AI Governance - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Shared Control Implementations for AI Governance Inventories

Create shared control implementations and evidence tasks for projects, datasets, and models. You can also merge multiple implementations of the same library control into a single control or split a single implementation into several controls. This feature allows you to reduce the sprawl of control implementations created within your organization by removing redundant controls.

Key capabilities include:

Inventory Flexibility

 Choose which inventories align to controls to provide greater flexibility when creating and updating records.

Relationship Management

 Add inventories to existing control implementations or associate additional controls directly to inventories.

Merge & Split Controls

 Merge multiple implementations of the same library control or split a shared control into single implementations for each inventory

Evidence Tasks

 Create and manage evidence tasks to collect, review, and validate evidence related to controls.

Unified Purpose

Gain full oversight into all aspects involved in processing personal data with the Purpose object. Available in Global Data Manager, this centralized object type provides cross-solution insights into how personal data collected for that given purpose is used across your business, so that you are better able to associate objects like data elements, processing activities, vendors, collection points, and projects through a common and central object.

For more information, see Unified Purpose Feature Guide.

@Mentions for AI Systems, Datasets, Models, and Projects

Mention users directly within comments to draw their attention or request their input, triggering both an in-app notification and email notification. @Mention functionality is now supported in comments on the following objects:

  • AI Systems

  • Datasets

  • Models

  • Projects

This enhancement improves collaboration and ensures faster, more targeted communication across your team.

Screen Header Enhancements

 

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

  • Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.

  • Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.

  • Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

While some screens already feature updated headers, not all enhancements are applied universally and may vary depending on the screen's functionality and context. Enhancements to additional screens may also become visible across the next several releases.

For more information, see Screen Header Enhancements Across the OneTrust Platform.

New Public Preview Features

Automated AI Discovery

Continuously scan, detect, and catalog AI models and agents across your AWS-native ecosystem. This seamless integration experience enables real-time visibility into your organization's AI landscape, mapping relationships between models, training data, and business processes to strengthen risk management and compliance. By eliminating manual tracking, teams can focus on innovation while maintaining comprehensive oversight of their AI systems through automated discovery and continuous monitoring.

For more information, see Automated AI Discovery: Amazon SageMaker Integration for AI Governance Models

Automated AI Discovery

Discover and catalog AI models, notebooks, and experiments across Google Cloud while maintaining centralized governance controls. This seamless integration experience enables real-time visibility into your organization's AI landscape, mapping relationships between models, training data, and business processes to strengthen risk management and compliance. By eliminating manual tracking, teams can focus on innovation while maintaining comprehensive oversight of their AI systems through automated discovery and continuous monitoring.

For more information, see Automated AI Discovery: Google Vertex Integration for AI Governance Models.

Metadata for Datasets

|Available with Solution Packaging Only

Improve data use governance functions by automating dataset evaluation and surfacing metadata that clarifies data quality, sensitivity, and readiness. This accelerates access request reviews, ensures responsible data usage, and helps teams build AI models on compliant, trustworthy datasets, which enhances both accuracy and oversight.

Risk Aggregation for Related Records

Enable systemic risk visibility across linked inventory objects in AI Governance. When enabled, parent objects (such as AI Systems or Projects) inherit risks from related child entities (such as Models or Datasets), allowing organizations to automate comprehensive risk views.

For more information, see Risk Aggregation for Related AI Records.

Purpose Data Usage

Drill into specific purposes across the platform and inspect their usage details. This central reporting screen provides privacy managers a central location for monitoring where a given purpose is used to better manage those records.

For more information, see Unified Purpose Feature Guide.

Existing Public Preview Features

Export Inventory Records to Column Report

Create a report of all records of a specific inventory and the columns eligible for bulk import, or the current saved view of an inventory screen including applied filters. This provides you with two flexible reporting methods to gather comprehensive insights into inventory records.

For more information, see Exporting AI Inventory Records.

Things to Know

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue. 

Permissions

  • Invited users and custom role users can now be granted access to AI Governance-based assessments via emails without the necessary permissions to access AI Governance.