Learning, policies and compliance
Vanta compliance sync
Autessa Homebase integrates with Vanta: approved policies come in from Vanta every morning and are sent to employees to acknowledge, training completions go back to Vanta every day, and a signed export of every policy acceptance, with a SHA-256 manifest kept in an append-only log, can be sent to a Vanta document.
- Approved policies in from Vanta each morning
- Training completions out to Vanta each day
- Signed acceptance log with a SHA-256 manifest
- A launch email with everyone’s open policies and trainings
The problem
Compliance evidence living in two places
Your compliance platform holds the approved policies, but employees acknowledge and train somewhere else, and someone has to copy the evidence back. Homebase closes that loop, so what Vanta approves is what people read, and what people complete is what Vanta sees.
How it works
How vanta compliance sync works in Homebase
Connect Vanta
In Settings → Vanta compliance, an HR administrator connects Vanta. The credentials are stored as sealed secrets only Homebase’s Vanta connection can use; nobody can view them.
Policies come in
Every morning Homebase reads the company’s approved policies from Vanta, or fetch them now. A newly approved version asks everyone to read it again.
Trainings go out
Trainings marked Send completions to Vanta are sent every day: who completed them and who has not yet.
Send the acceptance log
Export all policies (signed): Homebase hashes the export, keeps it in an append-only log, and sends it to the Vanta document you choose. Any export can be downloaded exactly as hashed.
Options and settings
Every option, in plain words
| Option | What it does |
|---|---|
| Update policies from Vanta every morning | The daily policy feed, on or off, with Get approved policies now. |
| Days people have to read a policy | Applied to new and re-approved policies. |
| Send training records to Vanta every day | The daily training sync, on or off, with Send training records now. |
| Compliance training type | Map each training to Vanta’s required training categories. |
| Signed export | All policy acceptances, with a SHA-256 hash and manifest, kept in an append-only log. |
| Vanta document that receives the log | Where the signed export is sent for review in Vanta. |
| Hash check | An export that no longer matches its recorded hash is flagged; export again. |
| Launch email | Everyone’s open policies and trainings, previewed before it is sent. |
Permissions
Who can do what
Connected
How it connects to the rest of Homebase
FAQ
Questions about vanta compliance sync
Does Autessa Homebase integrate with Vanta?
Yes. Homebase reads approved policies from Vanta every morning and sends training completions to Vanta every day, and can send a signed policy acceptance log to a Vanta document.
What is the signed acceptance log?
It is an export of all policy acceptances with a SHA-256 hash and manifest, kept in an append-only log. You can download any export exactly as hashed and send it to Vanta.
Where are the Vanta credentials kept?
As sealed secrets that only Homebase’s Vanta connection can use. Nobody can view them.
Where are Vanta policies edited?
In Vanta, which stays the source of approved policies. Homebase picks up each newly approved version the next morning and asks everyone to read it again.
How does Homebase help with compliance?
Homebase records every acknowledgment and training completion and keeps the evidence ready for your auditors. For Autessa’s own security posture, see the Trust Center.
100% customizable, code and all
Make Autessa Homebase fully your own.
Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.
Start free and make it yours