Assessment Automation - April 25, 2026 - 202604.2.0

Fixed

  • Resolved an issue that caused exported PDF assessment reports to incorrectly display answer options in multiple languages.

  • Resolved an issue that prevented information request emails from displaying the assessment name correctly when translated to Japanese.

  • Resolved an issue that prevented users from downloading exported PDF reports from the Notification popover when some profile score attributes contained null values.

  • Resolved an issue that caused backup assessments to briefly become visible to users during a template version update.

  • Resolved an issue that caused risks to remain linked to an assessment after being deleted from the Risk Register.

  • Resolved an issue that prevented filters from being retained when users saved a custom view on the Assessments screen.

Existing Public Preview Features

Launch Reassessments as Not Started

Configure reassessments to default to the Not Started stage upon launching. This enhancement applies to copied assessments, reassessments launched via automation rules, and reassessments launched via API.

Company Names in Email Notifications

Display your company name in assessment email notification templates using the __TenantName__ email variable when notifying users. This enhancement enables you to provide assessment notifications on behalf of your organization that reflect your tenant's name.

For more information, see Customizing Assessment Email Templates Using Dynamic Variables.

Template Updates

AI Intake Assessment Full v4.0

This release provides customers with a new section dedicated to AI system impact assessment legal requirements. This section currently features the comprehensive AI laws of South Korea (AI Basic Act) and Colorado (AI Act). AI Governance customers interested in compliance with these frameworks are impacted by this release.

In particular, the South Korean Act on the Development of Artificial Intelligence and Establishment of Trust (AI Basic Act) establishes a comprehensive national framework for the governance of artificial intelligence in South Korea, promoting innovation while ensuring trust, transparency, and the protection of fundamental rights. The Act introduces baseline obligations for AI developers and users, with enhanced requirements for high‑impact and generative AI systems, and emphasizes accountability, explainability, and user awareness across the AI lifecycle. On the other hand, the Colorado Artificial Intelligence Act creates a risk‑based regulatory framework for the use of artificial intelligence in consequential decision‑making affecting consumers in Colorado. The law focuses on preventing algorithmic discrimination by imposing duties of reasonable care, transparency, and impact assessment on developers and deployers of high‑risk AI systems, while granting individuals clear rights to notice, explanation, and human review in AI‑driven decisions.

We’ve added coverage for the AI system impact assessment requirements set out by these two laws to the AI Intake Assessment (Full) by offering dedicated questions and rules. The following is the change log for this release:

  • The Welcome section text was updated.

  • Updated question and description text of question 1.3.

  • Updated question text of question 2.2.

  • Updated question text of question 6.4.

  • Added the new Affected Stakeholders attribute for question 1.5.

  • Modified the name of section 4 of the EU AI Act to EU AI Act - Scope and Risk Classification.

  • Modified description text of question 4.1 - EU AI Act.

  • Modified question text of questions 5.1, 5.2, 5.5, and 5.6.

  • Created a new section 7 named AI Assessment Regulatory Requirements. This section is optional and is meant to be expanded over time to amplify its regulatory coverage. Its purpose is to collate questions based on global legal requirements on AI impact/risk assessments. The following framework was added to this section:

    • South Korea AI Basic Act

    • Colorado AI Law

  • New questions were added to the newly introduced section 7:

    • Question 7.1 - Scope - Applicable Law(s)

    • Question 7.2 – Guidance Text [KR]

    • Question 7.3 – High-impact AI [KR]

    • Question 7.4 – Technical and Operational Principles Analysis [KR]

    • Question 7.5 – Scenario-based Risk Analysis [KR]

    • Question 7.6 – Affected Fundamental Rights [KR]

    • Question 7.7 – Determination of Impact on Fundamental Rights [KR]

    • Question 7.8 – Mitigation Measures [KR]

    • Question 7.9 – Guidance Text [US-CO]

    • Question 7.10 – High-risk AI System [US-CO]

    • Question 7.11 – Deployer Qualification [US-CO]

    • Question 7.12 – Employee Count [US-CO]

    • Question 7.13 – Deployer's Training Data [US-CO]

    • Question 7.14 – Reasonably Foreseeable Usage [US-CO]

    • Question 7.15 – AI System Learning Data [US-CO]

    • Question 7.16 – Developer Impact Assessment Disclosure [US-CO]

    • Question 7.17 – General AI Information [US-CO]

    • Question 7.18 – Algorithmic Discrimination [US-CO]

    • Question 7.19 – Categories of Data Processed [US-CO]

    • Question 7.20 – Outputs [US-CO]

    • Question 7.21 – Customization Data [US-CO]

    • Question 7.22 – Performance Metrics [US-CO]

    • Question 7.23 – Transparency Measures [US-CO]

    • Question 7.24 – Post-deployment Monitoring & User Safeguards [US-CO]

    • Question 7.25 – Intentional and Substantial Modification(s) [US-CO]

    • Question 7.26 – Intentional and Substantial Modification(s) [US-CO]

  • Conditional logic configurations have been added to account for the inclusion of the new questions.

  • Updated and renamed the Create Minimal Risk rule.

  • Updated and renamed the Unacceptable Risk System rule.

  • Deleted the Create Unacceptable Risk rule.

  • Updated the EU AI Act - High-Risk System rule.

  • Updated the Conformity Assessment rule.

  • Updated the EU AI Act - Fundamental Rights Impact Assessment rule.

  • Updated and renamed the EU AI Act - General-Purpose AI rule.

  • Updated conditional logics in question 4.7.

  • Updated the conditional logics of questions in section 5.

  • The risk/task rule configurations below have been added to account for the inclusion of the new questions:

    • New AI Basic Act [KR] - Confirmation of High-Impact AI risk rule

    • New AI Basic Act [KR] - Obligations of High-Impact AI Business Operators task rule

    • New AI Basic Act [KR] - High-Impact AI Impact Assessment Obligation risk rule

    • New Colorado AI Law [US-CO] - High-Risk AI System Impact Assessment Obligation task rule

Things to Know

About Known Defects

 

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.