Importing your policies into Vanta is a quick and streamlined process designed to save you time and help you stay audit-ready. Whether you're uploading existing documentation or bringing in your policies, Vanta AI makes it simple to upload files, extract key details using AI, and map them to relevant controls. In just a few steps, you can centralize your policy management and start leveraging AI-assisted features to keep your security framework organized and compliant.
Importing Policies
From the Policies page, select Add policy
Select Import policies
Select the policies you would like to upload from your desktop. You may import up to 30 files.
Max file size is 10 MB. Supported file types are .docx and .pdf.
Select Continue to move forward, or select the trash can icon to remove the uploaded file.
Vanta AI will begin extracting policy details. Once completed, AI will generate a policy title, and description.
AI can make mistakes, please verify your information.
Optional: Select your approval date, and assign your approver(s).
Select Continue
AI-Suggested Control Mapping
AI-suggested control mapping is available on a part of Vanta's Growth or higher pricing.
If you are using Vanta's default template stack or bringing in your custom policies, you can use Vanta AI to help you map security controls back to the policy.
Click on the policy you would like to edit.
The controls listed here are the default controls mapped to the policy; they can be removed by clicking the X.
If you would like to add additional controls, select the Map control
Choose from any of the controls within your Vanta instance, or add in controls suggested by AI.
Vanta AI will generate control suggestions that can be added to the policy.
Please note this may take a few moments
Based on suggestions, you can map these controls to the policy.
Select the check mark to map the control to your policy, or the X to reject the suggestion.