Enterprise Policy Management - October 16, 2026 - 202610.1.0

General Availability

Enable/Disable Status of Stage Rules and Workflow Rules

Users with permission to update rules can now enable or disable stage rules and workflow rules without deleting them. Disabled stage rules won't run when a workflow enters the stage, and disabled workflow rules won't run when their configured trigger occurs.

These enhancements will be available for the following Enterprise Policy Management Workflows:

  • Exceptions

  • Policies

  • Procedures

  • Privacy Notices

  • Standards

Attribute Options Limit

A limit of 10,000 options is now applied to all single-select and multi-select attributes. Attribute option creation will fail if the total number of active and inactive options exceeds this limit.

This enhancement will be available for the following Enterprise Policy Management objects:

  • Exceptions

  • Policies

  • Privacy Notices

  • Procedures

  • Standards

Fixed

  • Resolved an issue that prevented the published modal from retaining the configured Document library settings from the previous published version. For example, if a user adds a policy to the Document library with the Visible to all users setting enabled in V1, then V2 will retain the setting configuration.

Existing Public Preview Features

Attribute-Based Access Control (ABAC) Phase 1

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by using assignments through sharing, attributes, or workflows to determine which records users can access and what permissions they have on those records. This feature introduces assignment-based permissions, sharing and access management, and record-level auditing, helping organizations implement least-privileged access, improve governance, and simplify collaboration across teams and workflows.

For more information, see Attribute-Based Access Control (ABAC) Phase 1: Foundations in the Settings & Administration release notes. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.

Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0 for supported objects across Tech Risk & Compliance.

For more information, see Attribute-Based Access Control (ABAC) User Guide and Managing Attribute-Based Access Control (ABAC) for Tech Risk & Compliance.

AI-Powered Document Analysis |Available with Solution Packaging Only

Analyze documents against a standard or framework using the new Analyze document button on the Document details screen. This AI-powered feature identifies gaps and provides recommendations to help remediate issues related to the following objects:

  • Controls

  • Risks

  • Issues

AI-generated recommendations will appear in the Recommended section of the Related, Controls, Risks, and Issues tabs of the Document details screen. These recommendations may include relating controls, creating relationships, or linking risks and issues.

For more information, see Using AI-Powered Document Analysis. This feature is related to the following idea: OT-I-14780.

Things to Know

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.