Compliance Automation - October 16, 2026 - 202610.1.0

Fixed

  • Resolved an issue that caused Initiative exports to download in an unreadable format when the initiative name contained special characters.

  • Resolved an issue that caused the Preview attachment modal to remain blank when viewing PDF files within an Evidence Task Interval.

  • Resolved an issue that prevented the Change workflow button from appearing on an Evidence Task Interval when in the first stage of a workflow.

  • Resolved an issue that overwrote optional fields with blank values when using the Update evidence task implementations bulk import template if the corresponding columns were left empty.

Existing Public Preview Features

Stage & Workflow Rules for Seeded Workflows

Add stage and workflow rules to the seeded evidence interval workflows to automatically send notifications, change evidence task stages, and change workflows. This enhancement allows organizations to tailor workflows and approval paths to match their evidence review processes and customize existing seeded workflows for greater flexibility.

For more information, see Attribute-Based Access Control (ABAC) Phase 1: Foundations in the Settings & Administration release notes. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.
Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0 for supported objects across Tech Risk & Compliance.

For more information, see Attribute-Based Access Control (ABAC) User Guide and Managing Attribute-Based Access Control (ABAC) for Tech Risk & Compliance.

Restore Deleted Inventory Records

Restore deleted inventory items directly with the Inventory Restore Feature. Users can restore a single record or multiple records at once with bulk restore. When a record is recovered, the inventory item and supported associated data are also restored. This enhancement reduces the need for manual support intervention and helps teams recover records faster.

For more information, see Restoring Deleted Inventory Records.

Stage & Workflow Rules for Seeded Evidence Interval Workflows

Add stage and workflow rules to the seeded evidence interval workflows to automatically send notifications, change evidence task stages, and change workflows. This enhancement allows organizations to tailor workflows and approval paths to match their evidence review processes and customize existing seeded workflows for greater flexibility.

For more information, see Adding Stage Rules to Evidence Interval Workflows and Adding Workflow Rules to Evidence Interval Workflows.

Standard / Control Framework Changes

New Alabama Personal Data Protection Act Framework Added

The Alabama Personal Data Protection Act (APDPA), effective May 1, 2027, establishes a comprehensive framework for data privacy, ensuring that the personal data of Alabama residents is managed with care and transparency. This legislation grants consumers substantial rights over their personal data while defining clear requirements for businesses relating to privacy notices, consumer rights requests, targeted advertising, the sale of personal data, profiling, sensitive data, data minimization, processor obligations, and data security. We've made implementing the APDPA easy by offering the framework on our platform and ensuring users can benefit from its overlap with other frameworks that exist on our platform. The platform contains survey questions to help you define scope that will bring in all relevant policies, controls, control implementation guidance, and evidence tasks, including guidance, among others, to assist in meeting the requirements of the APDPA.

For more information, see For more information, see Supported Control Frameworks.

Things to Know

Previous framework updates are now automatically removed when a framework is re-imported with the latest data to prevent duplicate control errors.

The Frameworks library now maintains organization hierarchy by displaying a control count of zero for standards and frameworks imported from other organizations when the user lacks viewing permissions.
About Known Defects
Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.