What we ship, every week.

New

• Trust center on your own domain — host your public trust page on a custom domain with guided DNS verification
• Redesigned public trust page — dark and light themes, brand-color theming, and configurable hero backgrounds
• NDA-gated document access — require a signed NDA with an expiry date before sharing trust-center documents
• 90+ new automated checks across AWS, GCP, Azure, and SaaS identity providers

Improved

• Review panel — a cleaner layout with intent-clear actions to mark not applicable, remove, assign an owner, or route for approval
• Trust-center admin — frameworks visibility controls, request filters, and a live public-URL preview
• Vera grounds drafted answers in your approved policy passages only

Fixed

• Approval cards now name the specific check or action you're approving
• Viewer role — read-only access is enforced consistently across every surface
• Setup guide hides itself once onboarding is complete

New

• Guided "Get audit-ready" setup — a floating setup guide, coach-marks across compliance surfaces, and Vera starter suggestions on every onboarding step
• Ask Vera everywhere — starter prompt pills under the composer and a chat rail you can open from any compliance surface
• Audit command center — a dedicated audit page with SOC 2 Type II period-coverage tracking, plus auditor first and last names captured at invite time
• Vera-generated SOC 2 bridge letter — draft a bridge letter for your SOC 2 audit without leaving the platform
• Personnel and manager management — a structured manager picker that auto-links on sync and import, a background-check column, and personnel sync across your identity providers
• Continuous-monitoring lens — surface the latest automated check verdict directly on each control test

Improved

• Simplified cloud setup — a cleaner wizard for connecting your cloud providers
• Design system refresh — softer squircle corners, refined focus rings, and clearer elevation across the app
• Policy-set approvals — approvals are now coverage-aware, so you only sign off on what actually needs it
• Evidence guidance — recommendations no longer hinge on test type and evidence-slot instructions are consolidated in one place

Fixed

• Browser capture — grab evidence by screenshotting any web-app URL
• Document evidence — no longer fails on tests that don't have a template
• Risk register layout — widened the ID column so warning icons no longer overlap the rating badge
• Navigation — the Controls sidebar item now stays active while you're viewing tests

New

• Employee onboarding and offboarding — automate joiner and leaver workflows with manager approvals and access tracking
• Human steps in Slack and email — approve, complete, or upload evidence for Vera's workflow steps without leaving your inbox
• Ask Vera in the portal — grounded answers about your compliance posture, drawn from your own policies and evidence
• Slack agent escalations — act on Vera's compliance alerts with one click, right in Slack
• Email Vera and browser-capture settings — manage how you reach Vera by email and capture evidence from any web app

Improved

• Policy governance — override approvals and import your entire policy library from a single page
• Tasks — a unified board and list view for everything assigned to you, now defaulting to a board
• Document management — upload, stash, and batch-assess evidence documents in one workflow
• Faster program setup with parallelized test compilation

Fixed

• MFA enrollment — now shows a clear error message instead of a generic network failure
• Policy coverage counts — now reflect shared and master policies accurately
• Completion ratios — no longer capped by covered policies or not-applicable controls
• Control lists — de-duplicated across overlapping frameworks
• Test editing — the Edit Test dialog now updates the evidence instructions directly

New

• Vendor risk management — discover vendors from integrations, tier them, and let Vera draft assessments
• Continuous evidence enforcement — track freshness with renewal filters and automated integration-to-evidence lifecycles
• Compliance posture dashboard — monitor workspace-wide readiness with actionable cards and Vera-generated risk registers
• Policy governance — set per-policy review cadences and manage bulk approval requests in a unified inventory
• HRIS and IdP sync — automate personnel directory management and provider-agnostic background checks
• Microsoft Teams and M365 compliance — dedicated provider support for Teams, SharePoint, and Entra ID

Improved

• Optimized cloud connection — improved background processing speeds when connecting or disconnecting cloud providers
• Framework mapping — unified HIPAA controls for streamlined cross-framework evidence collection
• Policy management UI — split policy imports into tabs with smarter classification and richer review dialogs
• Role-based access control — restricted policy edits and vendor assessment writes to authorized manager roles

