What we ship, every week.

New

• ISO 27001 readiness tracking — cover the ISMS clauses and the Annex A themes a certification body samples
• Requirement-level control mapping — every control is labeled by the framework requirement it satisfies, with coverage gaps shown per period
• Custom evidence requirements — define the exact evidence a control needs, and tests scope themselves to what you asked for
• Sentence-level policy comments — highlight a single sentence and comment on it instead of the whole section
• Reusable questionnaire answers — saved answers carry forward as durable commitments, written as prose instead of stitched-together claims
• Control status in plain words — read each control's state from the row itself instead of decoding a colored dot
• Employee account linking — connect the accounts Screenata finds in your integrations to the right employee profile

Improved

• Review notifications open inline in your inbox, with a direct link to the test in question
• Guided setup tracks Slack and Trust Center as their own steps, and no longer opens on sample data
• Test and task counts now agree across the dashboard, the board, and the test list
• Vendor discovery pulls candidates from every connected integration, not just a handful

Fixed

• HIPAA tests are no longer judged against SOC 2 criteria you never selected
• ISO 27001 audit cycles load and stay editable instead of failing on an unrecognized audit type
• Re-scoping or unlinking a control now reaches its tests and stays that way
• Every test gets its own code and title instead of repeating the first one
• Google Workspace and GitHub checks verify against live APIs, and skipped scans no longer read as failures

New

• Global search — find any test, task, or work item by name or code from a new sidebar search box and a ⌘K command palette
• Grouped list view — organize tasks and registers into collapsible groups you can scan at a glance
• "Provides evidence for" links on tasks — jump straight from a task to the test it satisfies
• Quieter compliance board — auto-generated scanner findings stay off the board until you choose to triage them

Improved

• Vera's escalation emails now deep-link to the exact test or task that needs your attention
• Stale "Vera needs your help" prompts auto-dismiss once the underlying work is resolved
• Task descriptions expand to fit their full content instead of clipping

Fixed

• Signature attestations now persist reliably
• Activity logs show assignee and role changes accurately and no longer merge distinct events
• One person now shows a single consistent avatar across every name-format variant
• Uploaded intake attachments keep their original source and provenance
• Group inventory registration now completes without stalling

New

• Self-service compliance requests — a unified intake for compliance work, with in-app and email requests that Vera routes to the right procedure automatically
• Live request activity feed — follow any request in real time with a causally-ordered timeline of steps, evidence, decisions, and comments
• Agentic compliance operations — Vera triages incoming work, auto-executes high-confidence steps, posts her outcome report to the test thread, and hands anything uncertain to a human for approval
• Asset and device register — track device lifecycle, warranty, and MDM sync in one place, with employee software licenses and per-device history unified into the asset timeline
• Custom form fields — add Choice (dropdown) and Signature field types to your procedures and human steps
• Auditor Center rollups — period-of-time evidence coverage, sampled-run details, live check-health badges on test cards, and searchable run history for audit sampling

Improved

• Reorganized Screenata sidebar — grouped into Program, Vault, Registers, Trust, and Configure
• Instant procedure start — begin a procedure immediately while policy grounding finishes in the background
• Broader contributor access — contributors can now act on questionnaires, assets, offboarding, and risk seeding without hitting permission walls
• Workspace-scoped GitHub — connect and disconnect GitHub per workspace, with multi-account support
• Bulk evidence export — download any selection of documents as a single zip

Fixed

• Cancelled procedure runs no longer leave phantom tasks in your inbox or My Tasks
• Board columns now render cards correctly after a previously-empty column re-populates
• The public Trust Center now loads on your custom-domain root without an auth prompt
• Vera chat handles empty replies gracefully instead of stalling
• Vera's comments no longer show double-escaped whitespace

New

• Trust center on your own domain, host your public trust page on a custom domain with guided DNS verification
• Redesigned public trust page, dark and light themes, brand-color theming, and configurable hero backgrounds
• NDA-gated document access, require a signed NDA with an expiry date before sharing trust-center documents
• 90+ new automated checks across AWS, GCP, Azure, and SaaS identity providers

