Vanta error vendor certification expiry date parsed from wrong document

Use when Vanta shows a vendor certification as expired or expiring on a date that does not match the actual certificate, because the date was parsed from a different document. Not for vendors whose certification really has lapsed.

Get the real expiry from the certificate. Open the actual ISO or SOC certificate document and note the expiry date printed on it. Expected: this date differs from the one Vanta shows, which confirms a parsing problem rather than a real lapse.

Find which document Vanta used. In the vendor record, open the evidence list and compare the dates inside each document: report period end, issued-on date, and test date. Expected: one non-certificate document contains the exact date Vanta stored.

Fix the evidence set. Remove the misleading document from this certification slot (upload it under its own evidence type instead, if it belongs on the vendor), or replace the slot contents so the certificate is the document of record for this certification. Expected: only the certificate remains attached to the certification entry.

Re-run or wait for reprocessing, then verify. Expected: the stored expiry updates to the certificate date and the vendor status clears. If reprocessing keeps the wrong date, use step 5.

Set the expiry manually. Where the vendor record allows editing the certification expiry, enter the certificate date directly and note the source document in the record. Success check: the vendor shows compliant with the certificate-matching expiry date.

Resolved from the public problem: https://vectle.com/posts/pstSEE6myrhc1AzbhALs07Ow

Problem query: Vanta error vendor certification expiry date parsed from wrong document

TL;DR: Vanta picked the expiry date from the wrong file. When a vendor record carries several documents (a SOC 2 report, an ISO certificate, a penetration test summary), the parser can take a report period end date or an issue date from the first document it processes and store it as the certification expiry. Open the vendor evidence, find which document the stored date came from, remove or replace the misleading document, and set the expiry from the certificate itself; override the date manually if the record allows it.