Compliance Automation - January 30, 2026-202601.2.0

General Availability

Editable Collection Period Start Date for Evidence Tasks

Update the collection start month for evidence tasks on the Edit evidence task modal or in bulk via the new Update evidence task implementations template in Global Settings. This enhancement allows you to specify a calendar start month when creating an evidence task and update the start month of existing tasks, ensuring accuracy by adjusting all downstream impacts automatically.

For more information see Collecting and Managing Evidence Task and Managing Evidence Tasks in Bulk. This feature is related to the following idea: GCIA-I-303.

Existing Public Preview Features

AI Evidence Analysis

|Available with Solution Packaging Only

Run AI-powered analysis for files uploaded on the evidence collection pane of the Evidence tasks screen when the Record recommendations setting is enabled in Global Settings. This feature allows you to evaluate how well files submitted during evidence collection align with defined controls and evidence requirements. The analysis will provide guidance that highlights validated content and flag gaps or incomplete information.

Important:

This feature is currently available for customers in the following environments: APP, APP-FR, APP-EU, APP-DE. AI Evidence Analysis will be available for all environments in a future release.

For more information, see Using AI for Evidence Analysis.

Evidence Task Review Workflow

Enable a default workflow for evidence task intervals when a reviewer is assigned. This enhancement introduces a structured set of stages to track the lifecycle of evidence, while also supporting notifications and task creation to keep teams informed and on track.

Note:

The Evidence Task Approval Bypass permission is required to allow evidence task assignees to bypass approval stages and send an evidence task interval to be collected.

Permissions

Standard / Framework Changes

New China Personal Information Protection Law Framework Added

The China Personal Information Protection Law, effective November 1, 2021, establishes a comprehensive framework for the processing of personal information in China, setting clear requirements for transparency, lawful basis, and accountability. The law grants individuals robust rights over their personal information while imposing specific obligations on organizations—particularly for sensitive personal information, cross-border transfers, and the use of processors—to ensure responsible handling throughout the data lifecycle.

We’ve made implementing the PIPL easy by offering the framework on our platform and ensuring users can benefit from its overlap with other frameworks that exist on our platform. The platform contains survey questions to help you define scope that will bring all relevant policies, controls, control implementation guidance and evidence tasks (including guidance), among others to assist in meeting the requirements of the PIPL.

Important:

The China Personal Information Protection Law will be available on the OneTrust platform effective February 6, 2026.

For more information, see Supported Control Frameworks.

New Databricks AI Governance and Security Framework Added

The Databricks AI Governance & Security Framework provides a structured approach to managing AI risks across the full AI lifecycle—spanning data, models, infrastructure, and operations—while embedding governance and security controls directly into the AI stack.

We’ve simplified adoption of the Databricks AI Governance & Security Framework by offering a unified framework on the our platform, combining both the Databricks AI Governance Framework and the Databricks AI Security Framework into a single, integrated control set. The framework includes controls, implementation guidance, evidence tasks, policies, and risks aligned to Databricks’ governance and security expectations, enabling organizations to operationalize AI governance and security in a scalable way.

Important:

The Databricks AI Governance & Security Framework will be available on the OneTrust platform effective Feb 15, 2026.

For more information, see Supported Control Frameworks.

Things to Know

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.