Projects — shared, goal-oriented workstreams

A new /projects area groups requirements, controls, risks, and evidence into named workstreams you can drive to a target. Each project carries an icon and color, a health status (on track / at risk / off track / done), a lead, labels, and an editable start → target date range.

The detail page has three tabs — Overview for a markdown description and latest status, Activity for threaded updates and comments with @-mentions and progress tracking, and Work for grouping items by framework and implementation status. Create a project from scratch, or seed one from every requirement of an adopted framework in a single step.

Org-global requirement implementation status

Every requirement now carries an organization-wide implementation status — Unimplemented, Planned, Partially Implemented, or Implemented — replacing the old four-pillar readiness model with a single explicit status you set through a glyph picker. It updates optimistically and stays in sync across every surface that shows it, including the new Work tab.

One-click Control Overview report

The Controls overview page now has a Report button that opens a branded, print-to-PDF gap assessment reflecting exactly what your list is filtered to. It includes a management summary, posture stat tiles, maturity-gap and implementation-status distribution bars, and a controls table grouped gaps-first — plus a section on controls with no linked evidence and a methodology note on how "gap" is calculated.

Pre-Audit Autopilot

A framework's detail page now includes an Audit Autopilot tab that audits every linked control and rolls the findings into a posture report ranking the highest-impact controls to implement. A readiness gate filters out controls that aren't ready to audit, so an incomplete framework can no longer produce a misleadingly perfect score — each gap carries a severity tier and fix-priority breakdown, and an in-app history view charts your posture score over time.

Trust Center — selective visibility and gated documents

You can now curate exactly what your published Trust Center shows across seven sections — frameworks, controls, subprocessors, processing activities, resources, FAQ, and updates — with native FAQ and update authoring. Documents can be gated behind a request → NDA → approve → time-limited link flow, and the public trust page has been rebuilt into a branded experience with a sticky status bar and a cursor-reactive hero.

Advanced flex-view for controls

The Controls overview gained a Linear-style view engine: a "View as" toggle switches between a flat controls list and controls nested under their requirements, a single-row toolbar folds filters, display, and sort into one control, and saved views persist across sessions.

AI Contract Review & Synthesis

Upload individual or multiple contracts to automatically extract parties, dates, and risks, generating consolidated summaries and highlighting cross-document conflicts.

Interactive Third-Party Map

Visualize vendor locations on a world map with country filtering, clustered markers, color-coded roles, and progressive loading.

Playbooks

Build, run, and freeze agentic connector workflows that stream real-time progress and output summarized evidence reports.

Reimagined Document UX & Workflows

A file-manager interface featuring a dedicated Policy House, formal approval workflows, and per-document activity timelines.

Two-Factor Authentication (2FA)

Added TOTP-based 2FA with backup codes, device trusting, and organization-wide enforcement settings.

AI SRF Ingestion Wizard

Convert raw regulation files or URLs into draft Security Requirement Frameworks via a guided 5-step human-in-the-loop pipeline.

Consolidated Bulk Shadow AI Reports

Running bulk quick scans across multiple connectors now combines duplicate assets into a single consolidated report. Instead of seeing the same asset multiplied by each connector that found it, you get a clean, deduplicated list showing severity counts, a final verdict, and helpful badges indicating every connector that discovered the asset.

Bulk Export to PDF

You can now export bulk scan reports directly to PDF. The export includes exposure trajectory charts, risk distribution summaries, complete asset tables, and inline source tags.

Shareable Public Assessments

Assessment owners can now generate tokenized share links to send to external, non-logged-in experts. You can choose exactly which questions to share using a new picker dialog and send a brand-aligned invite email. The public answering surface features automatic autosaving and locks down instantly once the assessment is marked complete. Owners also get a dedicated tracking dashboard to monitor engagement, activity, and lock states.

Financial Exposure Metrics

Quick-scan reports now include annual-loss expectancy per finding, rolled up into a high-level financial exposure summary alongside your standard severity tables.

Redesigned Detail Pages

Asset, control, and risk detail pages have been upgraded to a clean, side-by-side layout featuring inline-editable fields with automatic saving, collapsible property sidebars, and URL-persisted tabs so deep links land exactly where you expect.

Features

• Inline CIA Ratings in Reports: An asset's Confidentiality, Integrity, and Availability (CIA) scores now appear directly in assessment detail headers and print exports. A new print options panel allows you to hide or show CIA scores, identified risks, or questions before printing.
• Streamlined Document Exports: Bulk report exports have been consolidated into a single cohesive document, removing redundant headers, simplifying the metadata layout, skipping empty risk blocks, and adding a unified footer strip.
• Asset Register Posture View: The assets overview page has been transformed from a basic table into a strategic posture dashboard. It now displays flat KPIs, asset-kind distributions, and a Coverage-by-Criticality chart showing the percentage of your most critical assets fully assessed.
• Advanced Asset Status Filtering: The asset status column now shows a multi-template progress dot (indicating state and completion fractions) with tooltips. New filters allow you to search complex combinations, such as showing all assets where a Privacy assessment is finished but a BIA is still in progress.
• Standardized Hero Metrics: Replaced scattered metric cards across nine top-level pages (including business processes, third parties, assessments, risks, and controls) with a single, clean visual style that removes non-actionable vanity statistics.
• Refined Asset Detail Panels: Properties sidebars have been reorganized into clean grids for Details, Recent Activity, and Metadata. Empty fields now display subtle "+ Add..." buttons, and long organizational unit chips wrap naturally rather than clipping out of view.
• Bulk Assessment Autopilot: Multi-select functionality on the assessments overview page now includes a "Start Autopilot" action. A new Sparkles button on the asset register allows you to open a template and context dialog to trigger autopilot across multiple targets simultaneously.
• Cleaned Up Asset Table Labels: Visual clutter has been reduced by capping asset classifications to one kind chip and two label chips, collapsing any extras into a hoverable badge. Unclassified rows now explicitly read "Unclassified," and system labels are visually distinguished from custom user labels.
• Asset Register Bulk Actions: The asset table now supports multi-select, letting you Delete, Start Autopilot, Print, or Export to CSV across all selected or filtered rows. CSV exports are aligned with what you see on screen, converting statuses and labels into clean, readable text.
• Autopilot Review Queue: Clicking the "Autopilot items to review" tile on your dashboard now launches you directly into a keyboard-walkable review queue for assessments containing pending AI-inferred answers.

Usability Improvements and Bugfixes

• Assessment Navigation Speed: Selecting multiple assessments and clicking "Review" allows you to walk through them instantly using the J/K or arrow keys. Adjacent assessments are pre-fetched so the interface remains perfectly responsive.
• Early Preview: New Adoption Workbench: Available behind early-access configuration, a new two-pane workbench pulls compliance progress and requirement mapping onto a single surface, featuring tier breakdowns, bulk exclusions with symmetric undo popups, and full dark-mode compatibility.
• Modernized UI Badges and Elements: Refreshed status badges across the app to use subtle, borderless fills with clear, color-coded text for better legibility.