Vanta: Trust page changed
Vanta’s Trust page added “Production database access restricted” and removed “Production data segmented” from its displayed Infrastructure Security controls. The listed security assurances changed, but the diff does not establish whether the underlying controls changed.
Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.
What changed
Struck in red is what Vanta removed; blue is what they added. Muted text is unchanged context.
Compared with the previous archived version (#12087 to #12556). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).
Archive proof
Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.
How the archive is checked, and what it cannot prove.
Before captured
In the 2026-10-31 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
06a952a862b3daee…After captured
In the 2026-11-01 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
a15d02fa8e4b6dd1…
History of this page
YesterdaySunday, November 1Sun, Nov 1
1 page change
- Content changedPage change
Trust pagechangedthis change
Vanta’s Trust page added “Production database access restricted” and removed “Production data segmented” from its displayed Infrastructure Security controls. The listed security assurances changed, but the diff does not establish whether the underlying controls changed.
Saturday, October 31
1 page change
- Content changedPage change
Trust pagechanged
Vanta’s Trust page removed “Production database access restricted” and added “Production data segmented” in Infrastructure Security. This changes the controls shown to customers reviewing Vanta’s security posture, but does not establish whether the underlying controls changed.
Saturday, October 24
1 page change
- Content changedPage change
Trust pagechanged
Vanta’s Trust page added “Production database access restricted” and “Data encryption utilized” control listings, while removing “Production data segmented” and a security-controls FAQ question. Customers reviewing security assurances now see different controls listed; the diff does not establish changes to underlying security practices.
Friday, October 23
1 page change
- Content changedPage change
Trust pagechanged
Vanta reported applying all necessary patches for Node.js vulnerabilities, including CVE-2026-111497, by October 22 following security updates on October 21. The Trust page also changed its displayed security controls; these listing changes do not establish that underlying protections were discontinued.
Thursday, October 22
1 page change
- Content changedPage change
Trust pagechanged
Vanta added “Penetration Test Status of Findings (Oct 2026)” and a PHP vulnerability response stating its application does not use PHP and production infrastructure is unaffected. Displayed controls replace “Production inventory maintained” with “Password policy enforced”; the SOC 2 report announcement was removed. These update customer-facing security disclosures without establishing changes to underlying controls.
Wednesday, October 21
1 page change
- Content changedPage change
Trust pagechanged
Vanta’s trust page removed “Password policy enforced” and added “Production inventory maintained” in the visible Organizational Security controls list. This changes the controls shown to customers, but the diff does not establish whether the underlying controls changed.
Tuesday, October 20
1 page change
- Content changedPage change
Trust pagechanged
Vanta’s Trust page removed the question “How does Vanta handle access controls and authentication?” This is a page-content change; the evidence does not show any change to Vanta’s security controls.
Monday, October 19
1 page change
- Content changedPage change
Trust pagechanged
Vanta’s Trust page added the question “How does Vanta handle access controls and authentication?” The diff shows no answer or security-control change, so this is informational wording only.