Skip to main content

Managing Your Knowledge Base

✅ Feature availability: This article discusses Questionnaire Automation features, which may require an upgrade or add-on. Refer to Vanta Plans and Pricing for details.

In Customer Trust, the knowledge base is where you manage the source information that powers Questionnaire Automation and resources shared in your Trust Center. Add resources and answers to help Vanta generate accurate responses to incoming questionnaires, manage the visibility of resources on your Trust Center, and track how well your knowledge base is covering the questions you receive.

⚙️ User permissions: Trust Admins, Editors, and Admins can manage the knowledge base and its settings. Trust Collaborators have view-only access unless they’re assigned as a resource or answer library owner. Learn more: User Permissions by Product Area


Getting started

The Knowledge base page is organized into four tabs:

Tab

Description

Upload and manage the documents and files that power Questionnaire Automation and your Trust Center.

Store and manage question-and-answer pairs that Vanta uses to generate responses to incoming questionnaires.

See how well your knowledge base is covering questions from processed questionnaires, and identify gaps to fill.

Surface conflicting or duplicate answer library entries to improve answer accuracy and reduce maintenance overhead.


Resources

Resources are the documents and files in your knowledge base. When added to Questionnaire Automation, Vanta AI extracts and indexes their content to help generate accurate responses. When marked as public or requestable, they appear on your Trust Center for viewers to access.

Uploading resources

  • From the Customer Trust tab, select Knowledge Base.

  • Click Add resources > Upload resource.

  • Select the file(s) and fill in the resource name, description, and visibility on Trust Center.

  • Click Upload. After uploading:

    • For resources with Use for question answering enabled, they'll be scanned and available as a source for Questionnaire Automation in minutes.

    • Resources marked as Public or Requestable will show on the Trust Center.

Adding resources from Vanta

  • From the Customer Trust tab, select Knowledge Base.

  • Click Add resources > Import resources from Vanta.

  • Select the documents you'd like to add to the Knowledge Base. Only approved policies, audit reports, and penetration tests can be synced.

  • Optionally set the visibility on Trust Center and use for Questionnaires.

  • Click Add. After uploading:

    • The resource will be scanned and available in Questionnaire Automation in minutes.

    • Resources marked as Public or Requestable will show on the Trust Center.

Editing resources

  • Click the action menu marked as “...” on the resource you want to edit.

  • From here, you can edit the following for a resource:

    • Resource name

    • Resource description

    • Upload a new version

    • Tags

  • Visibility on Trust Center:

    • Shareable: not visible, can be shared

    • Private: Not visible, cannot be shared

    • Requestable: Visible; viewers must request access

    • Public: Visible, and the viewer can view the content of the resource without a request

  • Use for question answering

    • Turn on or off

    • This is only available to accounts with questionnaire automation

    • Only DOCX and PDF files are supported for use in questionnaire automation

File upload history

  • If you upload a new version of the resource using the Edit option, the version history will be available for you to view.

  • Select the three-dot menu on the resource.

  • Select View file upload history.

  • You can click on any version to download the file or click the clock icon and restore the resource to a previous version.

Customer visibility

From the Knowledge Base, you can update the visibility of resources on your Trust Center. The following options are available:

Visibility option

Shown on Trust Center?

Can it be shared?

Private

No

No

Shareable

No

Yes

Requestable

Yes

Yes, but it requires an access request

Public

Yes

Yes, it does not require an access request

💡 Tip: To customize where a document appears on your public Trust Center, manage its category from the Trust Center editor — not the Knowledge Base.

Deleting resources

Deleting a single resource

  • Click the menu on the resource.

  • Confirm that you want to delete the resource.

    • If the resource is being used for Questionnaires, deleting it will prevent it from being used to answer security questionnaires.

    • If the resource is shown on the Trust Center, deleting it will remove the resource from the Trust Center.

  • Click Delete.

Bulk deleting resources

  • Select the resources you would like to remove from the Knowledge base

  • If this resource is also on your Trust Center

  • Confirm that you want to delete the resources

    • If a resource is being used for questionnaires, deleting it will remove the resource from being used to answer security questionnaires.

    • If a resource is shown on the Trust Center, deleting it will remove the resource from the Trust Center.

  • Click Delete


Answer library

The answer library is where you store question-and-answer pairs that Vanta uses to generate responses to incoming questionnaires. When answering a question, Vanta AI looks up related entries from your library and uses the exact answer if the question matches, or uses it as context to generate a new one.

Importing past questionnaires

  • From the Trust Center page, go to Knowledge Base and then Answer library

  • Click Import questionnaire

  • Select the questionnaire file you would like to import

  • Match the proper question and answer columns

  • Click Confirm

  • Once the import is complete, new and updated answers must be reviewed and approved before they can be used in future questionnaires.

Reviewing and approving changes

When importing or marking a questionnaire as complete, any new or changed answers must be approved before the answers are applied to the answer library.

  • If there are answers to review, a banner will appear on the answer library: "Review answers pending import."

