AI Governance - May 15, 2026 - 202605.1.0 (Spring Release)

General Availability

AI Agents Inventory

Create records to understand, document, and govern agent behavior as it operates in production environments, while keeping clear separation between business intent, operational systems, and technical components. This additional AI Governance inventory object helps organizations standardize intake, reduce approval time, and curb configuration drift.

For more information, see Managing AI Agents in AI Governance. This feature is related to the following ideas: AI-I-58, AI-I-6.

Amazon Bedrock AI Model & Agent Detection

|Available with Solution Packaging Only

Automatically scan cloud environments, APIs, pipelines, and applications to detect active AI models and agents in your Amazon Bedrock accounts. This feature captures metadata including model type, owners, input/output behavior, and associated datasets, providing a real-time, searchable inventory that serves as the foundation for governance policies, risk assessments, and audit trails.

For more information, see AI Automation Feature Guide.

Databricks Unity Catalog AI Models, Agents, and Datasets Detection

|Available with Solution Packaging Only

Automatically scan cloud environments, APIs, pipelines, and applications to detect active AI models, agents, and datasets in your Databricks accounts. This feature captures metadata including model type, owners, input/output behavior, and associated datasets, providing a real-time, searchable inventory that serves as the foundation for governance policies, risk assessments, and audit trails.

For more information, see AI Automation Feature Guide.

GCP Vertex AI Model and Agent Detection

|Available with Solution Packaging Only

Automatically scan cloud environments, APIs, pipelines, and applications to detect active AI models and agents in your Google Cloud accounts. This feature captures metadata including model type, owners, input/output behavior, and associated datasets, providing a real-time, searchable inventory that serves as the foundation for governance policies, risk assessments, and audit trails.

For more information, see AI Automation Feature Guide.

SageMaker AI Model Detection

|Available with Solution Packaging Only

Automatically scan cloud environments, APIs, pipelines, and applications to detect active AI models in your SageMaker accounts. This feature captures metadata including model type, owners, input/output behavior, and associated datasets, providing a real-time, searchable inventory that serves as the foundation for governance policies, risk assessments, and audit trails.

For more information, see AI Automation Feature Guide.

Azure Foundry Model and Agent Detection

|Available with Solution Packaging Only

Automatically scan cloud environments, APIs, pipelines, and applications to detect active AI models and agents in your Azure Foundry accounts. This feature captures metadata including model type, owners, input/output behavior, and associated datasets, providing a real-time, searchable inventory that serves as the foundation for governance policies, risk assessments, and audit trails.

For more information, see AI Automation Feature Guide.

Add Org Visibility/Hierarchy Support to Relationship Questions

Leverage inventory records in parent organizations for users in child organization levels in order to conduct assessments with relationship questions. This enhancement streamlines governance by sharing central models or inventories so that business respondents can answer assessments that require relationship questions.

New Public Preview Features

AI Policy Manager & Seeded AI Policies

Automatically detect AI policy violations across platforms to provide AI governance teams with actionable steps to ensure governance and compliance throughout an AI Agent lifecycle. This policy orchestration experience allows users to create custom policies for unique scenarios and support guardrail enforcement and detection.

To compliment AI policy management, seeded AI policies are also available to flag and provide enforceable steps on guardrails. This reduces the time to value for customers getting started with AI Policies and provides a template for them to use when defining their own custom AI Policies in OneTrust.

For more information, see AI Policies Feature Guide.

Guardrail Detection & Enforcement

Automatically enforce responsible AI policies on violating agents and models across AI development platforms. This enhancement to AI policies provides consistent guardrail visibility and enforcement measures in the OneTrust Platform.

For more information, see AI Policy Enforcement Guide.

Custom Notifications for Assessment Templates

Send customized, trigger-based automated email messages from a new global Notifications tab on the Assessment templates screen. This enhancement speeds up assessment completion, reduces support requirements, and provides users with more relevant information in the assessment.

