Changelog

Completed workflows end-to-end, faster dashboards, stronger security

• NewAccess reviews, gap remediation, risk mitigation, and vendor risk assessments can now be completed entirely within the product, from creation through resolution.
• NewEmployees can now open and acknowledge assigned policies directly, with the full policy text visible in the product.
• NewExternal auditors can be granted evidence-approval permission and issue a real, independently verifiable digital signature on sign-off reports.
• NewVendors, training programs, and asset records can now be edited and removed directly from their detail pages.
• ImprovedReport generation (compliance reports, executive summaries, auditor sign-off, and vulnerability assessment reports) now runs in the background — large reports no longer block the browser, and a completed report can be re-downloaded without regenerating it.
• ImprovedDashboard and compliance-readiness scores now load faster, cached briefly and refreshed automatically whenever your controls or evidence change.
• ImprovedCompliance percentage displays (Trust Centre, dashboards, auditor views) now correctly reflect controls marked “implemented” — some organizations will see an accurate upward correction to previously understated numbers.
• SecurityCompliance readiness scoring and report generation now account for open, unmitigated risks in your Risk Register, and can be configured to block report finalization while critical risks remain open.
• SecurityStrengthened role-based access controls, tenant data isolation, and organization-deletion safeguards across the platform.

Report studio, explainable AI, and one consistent design language

• NewAudit reports now open with a branded cover page and a page-numbered table of contents.
• NewReports embed severity and framework-score charts generated at render time.
• NewAI review verdicts show an explained confidence indicator with an inline definition, and label their reasoning trace.
• ImprovedEvery screen now shares the same header, palette, spacing, and card language for a single, cohesive product feel.

General availability

• NewCompliance engagements across SOC 2, ISO 27001, PCI DSS and more, with control mapping and evidence collection.
• NewAI-assisted document generation, control review, and audit opinions — always advisory and reviewable.
• NewRisk register, VAPT and security monitoring intelligence, evidence hub, and a compliance report studio.
• SecurityPer-organization tenant isolation, role-based access control, MFA, and full audit logging.