Improved

• Review panel, a cleaner layout with intent-clear actions to mark not applicable, remove, assign an owner, or route for approval
• Trust-center admin, frameworks visibility controls, request filters, and a live public-URL preview
• Vera grounds drafted answers in your approved policy passages only

Fixed

• Approval cards now name the specific check or action you're approving
• Viewer role, read-only access is enforced consistently across every surface
• Setup guide hides itself once onboarding is complete

New

• Guided "Get audit-ready" setup, a floating setup guide, coach-marks across compliance surfaces, and Vera starter suggestions on every onboarding step
• Ask Vera everywhere, starter prompt pills under the composer and a chat rail you can open from any compliance surface
• Audit command center, a dedicated audit page with SOC 2 Type II period-coverage tracking, plus auditor first and last names captured at invite time
• Vera-generated SOC 2 bridge letter, draft a bridge letter for your SOC 2 audit without leaving the platform
• Personnel and manager management, a structured manager picker that auto-links on sync and import, a background-check column, and personnel sync across your identity providers
• Continuous-monitoring lens, surface the latest automated check verdict directly on each control test

Improved

• Simplified cloud setup, a cleaner wizard for connecting your cloud providers
• Design system refresh, softer squircle corners, refined focus rings, and clearer elevation across the app
• Policy-set approvals, approvals are now coverage-aware, so you only sign off on what actually needs it
• Evidence guidance, recommendations no longer hinge on test type and evidence-slot instructions are consolidated in one place

Fixed

• Browser capture, grab evidence by screenshotting any web-app URL
• Document evidence, no longer fails on tests that don't have a template
• Risk register layout, widened the ID column so warning icons no longer overlap the rating badge
• Navigation, the Controls sidebar item now stays active while you're viewing tests

New

• Employee onboarding and offboarding, automate joiner and leaver workflows with manager approvals and access tracking
• Human steps in Slack and email, approve, complete, or upload evidence for Vera's workflow steps without leaving your inbox
• Ask Vera in the portal, grounded answers about your compliance posture, drawn from your own policies and evidence
• Slack agent escalations, act on Vera's compliance alerts with one click, right in Slack
• Email Vera and browser-capture settings, manage how you reach Vera by email and capture evidence from any web app

Improved

• Policy governance, override approvals and import your entire policy library from a single page
• Tasks, a unified board and list view for everything assigned to you, now defaulting to a board
• Document management, upload, stash, and batch-assess evidence documents in one workflow
• Faster program setup with parallelized test compilation

Fixed

• MFA enrollment, now shows a clear error message instead of a generic network failure
• Policy coverage counts, now reflect shared and master policies accurately
• Completion ratios, no longer capped by covered policies or not-applicable controls
• Control lists, de-duplicated across overlapping frameworks
• Test editing, the Edit Test dialog now updates the evidence instructions directly

New

• Vendor risk management, discover vendors from integrations, tier them, and let Vera draft assessments
• Continuous evidence enforcement, track freshness with renewal filters and automated integration-to-evidence lifecycles
• Compliance posture dashboard, monitor workspace-wide readiness with actionable cards and Vera-generated risk registers
• Policy governance, set per-policy review cadences and manage bulk approval requests in a unified inventory
• HRIS and IdP sync, automate personnel directory management and provider-agnostic background checks
• Microsoft Teams and M365 compliance, dedicated provider support for Teams, SharePoint, and Entra ID

Improved

• Optimized cloud connection, improved background processing speeds when connecting or disconnecting cloud providers
• Framework mapping, unified HIPAA controls for streamlined cross-framework evidence collection
• Policy management UI, split policy imports into tabs with smarter classification and richer review dialogs
• Role-based access control, restricted policy edits and vendor assessment writes to authorized manager roles

Fixed

• N/A test accuracy, corrected display logic and applicability reasons for non-applicable control tests
• Identity resolution, resolved duplicate user account creation during OAuth login and browser extension authentication
• Role stability, fixed role assignment persistence by syncing on stable identifiers rather than editable names
• Questionnaire parsing, improved support for multi-sheet workbook uploads and draft auto-population
• Audit cycle management, fixed date-shift logic and handled null periods in auditor invitation emails

