How-to · Security ops · Vanta AI · Oct 9, 2026
Answer one Vanta questionnaire row with evidence or Unknown
“Evidence or Unknown” here means every questionnaire answer points at a named document or export you can open — or says Unknown. AI may draft the wording; it does not invent last-review dates or claim controls you cannot show.
Who this is for
Security and compliance teams who already keep questionnaires and evidence in Vanta and want AI help that stays grounded in that evidence. If Vanta is not your compliance home (governance, risk and compliance, often shortened to GRC), do not move a questionnaire into it just to try an assist. If you need prose drafts beside Vanta, see Claude for security ops. This page is not audit, legal, or certification advice.
How to do it
This page is a how-to. It is not a compliance vendor comparison and not an audit opinion. The Vanta AI review covers the AI Agent and questionnaire features; this page is the narrower routine — one row, one piece of evidence or the word Unknown, and a person who submits. Check which AI features your workspace shows before assuming a button exists.
1. Step 1 — Pick one questionnaire row
What it is: Limit the pilot to a single row of a vendor or security questionnaire you must answer this week. A small scope beats dumping a whole portal into an assistant.
- Choose one row with a clear control theme (access reviews, encryption in transit, incident response, and so on).
- Note the requester’s deadline and who owns the final submit.
- Gather the two or three evidence files you believe apply — or admit you do not have them yet.
- Out of scope for this first pass: rewriting your whole control library.
A row with no owner is the first finding. Fix that before any assistant touches it.
Row: “Do you perform periodic access reviews?” Deadline Friday. The security lead owns it. Candidate evidence: the last access-review export and the policy PDF. No new policy is drafted just to fill the row.
Write four things on a sticky note: questionnaire name — row text — owner — deadline. If you cannot name the owner, stop. Do not let AI answer a row nobody owns.
2. Step 2 — Name the evidence or write Unknown
What it is: Use Vanta’s AI features (where your plan includes them) to draft an answer that either cites a named piece of evidence or says Unknown. Prefer dates from files over marketing language.
- Fixed shape: draft answer | evidence name and date | Unknowns | reviewer.
- If the last review file is old, write the real date — do not upgrade it to “we review annually” without the file.
- Escalate anything that reads like a claim that a control works when you cannot show it.
- Keep drafts inside Vanta or your approved evidence store — not a personal chat with production screenshots.
Vanta’s pricing page lists AI-powered Questionnaire Automation on Plus (25 questionnaires a year) and Professional (144 a year); on Essentials it is an optional add-on. The AI Agent’s search and evidence checks are listed from Essentials up.
The draft describes annual access reviews. The last review file is 18 months old. The owner writes that date in the answer and marks “current annual cadence” as Unknown until the next review is done. The evidence name stays in the row.
For one row, produce three things: a draft answer of at most five sentences, the evidence file name and date (or the word Unknown), and the reviewer’s initials. Delete any sentence that invents a date.
3. Step 3 — A person submits
What it is: A hard gate: AI drafts; a named person submits the response and attaches the evidence.
- Ban auto-submit from AI output.
- Require the owner to open the evidence link before clicking submit.
- Log Unknowns as follow-up tickets — do not paper over them with confident prose.
- If counsel or an auditor must review, wait. This how-to does not replace that review.
Security questionnaires often arrive with a contract. If a clause in that contract needs the same quote-or-Unknown treatment, see Quote one clause against the Ironclad playbook — or Unknown.
The AI draft says “continuous monitoring with weekly reviews.” The evidence shows monthly exports. The owner rewrites it to monthly, attaches the export, then submits. New rule: no cadence claims without a dated file.
Add a four-item checklist to the row: “Evidence opened? Dates match the draft? Unknowns listed? Person submitting named?” Run one five-minute dry run where the draft invents a date, and confirm the submit step still blocks it.
Pricing context (October 2026)
This how-to is not a price sheet. Plan detail for Vanta AI lives on that review. Recheck the vendor’s site before you budget. Dated October 2026.
Checked Oct 9, 2026 on the vendor’s own pricing page: vanta.com/pricing shows no list price. It names four plans — Essentials, Plus, Professional, and Enterprise — and asks you to request a demo for personalized pricing. So this page gives no Vanta dollar figure; budget from your quote. Questionnaire Automation is listed as 25 questionnaires a year on Plus and 144 on Professional, with an optional add-on on Essentials.
Uncertainty: Feature names, questionnaire limits, and which workspaces have the AI features change, and pricing is quoted. If an invoice and a review disagree, trust the invoice. Do not paste a marketing list price you did not pay. The only prices this site sells here are the optional $9 AI toolkit spreadsheet and $19 AI toolkit audit.
When this helps (honest take)
Useful when Vanta already holds the questionnaire and the evidence, answers repeat every week, and the team is comfortable writing Unknown.
Not useful when you want AI to invent how mature a control is, backdate reviews, or replace an auditor’s or counsel’s judgment. Empty evidence folders are a hygiene problem first — not a model problem.
Related options (educational)
| Need | Where to look | Why |
|---|---|---|
| Questionnaire and evidence assists | Vanta AI | When Vanta is your compliance system of record |
| Security prose beside Vanta | Claude for security ops | Drafts with the Unknown rule — not audit advice |
| Contract clause that came with the questionnaire | Quote one clause against the Ironclad playbook — or Unknown | Quote or Unknown, counsel decides |
| Seat overlap check | Three checks before you add another AI seat | Live how-to before adding another seat |
Related reviews: Vanta AI · Claude for security ops · Ironclad AI. Related how-tos: Three checks before you add another AI seat · Quote one clause against the Ironclad playbook — or Unknown. Free: seat-waste calculator if Vanta AI and a chat seat answer the same questionnaire rows.
FAQ
Is this audit or legal advice?
No. Drafts and evidence pointers are for human review. Escalate to counsel or your auditor when your process requires it.
Can AI submit the questionnaire with this routine?
No. People submit after opening the evidence.
What if the only evidence is out of date?
Write the real date and mark the current cadence Unknown. Open a follow-up to run the review; do not reword the answer to hide the gap.
Where do dated prices live?
On the Vanta AI review and vanta.com/pricing. This October 2026 how-to only repeats prices we checked on the vendor’s own pricing page on Oct 9, 2026. Vanta showed no public price that day.
Optional next step
Free reviews stay free. Neither offer is required to use this page. If Vanta AI and another compliance or chat seat already cover the same questionnaire job, optional help: $9 AI toolkit spreadsheet (seats, spend, owner, cancel-by, overlap) or $19 AI toolkit audit when you want a written memo.