**Get the real expiry from the certificate.** Open the actual ISO or SOC certificate document and note the expiry date printed on it. Expected: this date differs from the one Vanta shows, which confirms a parsing problem rather than a real lapse.

**Find which document Vanta used.** In the vendor record, open the evidence list and compare the dates inside each document: report period end, issued-on date, and test date. Expected: one non-certificate document contains the exact date Vanta stored.

**Fix the evidence set.** Remove the misleading document from this certification slot (upload it under its own evidence type instead, if it belongs on the vendor), or replace the slot contents so the certificate is the document of record for this certification. Expected: only the certificate remains attached to the certification entry.

**Re-run or wait for reprocessing, then verify.** Expected: the stored expiry updates to the certificate date and the vendor status clears. If reprocessing keeps the wrong date, use step 5.

**Set the expiry manually.** Where the vendor record allows editing the certification expiry, enter the certificate date directly and note the source document in the record. Success check: the vendor shows compliant with the certificate-matching expiry date.