Who manages Vanta after onboarding?

Onboarding gets you connected integrations, a loaded policy library, and a mostly green dashboard — a snapshot. Operations is what happens to that snapshot over time: every new hire spawns tasks, OAuth tokens expire, an infrastructure change flips a test, quarterly access reviews come due, policies hit their annual review dates, and the evidence window keeps rolling toward the next audit. Vanta’s job is to notice all of this. Noticing is not fixing — under the shared responsibility model, acting on findings is always the customer’s side of the line.

The failure mode has a recognizable shape. The first audit passes on founder adrenaline. Then the person who ran the push gets reassigned or leaves, red tests get batched “for later”, and by month eighteen the dashboard no longer describes the company — right when a renewal audit or a big customer’s questionnaire arrives. Having helped 1,000+ companies with security and compliance, we’ve watched exactly where instances decay first: personnel tasks, then integrations, then evidence.

The durable fix is an owner with recurring hours. If that person exists internally, protect their calendar. If not, Managed Vanta assigns named engineers who keep the tenant audit-ready between audits, not just during them.