AI Governance - September 25, 2026 - 202609.2.0

Fixed

  • Resolved an issue that caused single-select AI system attributes to be created as invalid multi-select attributes during bulk import when the Option Type was set to None.

  • Resolved an issue that caused AI Governance attribute values to be cleared, resulting in blank values in assessments when hidden data was set to be deleted.

New Public Preview Features

Performance and Operational Dashboard

Use the Performance Summary tab in the AI Governance Insights Dashboard to monitor AI agent and model usage, risk, PII exposure, and token consumption across your organization. This enhancement helps you identify the models and agents with the highest token consumption and the areas with the highest AI usage, so you can prioritize them for governance.

For more information, see Insights AI Governance Dashboard.

Existing Public Preview Features

Attribute-Based Access Control (ABAC) Phase 1

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by using assignments through sharing, attributes, or workflows to determine which records users can access and what permissions they have on those records. This feature introduces assignment-based permissions, sharing and access management, and record-level auditing, helping organizations implement least-privileged access, improve governance, and simplify collaboration across teams and workflows.

For more information, see Attribute-Based Access Control (ABAC) Phase 1: Foundations in the Settings & Administration release notes. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.

Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0 for supported objects across AI Governance.

For more information, see Attribute-Based Access Control (ABAC) User Guide and Managing Attribute-Based Access Control (ABAC) for AI Governance.

Microsoft Copilot Studio Agent Detection

Automatically scan Microsoft Copilot Studio environments to detect agents and capture key metadata such as ownership, environment, model bindings, connected channels, and authentication settings. This creates a searchable inventory of Copilot Studio agents and their configurations in OneTrust, helping teams support governance, risk assessment, and audit readiness.

For more information, see AI Automation Feature Guide.

GenAI Component Intelligence for AI Models

Create and enrich AI model records by using the Model library with information from commonly used third-party AI models. This gives teams a continuously updated technical context to understand model behavior, assess suitability and risk, and start governance workflows without manual research.

For more information, see Creating and Managing AI Models.

AI Policy - Automation Actions

Configure automated actions for AI policies to automatically flag risks and send email notifications when AI models and agents violate policies. This enhancement helps governance teams reduce manual monitoring, streamline governance workflows, and respond more quickly to issues by triggering actions based on policy compliance outcomes.

For more information, see AI Policy Enforcement Guide.

Things to Know

Legacy Sharing vs ABAC Sharing

OneTrust is planning to transition customers from the legacy sharing experience to Attribute-Based Access Control (ABAC) sharing for Inventory objects. ABAC provides a more consistent and scalable access model, supports Assets, Processing Activities, Entities, Vendors, and Projects, and offers more advanced access-control options. 

If your tenant currently uses Legacy Share, your existing sharing configuration will continue to work until you are ready to transition. The migration is not automatic, and Legacy Share continues to take precedence for Inventory objects where both sharing models are available. Review your current sharing setup and discuss readiness with your stakeholders; when you are ready, contact your Customer Success Manager or support representative to coordinate the migration.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.