documents, policies and controls from your Vanta account.

  1. Sign in to Vanta and go to Settings → Developer Console.
  2. Click Create.
  3. Select Manage Vanta as the application type.
  4. Enter the application name as SiftHub Connector and add a short description, for example Used by SiftHub to read compliance documents, policies and controls.
  5. Save the application. The Client ID is generated automatically.
  6. Click Generate client secret.
  7. Copy the Client ID and Client secret and keep them for Step 2.

Important: Create a new application only for SiftHub. Do not reuse an application that another integration or script already uses. Vanta allows one active token per application, so sharing it will disconnect either SiftHub or your other integration.

Tip: Store the Client secret securely. If you regenerate it in Vanta later, update the credentials in SiftHub, or the connector will stop syncing.

Note: The application must be of type Manage Vanta. Other application types can't read your documents, policies and controls, and SiftHub will show an error when you connect.

Step 2: Connect Vanta in SiftHub

  1. In the SiftHub Web App, go to Connectors → Admin apps.
  2. Find the Vanta card and click Connect. The Connect Vanta window opens.
  3. Enter the Client ID and Client secret you copied in Step 1. Use the eye icon to show or hide each value.
  4. Click Continue. SiftHub verifies your credentials with Vanta.

Once the credentials are verified, the window changes to Manage Vanta, where you choose what to add.

Note: If you close the window before verification succeeds, nothing is saved and Vanta stays disconnected.

If verification fails, an error appears above the fields and your values stay in place so you can correct them. See Troubleshooting for common errors.

Step 3: Add Documents, Policies and Controls

The Manage Vanta window has three tabs: Documents, Policies and Controls. Each tab starts empty. Only the items you add here are used for search and AI-generated answers.

  1. Open the tab you want, for example Documents, and click Add.
  2. A list of items from your Vanta account opens. Select the checkbox next to each item you want to add.
  3. Click Add. You return to the tab, which now lists the items you added.
  4. Repeat for Policies and Controls.
  5. Click Done to close the window.

The Vanta card now shows Connected. Added items are indexed and become available in search and answers once processing completes.

Tip: Start with the documents your team shares most with prospects, such as your SOC 2 report, penetration test summary and data processing agreement.

Selecting items

  • The list shows 25 items per page by default. Use the arrows at the top right to move between pages, or change the number of items per page.
  • The checkbox in the header selects or clears all items on the current page only.
  • Selections are not kept when you move to another page. Add the items on one page before moving to the next.
  • Items you've already added appear checked and greyed out.
  • Click the back arrow to return to the tabs without adding anything.

What each tab shows

Tab Columns
Documents Name, Category, Is sensitive, Uploaded date
Policies Name, Description, Status, Latest version, Approved on
Controls Name, Description, ID, Domain, Role

Managing the Vanta Connector

Go to Connectors → Admin apps and expand the Vanta card. A connected card shows Manage and Disconnect.

Add more items

  1. Click Manage on the Vanta card.
  2. Open the Documents, Policies or Controls tab.
  3. Click Add document, Add policy or Add control at the top right.
  4. Select the new items and click Add.

Each tab shows the number of added items, a search bar to find them and sortable columns. Click an item's name to open it in Vanta.

Remove items

  1. Click Manage on the Vanta card and open the relevant tab.
  2. Select the items you want to remove.
  3. Click Remove, then click Remove again to confirm.

Removed items stop being used in search and answers, and are delinked from any Collections they were linked to. You can add them again later from the Add list.

Using Vanta Content in Collections

When Vanta is connected, a Vanta tab appears in each Collection alongside your other connected apps. It works like other connector tabs, with Documents, Policies and Controls sub-tabs below the header.

Only items added in the Vanta connector can be linked to a Collection.

  1. Open the Collection and go to the Vanta tab.
  2. Click Link items. The Link items window opens on the sub-tab you were viewing.
  3. Select the items you want, using search to find them.
  4. Click Link to collection.

Note: Switching between the Documents, Policies and Controls tabs in the window clears your selection. Link the items on one tab before moving to the next.

Turn on the Link all toggle and confirm. All current and future Vanta documents, policies and controls are linked to the Collection, and Link items is disabled.

To undo this, turn off the Link all toggle and confirm. This delinks all Vanta items from the Collection.

  1. In the Vanta tab, open the relevant sub-tab.
  2. Select the items you want to delink.
  3. Click Delink and confirm.

The count next to the Vanta tab shows the total number of linked documents, policies and controls.

Troubleshooting

Issue What to do
Invalid credentials when connecting Check that you copied the full Client ID and Client secret with no extra spaces. If the secret was regenerated in Vanta, use the new one.
Error saying the application can't read data The application was not created as Manage Vanta. Create a new Manage Vanta application (Step 1) and use its credentials.
The Add list doesn't load Click Retry. If the problem continues, contact support.
A policy can't be selected Its latest version is not approved in Vanta. Approve the policy in Vanta, then add it in SiftHub.
A recent change in Vanta isn't showing Changes appear after the next daily sync, within 24 hours.

FAQs

Does SiftHub write anything back to Vanta? No. The connector only reads the documents, policies and controls you add.

Does SiftHub import everything in my Vanta account? No. Only the items you add in the Manage Vanta window are indexed and used.

Can I connect more than one Vanta account? No. Each SiftHub account connects to one Vanta account.

If you are experiencing issues with the connector or its setup, contact your SiftHub Customer Success Manager.