Changelog

Custom domains, faster integrations, and more smarts for Atlas.

🔗 Custom domains for Trust Center are here. You can now point a domain you own at your Trust Center and serve the page from your own branded subdomain. A guided setup shows each step from DNS to live, ownership is verified before anything goes live, and removing a domain takes a single confirmation.

🤖 Atlas (beta) can now spot duplicate or overlapping controls and evidence and suggest ways to consolidate them, keeping your compliance library tidy as it grows.

🔌 Need an integration we don’t support yet? Integration Builder automatically turns your request into a working integration, prepping the code for our team to review and ships. To prove it works, we’re shipping Datadog and Freshservice as the first to come through this way. Available for Enterprise and Scale plans.

🤝 Trust Chain assignments are clearer, with already-assigned evidence requests shown up front so it’s easy to see what’s new. Organizations that move from vendor to customer can now edit all of their evidence, not just what was requested, and the vendor completion email is simpler.

📦 SBOM scanning is more dependable, with smarter queuing during busy periods, automatic catch-up for missed collections, and schedules that update as soon as you change the frequency.

🛠️ We also improved reliability across evidence management, framework coverage reporting, activity logs, and notifications.

📜 Something new is taking shape for how teams manage their policies. More on that soon.

Verify AI is now front and center!

🧠 Verify AI findings now appear on the Compliance Dashboard, with a new Verify AI Status tab in Monitoring to track flagged evidence and trends over time.

🤝 Trust Chain now keeps everyone in the loop. Vendors get a welcome when their account is created and a heads-up when a customer assigns them evidence. Evidence owners are notified of new assignments, completed assessments get a confirmation, and a digest of overdue items helps nothing slip through.

🗒️ Questionnaire answers now show where AI-generated responses came from, and exports can include the source documents.

📦 SBOM creation is smoother. Repositories are listed alphabetically, project names fill in from the repo you choose, and duplicate project names are a thing of the past.

🔎 Evidence is easier to work with. Atlas (beta) lets you choose which connection to use when you have more than one for a service, Markdown files preview as formatted documents, and large spreadsheets open without the wait. Collection issues also surface as visible alerts so they get caught early.

🧰 We also added resiliency across audit exports, file uploads, and navigation.

Stay on top of evidence collection with these updates to the evidence repository, Trust Chain vendor alerts, attachment metadata, and more:

📅 Evidence now keeps a fixed collection date for audit integrity while the effective date stays editable. New filters also let you sort the Evidence Repository by Verify AI status and narrow the Control Library to criteria currently in scope.

✅ You can now require a manager to sign off on evidence attachments before an item counts as complete, a clear human checkpoint that works with or without Verify AI.

🤝 Trust Chain keeps vendors on track with a refreshed invite email, due date and expiration reminders, and alerts when a Verify AI review is ready.

🤖 Atlas (beta) got a round of polish and short feature videos to help your team get up to speed. Security Assistant changes and self-assessment score resets now show up in the Activity Log, and bulk owner changes send notifications just like single updates.

🔐 Admins can now set a session inactivity timeout for their organization.

🛠️ We also improved reliability across evidence collection, notifications, self-assessment scoring, and custom framework imports.