_private/qwestly-private-docs/SOC2/vanta-integrations.md

Vanta Integrations

Date: May 20, 2026 Owner: Dominick Pham, CTO Classification: Internal Use

Systems connected to Vanta for automated evidence collection.

Integration details

Integration Capabilities
Asana Access, task creation, task tracking
Checkr Access, people
GitHub Access, inventory, task creation, task tracking, vulnerabilities
Google Drive Documents, policies
Google Workspace Access, groups, people, single sign-on, vendor discovery
Gusto People
MongoDB Atlas Access, inventory
Slack Notifications
Supabase Access, inventory
Vercel Access, inventory

MongoDB Atlas

Connection method: API key application

Application name: Vanta connection

Permission: Organization Read Only

Key Value
Public key reixjkhg
Private key 1cf8278f-ff93-439f-9a71-d55b30ab840a

Automated tests

Test
Inventory items have active owners
Inventory items have descriptions
Inventory list tracks resources that contain user data
MongoDB Atlas accounts associated with users
MongoDB Atlas accounts deprovisioned when personnel leave
MongoDB Atlas cluster storage autoscaling
MongoDB Atlas cluster tier autoscaling
MongoDB Atlas clusters backed up
MongoDB Atlas clusters encrypted
MongoDB Atlas clusters on dedicated nodes
MongoDB Atlas clusters replicated

Automated controls

Control
Access reviews conducted
Access revoked upon termination
Data encryption utilized
Infrastructure performance monitored
Production OS access restricted
Production database access restricted
Production inventory maintained