# Access Review: Vanta Integration

Vanta is a security and compliance tool that helps companies achieve compliance with SOC 2, ISO 27001, and other security standards. Vanta provides a platform that helps companies prepare for audits by automating the collection of evidence and providing guidance on how to improve security practices.

Cloudback integrates with Vanta to provide a smooth experience for customers who use both services. This document explains how to set up the integration and what data is shared between Cloudback and Vanta.

## Setting up the Integration

To set up the integration between Cloudback and Vanta, follow these steps:

* Log in to Vanta, and navigate to the [Integrations page](https://app.vanta.com/integrations?state=available).
* Locate "Cloudback" in the list, click "Connect," then select "Connect to Cloudback".
* Follow the installation instructions. You will be redirected to Cloudback to log in and authorize the integration.
* Once the installation is complete, you will be redirected back to Vanta. Cloudback will now be connected and users automatically uploaded to Vanta.

## Data Shared with Vanta

The Cloudback-Vanta integration automatically syncs user data between Cloudback and Vanta. Cloudback sends a list of users to Vanta, including their email addresses. The list takes into account all users who have access to Cloudback across all connected platform accounts. For example, if you have 3 different GitHub organizations and 1 Linear workspace connected to Cloudback, Vanta will receive a combined list of users from all 4 accounts.

Cloudback shares the following user data with Vanta:

* **Account:** Platform account name
* **Email address:** The email address associated with the user's account
* **User role:** Cloudback roles are mapped to Vanta permission levels as follows: **Global Admin** → `ADMIN`, **Admin** → `EDITOR`, all other roles → `BASE`.

All the data is shared immediately after the integration is enabled, and every 24 hours to ensure that Vanta has the most up-to-date information about Cloudback users. If something goes wrong during the data sync, Cloudback will automatically disable the integration. The integration can be re-enabled by following the steps outlined in the "Setting up the Integration" section. You can check the reason for the integration failure in the audit log.

## Audit Log

Cloudback records all user actions in an audit log. The audit log also captures all actions related to the Vanta integration, including when the integration was enabled, disabled, or updated. The audit log is available to all Cloudback users. To locate the audit log records related to the Vanta integration, filter the log by the "Vanta Integration" action type.

## Disabling the Integration

To disable the Cloudback-Vanta integration, follow these steps:

* Log in to Vanta, and navigate to the [Integrations page](https://app.vanta.com/integrations?state=connected).
* Locate "Cloudback" in the list, click "Manage" then select "Delete".
* Confirm the deletion by clicking "Delete credential and data" in the confirmation dialog.

Cloudback will automatically stop sharing user data with Vanta once the integration is disabled; no further action is required.

## Learn More

* [Vanta Partners](https://www.vanta.com/partners/find-a-partner)
* [Cloudback on Vanta partners page](https://www.vanta.com/partners/find-a-partner?title=Cloudback)
* [Audit Log](https://docs.cloudback.it/security-and-compliance/audit-log)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cloudback.it/security-and-compliance/vanta-integration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.