If you’re a business leader who regularly fields requests from internal compliance or risk management teams, you know how time-consuming these reviews can be. The VAST Compliance Package was designed to make that process faster and more transparent.
It equips you with the documentation and assurances you need to confidently respond to audits, vendor assessments, and regulatory checks without chasing down reports or waiting on additional information.
With this package, your compliance, risk, and vendor-management team(s) gain trusted evidence of Instantiations’ internal security, resilience, and governance practices, all verified and audit-ready.
The VAST Compliance Package combines essential deliverables for regulated industries with the proven practices Instantiations follows internally:
| Included in the Compliance Package | How Instantiations Backs It Internally |
|---|---|
| SOC 2 attestation/report | Annual SOC 2 audits |
| Security testing summaries | Ongoing internal security testing |
| Resilience & incident response documentation | Documented and tested resilience & incident response procedures for Instantiations |
| Vendor due diligence & risk management insights | Continuous review of organizational controls and vendor risk management |
| Security incident notifications & transparency | Established incident response procedures with regular staff training |
| Data Processing Agreement (DPA) | Maintains compliance with applicable data-protection regulations |
| Regulatory compliance support & documentation | Align documentation with global compliance standards to simplify your organization’s regulatory reviews. |
| Vendor performance reviews & reporting | Regular internal reviews of support services and vendor performance |
| Proof of insurance coverage | Maintains appropriate insurance coverage |
| Software Bill of Materials (SBOM) | Up-to-date transparency on software components and dependencies |
| SIG Lite, SIG Core, Customer-specific TPRM Processes | Documenting and updating our current processes and practices. |
While many organizations have trusted the VAST Platform for its proven reliability, businesses in highly regulated industries increasingly require more than just dependable software. We’ve seen a clear shift toward the need for comprehensive reports and documentation to demonstrate that both vendors and their software can be trusted. The VAST Compliance Package was developed to […]
