See exactly what's inside the AI supply chain

explAIn's public catalog now features dedicated pages for AI models, platforms, and vendors, each linked to every application built on top of it. Every application now carries a composite transparency score — weighted across application, model, vendor, and infrastructure — featuring an explanation over the methodology used to reach that score. Vendors can now claim their own listing and verify it with a work email.

Know which of your suppliers are covered by ChainShield

Anove now has a supply-chain scan: ChainShield. Every third party you track now carries a ChainShield mark showing whether that supplier appears in the scan: a scanned shield if it does, a locked one if it doesn't yet, with a short preview of what ChainShield actually watches for. Third parties matched to the AI catalog also get a proper vendor card that links straight to their public ExplAIn profile — on the third-party page, in the properties sidebar, and on business-process diagrams.

A more honest view of your compliance workspace

Filters across Controls, Risks, Assets, Third Parties, Business Processes, Documents, Evidence, and Assessments now live in the page URL, so a filtered view can be bookmarked or shared, and every list states its count plainly as "N of M" instead of guessing. "My Work" is now a visible, removable filter chip rather than a hidden toggle. Framework pages also show whether you're actually improving — gaps closed, gaps opened, and requirements newly covered over the last 30 days — instead of just a bare coverage percentage.

Console: one view across every entity in your group

For organizations that oversee multiple entities such as holding companies and corporate groups, insAIght now ships a dedicated Console portal. The overview shows how much of the group's compliance work is covered, which entities are progressing, and which have stalled — each backed by a real trend chart rather than a bare percentage. Entities can be compared side-by-side in a matrix, browsed on a jurisdiction map, or ranked by what needs a decision next. A new Risk view rolls up who owns which risk across the group, and Programmes let a group run its own coordinated compliance work — a NIS2 roll-out, for example — as a shared project with a running thread that flags when an entity has gone quiet. A board-ready report renders from the same data, and ⌘/Ctrl+Shift+K opens a command palette to jump straight to any entity.

Onboarding recommends what actually applies to you

The onboarding wizard's framework recommendations now check your jurisdiction and your real industry sector together, using the same classification system (NACE) that EU financial regulation applies. A Dutch professional-services firm is no longer pre-selected for Saudi or aviation-specific regulations that don't apply, while a bank now correctly picks up DORA and PSD2 from the start.

Push evidence into insAIght without setting up a connector

A new public Ingest API lets you push evidence as JSON events or files directly into insAIght. They can be filed under your objectives and controls, with no connector required. Manage it from the new Developers page in your organization settings: create and revoke API keys, see when each was last used, and copy a ready-to-run example straight from the built-in documentation. Every push is recorded in an events ledger you can filter and review.

Choose exactly which folders sync from Google Drive

The Google Drive connector now asks you to pick specific folders to sync instead of granting access to your whole Drive. Selected folders appear as a clear list with a live file count, and setup won't save until at least one folder is chosen.

Business Process register

Business processes now render turtle diagrams in the Visual Tab, where inputs, outputs, and resources sit alongside dedicated KPI and Risks. A RACI (Responsible / Accountable / Consulted / Informed) chart is included. To be successfully created, a Business Process needs to have a least one accountable. Once a business process is defined, you can derive a record of data processing activity for (RoPA) directly from it with one click, instead of re-entering the same data twice. This streamlines GDPR compliance.

Control Objectives & Tactical Dashboard

Controls can now be tied to prioritized remediation objectives in the Objectives Tab of a Framework. The Tactical Dashboard turns those objectives into a ranked pipeline of next actions ("Control implementation pipeline") giving you a concrete roadmap toward your compliance posture instead of a flat control list.

Cross-framework compliance matrix

A new matrix view shows you compliance coverage across all your adopted frameworks and also previews frameworks you haven't adopted yet, inferred through the platform's catalog. Use it to see how much of a new framework you would already satisfy before committing to it. Due to the complexity of the three available views (by framework, by control and by requirement), we suggest start working with the view by framework.

Requirement-level evidence rollup

Requirement pages now show a read-only rollup of every piece of evidence inherited from that requirement's linked controls, all in one place — no more opening each control individually to confirm a requirement is backed by evidence.

Organization content language & AI translation

Set your organization's content language once, and AI-generated content follows it automatically. This is done at the Organization's General Information Tab. Machine-translated text carries a visible "machine-translated" badge, while legally binding framework and requirement text is never auto-translated. AI-generated content is now labelled consistently across AI surfaces, in line with the EU AI Act.

GDPR data subject requests on the Trust Center

Visitors to your public Trust Center can now submit a data subject request — access, rectification, erasure, and more — directly from the page. Requests land in a new Data Requests tab alongside document access requests, with automatic notification and confirmation emails. You can configure your Trust Center here.

Projects — shared, goal-oriented workstreams

A new /projects area groups requirements, controls, risks, and evidence into named workstreams you can drive to a target. Each project carries an icon and color, a health status (on track / at risk / off track / done), a lead, labels, and an editable start → target date range.

The detail page has three tabs — Overview for a markdown description and latest status, Activity for threaded updates and comments with @-mentions and progress tracking, and Work for grouping items by framework and implementation status. Create a project from scratch, or seed one from every requirement of an adopted framework in a single step.

Org-global requirement implementation status

Every requirement now carries an organization-wide implementation status — Unimplemented, Planned, Partially Implemented, or Implemented — replacing the old four-pillar readiness model with a single explicit status you set through a glyph picker. It updates optimistically and stays in sync across every surface that shows it, including the new Work tab.

One-click Control Overview report

The Controls overview page now has a Report button that opens a branded, print-to-PDF gap assessment reflecting exactly what your list is filtered to. It includes a management summary, posture stat tiles, maturity-gap and implementation-status distribution bars, and a controls table grouped gaps-first — plus a section on controls with no linked evidence and a methodology note on how "gap" is calculated.

Pre-Audit Autopilot

A framework's detail page now includes an Audit Autopilot tab that audits every linked control and rolls the findings into a posture report ranking the highest-impact controls to implement. A readiness gate filters out controls that aren't ready to audit, so an incomplete framework can no longer produce a misleadingly perfect score — each gap carries a severity tier and fix-priority breakdown, and an in-app history view charts your posture score over time.

Trust Center — selective visibility and gated documents

You can now curate exactly what your published Trust Center shows across seven sections — frameworks, controls, subprocessors, processing activities, resources, FAQ, and updates — with native FAQ and update authoring. Documents can be gated behind a request → NDA → approve → time-limited link flow, and the public trust page has been rebuilt into a branded experience with a sticky status bar and a cursor-reactive hero.

Advanced flex-view for controls

The Controls overview gained a Linear-style view engine: a "View as" toggle switches between a flat controls list and controls nested under their requirements, a single-row toolbar folds filters, display, and sort into one control, and saved views persist across sessions.

AI Contract Review & Synthesis

Upload individual or multiple contracts to automatically extract parties, dates, and risks, generating consolidated summaries and highlighting cross-document conflicts.

Interactive Third-Party Map

Visualize vendor locations on a world map with country filtering, clustered markers, color-coded roles, and progressive loading.

Playbooks

Build, run, and freeze agentic connector workflows that stream real-time progress and output summarized evidence reports.

Reimagined Document UX & Workflows

A file-manager interface featuring a dedicated Policy House, formal approval workflows, and per-document activity timelines.

Two-Factor Authentication (2FA)

Added TOTP-based 2FA with backup codes, device trusting, and organization-wide enforcement settings.

AI SRF Ingestion Wizard

Convert raw regulation files or URLs into draft Security Requirement Frameworks via a guided 5-step human-in-the-loop pipeline.