Settings & Administration - August 7, 2026 - 202608.1.0 (Summer Release)

General Availability

New AI Feature Management Experience

|Available with Solution Packaging Only

The AI Feature Management experience in Global Settings has been improved to simplify how admins enable, organize, and manage AI features in their accounts. This interface update includes the following changes:

  • AI feature management has moved from the Support > Feature management menu to the new AI management > AI features menu in Global Settings.

  • Added a top-level Enable OneTrust AI control to manage bulk access to all supported OneTrust AI capabilities.

  • AI features are now organized into feature groups that include related yet dedicated feature settings for precise access management.

  • Turning a feature group on or off now manages access for all included features in that group, making it easier to enable/disable related AI features in bulk.

For more information, see Managing AI Features in the OneTrust Platform and Available AI Platform Features.

Third-Party Risk Agent in Copilot

|Available with Solution Packaging Only

Leverage our Third-Party Risk Agent in Copilot to conduct deep research to automate and accelerate the onboarding of new vendors and launch inherent risk assessments. This enhancement speeds up assessment completion, reduces support requirements, and provides users with more relevant information in the assessment.

For more information, see OneTrust Third-Party Risk Agent Feature Guide.

AI Agents

|Available with Solution Packaging Only

Accelerate privacy impact and vendor risk assessments by using AI Agents to answer personal data questions during questionnaire completion. This feature analyzes assessment documents to identify likely data subjects and personal data types, then uses those results to support answers and update the linked inventory data map when the assessment is submitted.

For more information, see Leveraging AI Auto-Responses for Assessments.

AI Agents

|Available with Solution Packaging Only

Upload supplemental documentation during privacy impact and vendor risk assessment setup so AI Agents in Copilot can use additional context to answer assessment questions more effectively. This feature lets users add, remove, or skip documents before launch and makes those files available for AI auto-completion, improving output quality, transparency, and assessment completeness.

For more information, see OneTrust Privacy Risk Agent Feature Guide.

User Experience Enhancements

The Add User flow has been enhanced with the following changes to make user setup and role assignment more intuitive and efficient:

Improved progress tracking

The progress bar on theAdd Userscreen now includes labeled steps,Add detailsandAssign roles, providing clearer guidance throughout the workflow and helping users quickly understand where they are in the process.

Redesigned Add Role experience

TheAdd Rolemodal has been streamlined to align with the natural role assignment workflow. Users now select an organization before choosing roles, can assign multiple roles in a single action, and can review all selected roles before saving. These improvements are available when both adding and editing user roles, reducing clicks and improving administrative efficiency.

With these enhancements, administrators can onboard users more efficiently, navigate the role assignment process with greater confidence, and review role selections more easily before saving changes.

New Documents APIs

Added the new Get Download Token API and Download Document API to support secure document and attachment downloads through token-based access. These APIs allow developers to generate short-lived download tokens and retrieve document content without exposing direct file access.

New Get List of Event Types API

Added the Get List of Event Types API to retrieve the event types used to track user and system activity. Results can be filtered by product area or record type to help identify relevant audit events.

Fixed

  • Resolved an issue that prevented attribute groups from being deleted when translation values were applied.

  • Resolved an issue that prevented the full list of organizations from loading in the Organization filter on select inventory screens.

  • Resolved an issue that caused duplicate attachments to be created when a user quickly reselected a record during the upload process.

  • Resolved an issue that caused the last column in tables to display with an incorrect width when the screen contained a small number of columns or short cell data.

  • Resolved an issue that caused toast notifications with descriptions to remain persistent instead of automatically disappearing after six seconds.

New Public Preview Features

Attribute-Based Access Control (ABAC) Phase 1

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by adding more granular control over who can access specific records and what actions they can perform. Rather than granting access to all records within a solution, ABAC uses assignments and attributes to determine which records a user can access and what permissions they have on those records, helping organizations implement least-privileged access more effectively.

ABAC Phase 1: Foundations is available for supported objects across AI Governance, Privacy Automation, Tech Risk & Compliance, and Third-Party Management, and introduces the following core capabilities to manage record-level access and collaboration:

Basic Role

: Use the new minimal-access Basic role available on theRolesscreen to configure users with access only to the OneTrust Platform homepage, supporting least-privileged access from the start.

Assignments

: Leverage out-of-the-box or custom assignments, which are sets of permissions that define what users can do on a record. Assignments can be applied through record sharing or inherited through user attributes and workflow stages to automatically grant record-level permissions for owners, approvers, reviewers, and other users involved in the record lifecycle.

Sharing, Requesting & Managing Access

: Share records directly with users, request access to records, review who currently has access, and modify or revoke access as needed.

Record-Level Auditing

: Review audit history for record access and assignment configuration changes to understand what changed, who made the change, and when the change occurred.

ABAC helps organizations manage access more precisely by aligning permissions to records and assignments rather than relying on increasingly complex role structures. This enables granular record-level access control, improves governance, and simplifies collaboration across teams and workflows. With this enhancement, administrators can reduce access-management complexity while strengthening security and accountability across the OneTrust Platform.

For more information, see Attribute-Based Access Control (ABAC) User Guide. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.

Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0, with support initially available for a subset of objects and functionality. Additional capabilities and object support will be introduced in future releases through ABAC Phase 2: Dynamic Access.

OneTrust Activity Log

Gain a unified, real-time view of user and system audit events across the OneTrust Platform with the Activity logs screen to increase visibility and control, investigate issues faster, and meet compliance requirements with a complete, traceable audit trail. Through a centralized audit experience, teams can quickly search and filter audit records, monitor activity across solutions from a single location, and export audit data for broader reporting and analysis.

For more information, see OneTrust Activity Log.

Existing Public Preview Features

Privacy Risk Agent

|Available with Solution Packaging Only

Leverage our Privacy Risk Agent in Copilot to streamline the creation of processing activities and the completion of assessments. This agent dramatically reduces the time and manual effort required to complete PIAs, improves accuracy through semantic matching and document-based autofill, and provides transparent confidence scoring, which enables Privacy Managers to complete assessments faster, more consistently, and with greater confidence.

For more information, see OneTrust Privacy Risk Assessment Feature Guide.

SCIM Users and Groups Integrations

Utilize the Integrations module to configure triggers and actions for SCIM Users and Groups. This feature allows users to automate their organization's processes when managing user and group information using SCIM APIs.

For complete details on these workflow options, see Managing Custom Integration Workflows.

New Root Organization

Create a new root organization at the top of an existing organizational hierarchy using the new Set as the Root Organization check box on the Add Organization modal. This feature allows you to move an existing organizational structure, along with certain previously configured settings, under a new root organization.

For more information, see Managing Organizations.

Integrate Tasks with External Systems

Manage tasks created within the application across external systems by creating integration workflows using the following new integration events:

  • Task Add Attachment

  • Task Add Comment

  • Task Created

  • Task Deleted

  • Task Remove Attachment

  • Task Updated

This enhancement allows you to manage tasks across external systems, which may be helpful when addressing tasks that require a large volume of actions.

For more information, see Integrating Tasks with External Systems.

Things to Know

Performance enhancements have been made to theOrganizationmenu in theGlobal Headerto better support tenants with a large number of organizations, making navigation and organization selection easier.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.