Vanta has acquired Riskey! Say hello to the future of continuous vendor risk monitoring in Vanta

One framework for US data privacy

US data privacy laws are fragmented and constantly changing. Vanta’s US Data Privacy (USDP) framework helps you comply with state-level consumer privacy laws through one unified set of controls, so you can scale confidently across the US.

Request a demo

Dashboard for US Data Privacy showing evidence completion at 64%, control status at 59%, and total evidence overlap at 92%, with summary topics and features like integrations and AI remediation.

The Agentic Trust Platform powering security for over [customer_count] customers

Unify state privacy laws

Vanta’s USDP framework replaces state-by-state compliance with one comprehensive control set. Do the work once and satisfy overlapping requirements across 19 state laws including CCPA/CPRA, VCDPA, and CPA.

19 state privacy laws

Vanta supports 19 state privacy laws including CA, CO, CT, DE, IN, IA, KY, MD, MN, MT, NE, NH, NJ, OR, RI, TN, TX, UT, and VA.

Request a demo

Interface showing Security Safeguards Principle with control for asset disposal procedures listing included state laws: California, Utah, Virginia, and more states displayed as abbreviations around a purple gradient.

Connect privacy practices to USDP

Manage your processing activity in a live Data Inventory, connect your ROPAs, and DPIAs in one place—so every processing activity is structured, linked, and continuously validated. When systems, vendors, or AI workflows change, your GDPR posture updates with them.

Request a demo

Dashboard showing completion status with controls OK at 59%, Test progress at 65%, Document progress at 90%, detailed sections for collection processing with 7 out of 9 controls OK, sensitive data processing evidence readiness at 2 of 3, and privacy by design with 26 of 34 controls OK.

Protect consumer data continuously

Move beyond point-in-time checks with continuous monitoring. Vanta alerts you to failing controls and non-compliant employees in real time, helping you protect consumer data and your brand.

Request a demo

Diagram showing USDP at center connected to Cloudflare, AWS, GitHub, Google Cloud, and two other service logos, with test status labels indicating passing or needs remediation.

Framework mapping

Reuse work across GDPR, NIST 800-171, HIPAA, and more. See how much of each framework you’ve already covered so you can plan what’s next and move faster.

60%

GDPR

Protect EU personal data and comply with GDPR, including support for the EU–US Data Privacy Framework.

Learn more

50%

NIST 800-171

Protect controlled unclassified information (CUI) when working with the U.S. government or its contractors.

Learn more

45%

HIPAA

Secure protected health information (PHI) to meet U.S. regulatory requirements for healthcare providers and vendors.

Learn more

Additional features

Request a demo

ROPA management

Create and maintain GDPR-required Records of Processing Activities in Vanta by documenting purposes, data categories, legal bases, and processors in one place.

Access reviews

Ensure only approved users can access systems that handle consumer data with automated access reviews and continuous checks.

Security awareness training

Run built-in privacy and security training to reduce human risk and meet workforce requirements across frameworks.

Data inventory

Centralize a living record of the personal data you collect, where it lives, and who owns it, so privacy teams have a clear, auditable view across systems and teams.

AI-powered compliance

Work smarter with automatic control mapping, policy importing and summaries, proactive SLA remediation, and an interactive policy chatbot.

DPIAs Privacy training

Create impact assessments with instant risk predictions and tie directly to processing activity in Vanta’s Data Inventory, and your ROPA.

“

When organizations leverage Vanta for automated compliance, they reduce their audit completion times by 50%.”