Fixed

• N/A test accuracy — corrected display logic and applicability reasons for non-applicable control tests
• Identity resolution — resolved duplicate user account creation during OAuth login and browser extension authentication
• Role stability — fixed role assignment persistence by syncing on stable identifiers rather than editable names
• Questionnaire parsing — improved support for multi-sheet workbook uploads and draft auto-population
• Audit cycle management — fixed date-shift logic and handled null periods in auditor invitation emails

New

• Test-first onboarding — replace questionnaires with action-oriented steps to accelerate audit readiness
• Evidence classification — Vera suggests tests for uploaded documents and saves them as classified evidence
• Two-stage request lifecycle — manage evidence requests through distinct respond and resolve stages
• Audit-cycle management — track frameworks, vault uploads, and readiness analytics in a unified view
• Organization-wide MFA enforcement — manage and enforce two-factor authentication across all user accounts
• Policy checklist — upload and track required policies with support for bulk imports and drag-and-drop
• Open Requests dashboard — view all pending requests and linked-document evidence in a dedicated view

Improved

• Automated test status — Vera automatically marks tests as N/A when no in-scope resources are found
• Enhanced Microsoft 365 monitoring — replaced manual attestation stubs with automated Graph API checks
• Bulk actions — manage controls and policies efficiently with multiselect and bulk approval workflows
• Responsive interface — properties panel now collapses into a floating tab for better use on narrow screens

Fixed

• Test regression handling — tests now revert to a failed state if a re-run confirms a new failure
• Evidence integrity — Vera now invalidates and re-grades reviews when the underlying evidence files change
• Notification cleanup — stopped duplicate Open Requests from appearing as auditor notifications
• Upload reliability — blocked evidence submissions when files are unreachable to prevent data gaps
• Login security — hardened workspace-scoped routes and validated redirect URIs to prevent cross-org requests

New

• Frameworks dashboard — navigate controls and tests grouped by specific regulatory criteria
• Automated test skipping — Vera identifies and skips non-applicable tests to reduce manual escalations
• HIPAA Security Rule expansion — six additional implementation specifications added to the compliance catalog
• Readiness questionnaire overhaul — inline integration setup and direct access to Vera for guidance
• Evidence management — attach evidence to any category and find tests by description
• Audit Cycles — track historical and active audits grouped by year with dedicated cycle views
• Discrete evidence tracking — specific slots for network diagrams and performance evaluations

Improved

• Vera reasoning transparency — new visual indicators show Vera's thinking process and skill usage
• Slack and email agent reliability — improved skill reachability and cross-turn memory for remote interactions
• Test activity feed — paginated results with noise reduction for automated check logs
• Progress tracking — section counts now reflect sub-questions for more accurate readiness reporting

Fixed

• Evidence-driven test status — test results now trigger from evidence submission for higher accuracy
• Chat evidence attachment — resolved issues with test ID memory and link sanitization in Vera
• Integration stability — fixed OAuth connection lifecycles and API key credential modal triggers
• Control tree reliability — eliminated duplicate controls and flickering when switching between frameworks
• Document search — improved relevance ranking to match any token within policy searches

New

• Vera claim verification — Vera verifies compliance claims and recommends supporting evidence from your integrations
• Continuous monitoring — daily API-driven checks detect configuration drift across your security stack
• Audit cycle management — track progress and evidence submissions across multiple frameworks in one view
• On-demand evidence review — Vera performs instant quality reviews on uploaded evidence artifacts
• SOC 2 readiness expansion — 14 new auditor-requested tests for SOC 2 Type I readiness
• Policy-to-message attachments — attach existing vault documents and policies directly to chat threads with Vera
• Deep-linked onboarding — resume setup at any stage with persistent wizard state and direct URLs

Improved

• Performance virtualization — faster loading for large task boards, test lists, and control trees
• Composer responsiveness — reduced input lag by deferring non-critical card rendering in the chat interface
• Snapshot coalescing — cleaner readiness history by grouping gap-detection updates into single snapshots

Fixed

• Evidence locking — vault documents linked to submitted evidence are now correctly locked from modification
• M365 provider resolution — corrected display titles for Microsoft 365 integration checks
• Inbox layout — fixed property panel overflow issues within the inbox view
• Evidence submission flow — resolved errors blocking the end-to-end evidence approval and submission process
• Duplicate tool calls — prevented duplicate assistant messages to ensure stable AI agent responses