# How GraniteStack uses Vanta

**3-4 hours per week**: “Compliance maintenance reduced from 15-20 hours per week to 3-4 hours per week”

As published on [vanta.com](https://www.vanta.com/customers/granitestack). Captured by usedby on 2026-10-07.

- Company: [GraniteStack](https://www.usedby.ai/companies/granitestack.md)
- Tool: [Vanta](https://www.usedby.ai/tools/vanta.md)
- Teams: Operations and Compliance
- Customer since (as the page says): VANTA CUSTOMER SINCE 2025

## What the story says

GraniteStack uses Vanta to pursue SOC 2 Type II and ISO 27001 certification in parallel, automating AWS evidence collection in a single system of record. After certification, it runs a continuously monitored compliance program and uses Vanta's agent to draft policy documents.

Summary written by usedby from the source page, in English. The figures are those of Vanta and GraniteStack, not ours.

> Compliance maintenance reduced from 15-20 hours per week to 3-4 hours per week

- **70%**: “Passing 70% of controls within a week”
- **6 months**: “Two frameworks completed in about 6 months”

> We can now complete security questionnaires with confidence and point to the certificates rather than offering assurances that have to be taken on trust.
>
> Shubha Shukla, Head of Operations and Compliance, GraniteStack

## What usedby checked

We compared the story with its live page on 2026-10-07.

- Checked: the figure 3-4 hours per week is printed word for word on the page, near the name of GraniteStack.
- Checked: the passage quoted above is copied word for word from the page, near the name of GraniteStack.
- Checked: each number in our summary is printed on the page.
- Checked: GraniteStack uses Vanta. Confirmed line. Latest check across sources: 2026-10-07.
- Not checked: the result itself. We quote it; we did not measure it.

---
Source: https://www.usedby.ai/case-studies/granitestack-vanta · How we check: https://www.usedby.ai/methodology