AI Governance - September 4, 2026 - 202609.1.0

General Availability

Preserve/Delete Hidden Data to AI Governance Objects

Control how hidden responses are handled in AI Governance inventory assessments with the Preserve/Delete Hidden Data setting, matching behavior available for other inventory-based assessments.

For more information, see Preserving or Deleting Hidden Data.

Workflow List Table Experience Updates

Workflow list tables have been enhanced to deliver a more consistent and intuitive table experience. This update includes:

  • Visible ascending and descending sort arrows to make sort direction easier to recognize at a glance

  • A column picker that gives users more control over which columns are displayed in the table

  • A repositioned context menu on the left side of the table to support a more consistent and easier-to-find interaction pattern

These enhancements will be reflected on the workflow list tables for the following objects:

  • AI agents

  • AI systems

  • Models

  • Projects

Send Notifications to User Groups

Select a group in the Assignee field of a Send notification rule action. This helps route workflow notifications to all relevant team members across standard workflows.

This enhancement will be available for the following objects:

  • AI agents

  • AI systems

  • Models

  • Projects

Assign Tasks Using User-Type Attributes

Assign tasks with the Create task stage rule action to either system users or eligible single-select, user-type attributes. This workflow update allows you to dynamically route tasks to the right users while preserving existing task-assignment behavior.

This enhancement will be available for the following objects:

  • AI agents

  • AI systems

  • Models

  • Projects

New AI Governance Attribute Management APIs

Added APIs to retrieve AI Governance schema definitions, schema attributes, and attribute option values. These APIs enable developers to programmatically discover schema structures, access attribute metadata, and retrieve available attribute options for AI Governance workflows.

Enhancements to the Create Task API

Updated the Create Task API to support the ai-governance value for the moduleSource request parameter. This enhancement enables tasks to be created and associated with AI Governance workflows.

Table Enhancements for AI Automations

Tables and table functionalities on the AI automations screen have been upgraded to improve usability, accessibility, and customization, including resizable columns, more records per view, clearer row actions, and more. These updates are designed to provide a consistent and improved user experience, helping users work more efficiently with data and tailor their experience to their specific needs.

For more information, see Table Enhancements Across the OneTrust Platform and Table Enhancements User Guide.

Fixed

  • Resolved an issue that redirected users to the Archived assessments screen after approving an assessment instead of returning them to the Assessments screen.

  • Resolved an issue that automatically applied the Type = AI filter on the Projects screen despite the filter not being configured in the saved view.

Existing Public Preview Features

Attribute-Based Access Control (ABAC) Phase 1

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by using assignments through sharing, attributes, or workflows to determine which records users can access and what permissions they have on those records. This feature introduces assignment-based permissions, sharing and access management, and record-level auditing, helping organizations implement least-privileged access, improve governance, and simplify collaboration across teams and workflows.

For more information, see Attribute-Based Access Control (ABAC) Phase 1: Foundations in the Settings & Administration release notes. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.

Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0 for supported objects across AI Governance.

For more information, see Attribute-Based Access Control (ABAC) User Guide and Managing Attribute-Based Access Control (ABAC) for AI Governance.

Microsoft Copilot Studio Agent Detection

Automatically scan Microsoft Copilot Studio environments to detect agents and capture key metadata such as ownership, environment, model bindings, connected channels, and authentication settings. This creates a searchable inventory of Copilot Studio agents and their configurations in OneTrust, helping teams support governance, risk assessment, and audit readiness.

For more information, see AI Automation Feature Guide.

GenAI Component Intelligence for AI Models

Create and enrich AI model records by using the Model library with information from commonly used third-party AI models. This gives teams a continuously updated technical context to understand model behavior, assess suitability and risk, and start governance workflows without manual research.

For more information, see Creating and Managing AI Models.

AI Policy - Automation Actions

Configure automated actions for AI policies to automatically flag risks and send email notifications when AI models and agents violate policies. This enhancement helps governance teams reduce manual monitoring, streamline governance workflows, and respond more quickly to issues by triggering actions based on policy compliance outcomes.

For more information, see AI Policy Enforcement Guide.

Things to Know

TheSet up automationbutton has been moved to the top of theAI automationsscreen for better visibility, and the info icon has been removed from theContext menubecause it is not supported in the new enhanced table.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.