New

• Test-first onboarding, replace questionnaires with action-oriented steps to accelerate audit readiness
• Evidence classification, Vera suggests tests for uploaded documents and saves them as classified evidence
• Two-stage request lifecycle, manage evidence requests through distinct respond and resolve stages
• Audit-cycle management, track frameworks, vault uploads, and readiness analytics in a unified view
• Organization-wide MFA enforcement, manage and enforce two-factor authentication across all user accounts
• Policy checklist, upload and track required policies with support for bulk imports and drag-and-drop
• Open Requests dashboard, view all pending requests and linked-document evidence in a dedicated view

Improved

• Automated test status, Vera automatically marks tests as N/A when no in-scope resources are found
• Enhanced Microsoft 365 monitoring, replaced manual attestation stubs with automated Graph API checks
• Bulk actions, manage controls and policies efficiently with multiselect and bulk approval workflows
• Responsive interface, properties panel now collapses into a floating tab for better use on narrow screens

Fixed

• Test regression handling, tests now revert to a failed state if a re-run confirms a new failure
• Evidence integrity, Vera now invalidates and re-grades reviews when the underlying evidence files change
• Notification cleanup, stopped duplicate Open Requests from appearing as auditor notifications
• Upload reliability, blocked evidence submissions when files are unreachable to prevent data gaps
• Login security, hardened workspace-scoped routes and validated redirect URIs to prevent cross-org requests

New

• Frameworks dashboard, navigate controls and tests grouped by specific regulatory criteria
• Automated test skipping, Vera identifies and skips non-applicable tests to reduce manual escalations
• HIPAA Security Rule expansion, six additional implementation specifications added to the compliance catalog
• Readiness questionnaire overhaul, inline integration setup and direct access to Vera for guidance
• Evidence management, attach evidence to any category and find tests by description
• Audit Cycles, track historical and active audits grouped by year with dedicated cycle views
• Discrete evidence tracking, specific slots for network diagrams and performance evaluations

Improved

• Vera reasoning transparency, new visual indicators show Vera's thinking process and skill usage
• Slack and email agent reliability, improved skill reachability and cross-turn memory for remote interactions
• Test activity feed, paginated results with noise reduction for automated check logs
• Progress tracking, section counts now reflect sub-questions for more accurate readiness reporting

Fixed

• Evidence-driven test status, test results now trigger from evidence submission for higher accuracy
• Chat evidence attachment, resolved issues with test ID memory and link sanitization in Vera
• Integration stability, fixed OAuth connection lifecycles and API key credential modal triggers
• Control tree reliability, eliminated duplicate controls and flickering when switching between frameworks
• Document search, improved relevance ranking to match any token within policy searches

New

• Vera claim verification, Vera verifies compliance claims and recommends supporting evidence from your integrations
• Continuous monitoring, daily API-driven checks detect configuration drift across your security stack
• Audit cycle management, track progress and evidence submissions across multiple frameworks in one view
• On-demand evidence review, Vera performs instant quality reviews on uploaded evidence artifacts
• SOC 2 readiness expansion, 14 new auditor-requested tests for SOC 2 Type I readiness
• Policy-to-message attachments, attach existing vault documents and policies directly to chat threads with Vera
• Deep-linked onboarding, resume setup at any stage with persistent wizard state and direct URLs

Improved

• Performance virtualization, faster loading for large task boards, test lists, and control trees
• Composer responsiveness, reduced input lag by deferring non-critical card rendering in the chat interface
• Snapshot coalescing, cleaner readiness history by grouping gap-detection updates into single snapshots

Fixed

• Evidence locking, vault documents linked to submitted evidence are now correctly locked from modification
• M365 provider resolution, corrected display titles for Microsoft 365 integration checks
• Inbox layout, fixed property panel overflow issues within the inbox view
• Evidence submission flow, resolved errors blocking the end-to-end evidence approval and submission process
• Duplicate tool calls, prevented duplicate assistant messages to ensure stable AI agent responses