  • Click Review answers

  • If the question to be imported duplicates an existing question, it will be indicated in the “Duplicate questions found" column.

  • Accept or deny the changes. Any accepted changes will be applied to your answer library for use in future questionnaires.

Editing answers

  • Go to the Knowledge Base and then the Answer library

  • Click the menu on the answer you would like to edit

  • Click Edit

  • Make the necessary changes

  • Click Save

Removing answers

  • Go to the Knowledge Base and then the Answer library

  • Select the items you would like to remove

  • Click Delete

  • Confirm deletion

ℹ️ Note: If answers were imported from a completed questionnaire that has since been deleted, those entries will remain in the answer library and need to be removed manually.


Coverage insights

Coverage insights shows how well your knowledge base is covering questions from processed questionnaires. Use it to identify topic areas where your knowledge base has gaps and take targeted action to improve automation performance.

ℹ️ Note: New content added to your knowledge base only impacts coverage calculate for future questionnaires and won't recalculate past coverage.

Understanding coverage scores

The coverage score shows the percentage of questions from processed questionnaires that Vanta was able to answer using your knowledge base.

  • Coverage is based on the actual questions you've received through questionnaire automation—not a measure of how well your knowledge base covers every possible security topic.

  • It doesn't measure answer quality or accuracy. A question counts as covered even if someone later edits the answer.

Viewing, filtering, and exporting data

The Coverage insights tab shows your overall coverage score and a breakdown by topic and subtopic, sorted by lowest coverage first by default.

  • Click any topic to expand it and see its subtopics.

  • Click a subtopic to open a detail panel showing the specific questions Vanta wasn't able to answer based on your knowledge base, along with the source questionnaire and date.

  • Filter by timeframe or a custom date range.

  • Filter by tag to scope the view to questions from questionnaires with that tag (the same tags used to organize your knowledge base).

  • Sort topics by coverage percentage, total questions, or unanswered questions.

  • Download an export of the topic list with coverage data and question counts.

ℹ️ Note: Not all questions will appear in the topic breakdown. Questions that don't map to a recognized security topic category may be excluded.

Adding to answer library

You can add an unanswerable question directly to your answer library to improve future coverage.

To add a question to your answer library:

  1. Click a subtopic to open the detail panel.

  2. Review the unanswerable questions listed. Up to 25 questions are shown per subtopic.

  3. Click the + button to add a question to the answer library.

  4. Edit the question and answer and save.

ℹ️ Note: The new entry will be available for future questionnaires. Since coverage is based on previously processed questionnaires, your score won't change immediately—it will improve as new questionnaires are processed.


Conflicts

Conflicts show answer library entries where Vanta AI has detected conflicting or duplicate responses. Resolving conflicts helps ensure Vanta generates accurate, consistent answers to incoming questionnaires. Responses with different tags aren't compared.

Reviewing conflicts detected

The Conflicts tab shows a list of detected conflicts, each with a plain-language description of the issue and the number of affected entries.

  • Click any conflict to open it and review the details.

  • Refresh the list to check for new conflicts.

There are two types of detected conflicts:

Type

Description

Conflicting answer

Two or more entries answer the same question differently.

Potential duplicate

Two or more entries appear to answer the same question.

Resolving a conflict

When you open a conflict, Vanta shows an AI-generated summary of the contradiction, the most up-to-date answer, and the conflicting entries.

To resolve a conflict:

  1. Review the Summary to understand the contradiction.

  2. Review the Most up to date answer and conflicts detected

  3. Edit or delete entries as needed to reconcile the conflict.

  4. Click Mark as resolved when done.

If the conflict isn't something you need to act on, click Dismiss to remove it from the list.


Automated verification

Automated verification helps you keep your knowledge base accurate and up to date. Assign owners to resources and answers, set a review cadence, and Vanta will notify owners when content is approaching its expiration date.

Setting the review cadence

  • In your account header, click the Settings icon.

  • In the Settings page menu, scroll to the Features section, select Customer Trust, and go to the Knowledge base tab.

  • From here, select the default review cadence using the drop-down. When enabled, new items in the knowledge base will be set to expire based option you select.

ℹ️ Note: Establishing these settings will not automatically enroll your existing resources and question library answers in the review process. You must first assign an owner and set an initial expiration date before knowledge base resources and answers become subject to the review cadence.

Assigning owners

The first step in ensuring successful verification process would be to assign ownership to each item. This will allow the owner to receive notifications related to the verification process and cadence.

Verifying resources and answers

  • Select the resource you would like to verify. This applies to both knowledge base resources, and items in the answer library.

  • Review the resource to ensure its accuracy, and select Mark as verified.

  • The next verification date will automatically be updated based on the cadence established in your settings.

Managing expiration dates

  • If you would like to set the expiration in bulk, you can use filters and multi-select. Once the items have been selected, click Change expiration date.

  • Once the expiration date is nearing, the owner of the resource will be notified. Notification schedules and cadence are established in your settings.