Vanta lets you export data from most areas of the platform. This article covers what you can export, where to find each export option, and current limitations to be aware of.
Note: There is no single "export everything" button in Vanta. Exports are available section by section across the platform.
Documents
Go to the Documents page.
Click ... (more options).
Click Export All.
Vanta downloads a ZIP file containing all documents stored on the page.
Policies
You have a few options for exporting policies.
To download the policy packet:
Go to the Policies page.
Click ... (more options) and select Download Policy Packet.
This downloads all policies as a single compiled PDF, including acceptance history.
To download individual policies:
Go to the Policies page.
Open a policy and click Download.
Note: Downloading all policies as separate PDFs in a single ZIP is not currently supported. Use the Policy Packet option or download policies individually.
Framework evidence and controls
To export all framework evidence:
Go to Frameworks and open a framework.
Click More and select Export all framework evidence.
Vanta downloads a ZIP folder containing all policies, documents, and automated test files organized by folder structure.
To export controls:
Go to Frameworks and open a framework.
Click More and select Export controls.
Check Include evidence status to include pass/fail status for each test.
Click Download CSV.
To export a gap assessment:
Go to Frameworks and open a framework.
Click More and select the gap assessment export option.
This downloads the gap assessment as a PDF.
Automated test evidence
Vanta runs automated tests on an hourly basis. You can export point-in-time evidence for individual tests.
Note: The Exports section is only available on automated tests. If you open a test and see an uploaded file (like a screenshot or PDF) in the Evidence tab with no Exports section, that is a manual test. To access evidence on a manual test, download the file shown in the Latest version section, or expand Version history to find previous submissions.
To identify whether a test is automated or manual:
Automated tests are run by Vanta through your integrations. They show an Exports section in the Evidence tab with Workpaper and CSV options.
Manual tests require a person to upload a file, screenshot, or URL as proof. They show uploaded files and a Version history section instead.
New Evidence tab (most accounts)
Go to Tests.
Click the relevant automated test to open the Results tab.
Click the Evidence tab.
Scroll to the Exports section.
Click Workpaper to download an immutable, audit-ready export.
Tip: The Workpaper export is locked to preserve audit integrity and is designed to meet auditor standards. For very large datasets, the Workpaper PDF may not include raw JSON data. Use the CSV export for raw data in those cases.
Older Source Data tab (accounts in active audits)
Accounts currently in an active audit may still see the older Source Data tab and will not yet have access to the Workpaper export.
Go to Tests and click the relevant test.
Select the Source Data tab.
Scroll to the bottom of the page.
Click the download button under Full test results.
Note: Once migrated to the new Evidence tab, you'll also be able to download the Workpaper export.
Security awareness training records
To export training completion records:
Go to Tests and search for the relevant training test (for example, "General security awareness training records tracked").
Click the Evidence tab (or Source data tab).
Scroll to the Exports section.
Click Workpaper or the CSV download button.
This export includes training completions, completion dates, user email addresses, and training status.
Note: The People page export does not include third-party integration training records (for example, KnowBe4). Use the Test export for audit-ready training completion records.
People
To export your personnel list:
Go to People.
Click ... and select Export.
Vanta downloads a CSV of your employee list.
Access
To export access data:
Go to Access.
Click Export.
Vanta downloads an Excel file with access data organized by platform.
Computers
To export your device inventory:
Go to Computers.
Click Export in the top right.
Vanta downloads a CSV of your computer inventory.
Vulnerability history
To export vulnerability history:
Go to Vulnerabilities and select the History tab.
Click ... and select Export.
Risk management
To export risk scenarios:
Go to Risk Scenarios and open the Risk Register.
Click ... and select Export all risk scenarios (.csv).
To export a risk register snapshot:
Go to Risk Scenarios and select View Snapshots.
Find the snapshot you want and click Export, then download the file.
Vendors
To export managed vendors:
Go to Vendors and select Active.
Click Export.
To export vendor discovery data:
Go to Vendors and select Discovery.
Click Export.
Questionnaires
To export a questionnaire:
Open the questionnaire you want to export.
Click Export.
Depending on the questionnaire type, you can export in the original format or as a CSV.
Privacy (ROPA)
To export your data inventory or ROPA:
Go to Privacy and select Data Inventory.
Click View ROPA.
Click the export option to download the file as Excel.
Audits
To download completed audit reports:
Go to Audits and select the Completed tab.
Open a completed audit and download the uploaded reports as PDFs.
What can't be exported
Area | Limitation |
Trust Center | Not exportable. The Trust Center is a live page. Certifications stored there can be downloaded individually. |
Historical automated test data (bulk) | No single bulk export for historical test results across all tests. Copy from the History tab or take screenshots per test. |
Policies as individual PDFs (bulk ZIP) | Not supported. Use the Policy Packet or download policies individually. |
Controls export (upload timestamps) | The controls CSV does not include metadata such as when evidence was uploaded or when a document was added. |
All data (single export) | There is no single "export everything" option. Exports are completed section by section. |