AI Governance - March 13, 2026 - 202603.1.0

General Availability

Bulk Sending of AI Governance Assessments Based on User Type Attribute

Bulk send assessments based on user type attributes to help streamline AI Governance manager workflows. This enhancement relies on user type attributes, system and custom, to assign respondents and approvers to specific assessments instead of having to assign individual users.

For more information, see Launching Assessments for AI Governance.

New Task Management APIs

The following APIs are now available for use to create new review or remediation tasks tied to AI entities with full details, retrieve complete histories of tasks, and update an existing task’s status, assignee, priority, or collaborator list. These APIs give users a programmatic view of task progress and automation for their organization.

Note:

These APIs will become available as customer tenants are migrated to enhanced AI Governance Services. For more information and rollout schedules, see AI Governance Services Upgrade Notice.

New Attribute Management APIs 

The following APIs are now available for use to set attribute activation statuses, add custom attributes to schemas, and add custom options to attributes. These APIs allow users to easily manage AI Governance attributes in bulk for use in their inventories.

Note:

These APIs will become available as customer tenants are migrated to enhanced AI Governance Services. For more information and rollout schedules, see AI Governance Services Upgrade Notice.

New Relationship Management APIs

The following APIs are now available for use to create and remove relationship records between entities, as well as return relationship record metadata and details. These APIs enable users to map and manage lineages between entities in AI Governance.

Note:

These APIs will become available as customer tenants are migrated to enhanced AI Governance Services. For more information and rollout schedules, see AI Governance Services Upgrade Notice.

New Entity Type Management APIs

The following APIs are now available for use to retrieve details and metadata of a single entity type or a complete list of active entities in AI Governance inventories.

Note:

These APIs will become available as customer tenants are migrated to enhanced AI Governance Services. For more information and rollout schedules, see AI Governance Services Upgrade Notice.

New Entity Management APIs

The following APIs are now available for use to create and delete entities, as well as retrieve and update their metadata and details. These APIs enable users to conduct full management of their entities in AI Governance.

Note:

These APIs will become available as customer tenants are migrated to enhanced AI Governance Services. For more information and rollout schedules, see AI Governance Services Upgrade Notice.

New Entity Workflow Management API

Added the Update Entity Workflow Stage API to update the workflow stage of an entity. This API allows users to advance the workflow of an entity to a specific workflow stage with optional rule-execution flags.

Note:

This API will become available as customer tenants are migrated to enhanced AI Governance Services. For more information and rollout schedules, see AI Governance Services Upgrade Notice.

Fixed

  • Resolved an issue that prevented AI System inventories from appearing in a parent organization when a child organization was deleted.

  • Resolved an issue that prevented the file export of AI Governance inventories.

  • Resolved an issue that caused attachments to be uploaded multiple times to Project, AI system, Model, and Dataset tasks that were either previously opened or actively open in the Tasks pane within AI Governance.

Existing Public Preview Features

AI Governance Inventory Global/Local Functionality

|Available with Solution Packaging Only

Establish standardized global records for AI systems, models, and datasets while maintaining contextual, local records across business units, use cases, and lifecycle stages. This capability lets teams track AI asset evolution through a clear audit trail, enforce standardized attributes at the global level, and manage jurisdiction-specific or use case-specific requirements at the local level.

For more information, see AI Governance Global/Local Feature Guide. This feature is related to the following ideas: AI-I-31, PDGI-I-1416

Amazon Bedrock AI Model & Agent Detection

|Available with Solution Packaging Only

Automatically scan cloud environments, APIs, pipelines, and applications to detect active AI models and agents in your Amazon Bedrock accounts. This feature captures metadata including model type, owners, input/output behavior, and associated datasets, providing a real-time, searchable inventory that serves as the foundation for governance policies, risk assessments, and audit trails.

For more information, see AI Automation Feature Guide.

Databricks Unity Catalog AI Models, Agents, and Datasets Detection

|Available with Solution Packaging Only

Automatically scan cloud environments, APIs, pipelines, and applications to detect active AI models, agents, and datasets in your Databricks accounts. This feature captures metadata including model type, owners, input/output behavior, and associated datasets, providing a real-time, searchable inventory that serves as the foundation for governance policies, risk assessments, and audit trails.

For more information, see AI Automation Feature Guide.

