This integration is available for Vanta VRM customers who also have Zip accounts. With this integration, when a vendor in Zip is identified as needing a security review, the vendor will automatically be added to your Vanta VRM tool. Once the security review is complete, the outcome will be pulled back into Zip.
If you are interested in this integration, please let us know by sharing your email in this quick form. If this integration is a good fit for you, the Zip team will discuss the next steps. When Zip notifies you that your integration is ready for implementation, return to this article for step-by-step guidance. If you need help troubleshooting the Zip workflow, please refer to Zip’s help center documentation or contact the Zip support team from their help center. If you face any trouble connecting the VRM integration, don't hesitate to contact your Vanta account manager.
Create an API token in Vanta
- From the left-hand navigation panel, select Settings
- Select GraphQL API tokens
- Select + Create
- Add information
- Name: Used to identify the API token
- Description: Used for reporting
- Scope: Manage Vendors
- Expire from created date: How long the token is valid for
- Select Create
- Save the API key, as you will need it in future steps. You will not be able to access the key again once the modal is closed
When ready to use this integration, please reach out to your CSM. They will ensure the Zip & Vanta procurement template is added to your Zip instance.
Set up the Integration in Zip
- Select the gear icon in the top right-hand corner
- Select Company Settings
- Select Integrations in the left-hand navigation panel
- Select Custom apps, open the Vanta badge
- Please note that the integration template has yet to be enabled if you do not see the Vanta badge. Reach out to your CSM for assistance.
Create a New Connection in Zip
- From the newly added Custom app, select +New Connection
- Complete the following information:
-
- Name: anything you want (Production)
- Auth type: Bearer token
- Header key prefix: token
- API base URL: https://api.vanta.com or https://api.eu.vanta.com
- Secret key: the API token you created in step 1
- Test path:
-
/graphql?query=%7Bhealth%7Bok%0Aok%7D%7D%20
- Test credentials and ensure it says:
{"data":{"health":{"ok":true}}}
- Select Create
Enable the Connection
- From the Custom Integrations tab, open the Vanta Procurement Task template
- For each of Vanta's steps in the workflow, you will need to apply the connection (look for the Vanta logo)
- Once a step has been selected, click the radio button next to Vanta
- Changes will be saved automatically
- This must be done for every Vanta step