Skip to main content

System Description Generator

✅ Feature availability: The system description generator is available for Vanta’s built-in SOC 2 framework only.

A SOC 2 system description outlines the scope of a SOC report, including your processes, people, and tech stack. Vanta's smart system description generator helps you create one using a guided, step-by-step template that prefills information already in Vanta, such as system components and SLAs, helping save you hours of manual work.

Editing your system description

The system description button only appears when using Vanta's built-in SOC 2 framework. Other frameworks, as well as custom frameworks with SOC 2 in the name field won’t show this button.

To edit your system description:

  1. Go to the Frameworks page.

  2. Open the SOC 2 framework that shows Vanta as the source

    and go to the Controls tab.

  3. Click the system description button—this takes you to the system description document page in Vanta.

  4. In the Evidence tab, you can either (a) upload your own completed system description or (b) use the system description generator to create one.

Using the system description generator

To create your system description using Vanta's system description generator, complete the template in Vanta, generate the draft to download, then review and finalize it before submitting it as evidence.

Completing the template

  • The system description template includes several sections covering your company information, system components, people, processes, and more. Work through each section and fill in the required information. Your inputs are autosaved, so you can leave and return at any time.

  • Some fields may be prefilled using data already available in your Vanta account. Review all prefilled content and update it as needed to make sure it accurately reflects your environment.

Generating a draft

  • When you've completed the template, click the Generate Draft button in the top-right corner.

  • If any required fields are blank, Vanta will prompt you to go back and fill them in before proceeding.

  • Generation may take up to 30 seconds. When complete, the DOCX file will download to your computer. You'll need to upload it manually as evidence once it's ready.

Completing placeholder fields

  • Open the downloaded file and review it carefully before uploading it as evidence. Replace any placeholders with the correct information.

  • Vanta prefills certain fields using recognized data from your account, such as supported system components and other configuration details.

  • If your system includes custom or unsupported entries, those fields in the generated document will be marked with a <table-input> placeholder and will need to be completed manually.