For more information, see Configuring Custom Email Notifications on Assessment Templates. This feature is related to the following ideas: OT-I-949, OT-I-1270, OT-I-3522, OT-I-7945, and OT-I-16348.

Configuring Approver-only Assessment Sections

Configure approver-only sections on assessments automatically using template rules or inventory-based values. These enhancements mean users can launch assessments with approver-only sections directly from the self-service portal.

For more information, see Configuring Approver-only Assessment Sections. This feature is related to the following ideas: AA-I-293 and AA-I-302.

Leveraging AI Auto-responses for Assessments

Opt-out of automatically scanning your three most recent assessments, plus add more files, more file types, and bigger files to your uploads. These enhancements improve the performance and accuracy of the AI Doc Scanner.

For more information, see Leveraging AI Auto-responses for Assessments.

Existing Public Preview Features

Automated AI Discovery

Continuously scan, detect, and catalog AI models and agents across your AWS-native ecosystem. This seamless integration experience enables real-time visibility into your organization's AI landscape, mapping relationships between models, training data, and business processes to strengthen risk management and compliance. By eliminating manual tracking, teams can focus on innovation while maintaining comprehensive oversight of their AI systems through automated discovery and continuous monitoring.

For more information, see Automated AI Discovery: Amazon SageMaker Integration for AI Governance Models

Automated AI Discovery

Discover and catalog AI models, notebooks, and experiments across Google Cloud while maintaining centralized governance controls. This seamless integration experience enables real-time visibility into your organization's AI landscape, mapping relationships between models, training data, and business processes to strengthen risk management and compliance. By eliminating manual tracking, teams can focus on innovation while maintaining comprehensive oversight of their AI systems through automated discovery and continuous monitoring.

For more information, see Automated AI Discovery: Google Vertex Integration for AI Governance Models.

Metadata for Datasets

|Available with Solution Packaging Only

Improve data use governance functions by automating dataset evaluation and surfacing metadata that clarifies data quality, sensitivity, and readiness. This accelerates access request reviews, ensures responsible data usage, and helps teams build AI models on compliant, trustworthy datasets, which enhances both accuracy and oversight.

Export Inventory Records to Column Report

Create a report of all records of a specific inventory and the columns eligible for bulk import, or the current saved view of an inventory screen including applied filters. This provides you with two flexible reporting methods to gather comprehensive insights into inventory records.

For more information, see Exporting AI Inventory Records.

Permissions

Standard / Control Framework Changes

South Korea AI Basic Act Framework Added

South Korea’s Framework Act on the Development of Artificial Intelligence and the Creation of a Foundation for Trust establishes a national legal framework for AI governance, transparency, safety, and trust. Effective January 22, 2026 as a matter of law, it introduces core obligations relating to AI transparency, safety measures for certain advanced AI systems, responsibilities for providers of high-impact AI, human rights impact assessment, and the appointment of a local representative for certain foreign AI business operators. It also includes separate obligations for synthetic content disclosure and public-sector procurement prioritization in certain cases.

We’ve streamlined South Korea AI Basic Act compliance by offering the framework on our platform—featuring controls, implementation guidance, evidence tasks, policies, and risks aligned to the law’s requirements for AI business operators, including those providing high-impact AI and certain foreign AI business operators. The framework is designed to help organizations operationalize governance, transparency, risk management, and accountability for AI systems in scope under the Act.

Note:

The South Korea AI Basic Act Framework will be available on the OneTrust platform effective May 18, 2026.

For more information, see Supported Control Frameworks.

Things to Know

As of OneTrust 202605.1.0, OneTrust has upgraded all environments to the new AI Governance Services, which provide improved permission granularity, expanded inventory support, foundations for agent governance, and a more unified management experience through the Inventory Manager. For more information, seeAI Governance Services Upgrade Notice.

Note:

Dedicated cloud environments will be upgraded separately. Please contact OneTrust for information.

About Known Defects

 

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.