GCP Vertex AI Model and Agent Detection

|Available with Solution Packaging Only

Automatically scan cloud environments, APIs, pipelines, and applications to detect active AI models and agents in your Google Cloud accounts. This feature captures metadata including model type, owners, input/output behavior, and associated datasets, providing a real-time, searchable inventory that serves as the foundation for governance policies, risk assessments, and audit trails.

For more information, see AI Automation Feature Guide.

SageMaker AI Model Detection

|Available with Solution Packaging Only

Automatically scan cloud environments, APIs, pipelines, and applications to detect active AI models in your SageMaker accounts. This feature captures metadata including model type, owners, input/output behavior, and associated datasets, providing a real-time, searchable inventory that serves as the foundation for governance policies, risk assessments, and audit trails.

For more information, see AI Automation Feature Guide.

Azure Foundry Model and Agent Detection

|Available with Solution Packaging Only

Automatically scan cloud environments, APIs, pipelines, and applications to detect active AI models and agents in your Azure Foundry accounts. This feature captures metadata including model type, owners, input/output behavior, and associated datasets, providing a real-time, searchable inventory that serves as the foundation for governance policies, risk assessments, and audit trails.

For more information, see AI Automation Feature Guide.

Automated AI Discovery

Continuously scan, detect, and catalog AI models and agents across your AWS-native ecosystem. This seamless integration experience enables real-time visibility into your organization's AI landscape, mapping relationships between models, training data, and business processes to strengthen risk management and compliance. By eliminating manual tracking, teams can focus on innovation while maintaining comprehensive oversight of their AI systems through automated discovery and continuous monitoring.

For more information, see Automated AI Discovery: Amazon SageMaker Integration for AI Governance Models

Automated AI Discovery

Discover and catalog AI models, notebooks, and experiments across Google Cloud while maintaining centralized governance controls. This seamless integration experience enables real-time visibility into your organization's AI landscape, mapping relationships between models, training data, and business processes to strengthen risk management and compliance. By eliminating manual tracking, teams can focus on innovation while maintaining comprehensive oversight of their AI systems through automated discovery and continuous monitoring.

For more information, see Automated AI Discovery: Google Vertex Integration for AI Governance Models.

Metadata for Datasets

|Available with Solution Packaging Only

Improve data use governance functions by automating dataset evaluation and surfacing metadata that clarifies data quality, sensitivity, and readiness. This accelerates access request reviews, ensures responsible data usage, and helps teams build AI models on compliant, trustworthy datasets, which enhances both accuracy and oversight.

Export Inventory Records to Column Report

Create a report of all records of a specific inventory and the columns eligible for bulk import, or the current saved view of an inventory screen including applied filters. This provides you with two flexible reporting methods to gather comprehensive insights into inventory records.

For more information, see Exporting AI Inventory Records.

Permissions

Standard / Control Framework Changes

New Colorado AI Act Framework Added

The Colorado Artificial Intelligence Act is the first comprehensive U.S. state law focused on consumer protections and accountability in the use of AI systems, with its core obligations centered on high-risk AI systems used in consequential decision-making. Effective June 30, 2026, it introduces requirements relating to reasonable care, risk management, impact assessments, transparency, consumer notices, and appeal rights, while also including broader disclosure obligations for certain AI systems that interact with consumer.

We’ve streamlined Colorado AI Act compliance by offering the full framework on our platform—featuring controls, implementation guidance, evidence tasks, policies, and risks aligned with the law’s requirements for developers, deployers, and qualifying small deployers. The framework is designed to help organizations operationalize governance for AI systems and support defensible compliance with the Act’s accountability and transparency requirements.

Important:

The Colorado AI Act Framework will be available on the OneTrust Platform effective March 20, 2026.

For more information, see Supported Control Frameworks.

Things to Know

OneTrust is planning to upgrade all environments to the new AI Governance Services, which provide improved permission granularity, expanded inventory support, foundations for agent governance, and a more unified management experience through the Inventory Manager. For more information and rollout schedules, seeAI Governance Services Upgrade Notice.

OneTrust is planning to unify the export output of AI Governance inventories to standardize values forSystem usersattributes. This change will replace the user's display name (e.g. John Smith) in favor of their email address (e.g. john.smith@onetrust.com) across all inventory types. Currently the platform has mixed behavior across the available inventory times, leading to import failures where the schema expects email address for these user fields.

Tenants will be automatically updated with this enhancement in the OneTrust 202604.2.0 release.

Added related entity support in AI Governance column reports to report on Risks and Controls.

About Known Defects

 

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.