Compliance Automation - October 27, 2025 - 202510.2.0 (Fall Release)

General Availability

Framework Content Updates

Apply system updates to your library controls, evidence tasks, and frameworks using the new Content update menu in Compliance Automation and IT Risk Management. This feature simplifies the update process by allowing you to adopt only the changes relevant to your organization, improving governance, increasing flexibility, and reducing overhead when managing framework content. These updates are based on recommendations from the GRC Labs Team and help your organization stay aligned with evolving frameworks.

For more information, see Managing Framework Updates.

AI Recommended Evidence Tasks

|Available with Solution Packaging Only

Enhance custom controls with intelligent, out-of-the-box evidence task suggestions powered by AI when creating and managing controls in the Controls Library. This feature allows you to review and add recommended evidence tasks directly to your custom controls to streamline the control mapping process by reducing manual effort, minimizing errors, and accelerating audit and assessment readiness. By leveraging AI, you will receive contextually relevant evidence tasks that align with your control objectives.

For more information, see AI-Powered Evidence Task Recommendations.

Screen Header Enhancements

 

OneTrust is introducing updated screen headers to select screens across the platform to improve consistency and usability. These enhancements can include:

  • Standardized screen titles and new in-app descriptions across applicable areas of the platform, providing clearer context and quick guidance to help users understand each screen’s purpose and available actions.

  • Consolidated action buttons into a Context menu on select screens to reduce clutter and streamline navigation.

  • Renamed buttons on select screens to make actions more immediately understandable and easier to follow.

These enhancements make it easier for users to orient themselves, understand workflows, and complete tasks with greater confidence and efficiency.

Note:

While some screens already feature updated headers, not all enhancements are applied universally and may vary depending on the screen's functionality and context. Enhancements to additional screens may also become visible across the next several releases.

For more information, see Screen Header Enhancements Across the OneTrust Platform.

Fixed

  • Resolved an issue that prevented calendar months from resizing correctly when zooming out on the collection calendar.

New Public Preview Features

AI Evidence Analysis

|Available with Solution Packaging Only

Run AI-powered analysis for files uploaded on the evidence collection pane of the Evidence tasks screen when the Record recommendations setting is enabled in Global Settings. This feature allows you to evaluate how well files submitted during evidence collection align with defined controls and evidence requirements. The analysis will provide guidance that highlights validated content and flag gaps or incomplete information.

Important:

This feature is currently available for customers in the following environments: APP, APP-FR, APP-EU, APP-DE. AI Evidence Analysis will be available for all environments in a future release.

For more information, see Using AI for Evidence Analysis.

Evidence Task Review Workflow

Enable a default workflow for evidence task intervals when a reviewer is assigned. This enhancement introduces a structured set of stages to track the lifecycle of evidence, while also supporting notifications and task creation to keep teams informed and on track.

Note:

The Evidence Task Approval Bypass permission is required to allow evidence task assignees to bypass approval stages and send an evidence task interval to be collected.

Things to Know

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue. 

Standard / Framework Changes

New EU Cyber Resilience Act Framework Added

The EU Cyber Resilience Act, adopted on July 11, 2024, and entering into force on January 20, 2025, introduces harmonized cybersecurity requirements for products with digital elements (PDEs) placed on the EU market. The regulation establishes obligations for manufacturers, importers, and distributors to ensure that products are designed, developed, and maintained with an appropriate level of cybersecurity throughout their entire lifecycle.

We’ve simplified implementation by making the EU Cyber Resilience Act Framework available on our platform—complete with policies, controls, implementation guidance, and evidence tasks tailored to meet the Act’s essential cybersecurity requirements. The framework helps organizations prepare for compliance ahead of the application date of January 20, 2027, when most obligations become enforceable.

Note:

The EU Cyber Resilience Act will be available on the OneTrust platform effective October 31, 2025.

For more information, see Supported Control Frameworks.

Permissions

  • The Hub Content Update, Content Update View, and Accept Content Update permissions have been added to give users the ability to view, accept, and update control framework content updates. This permission has been granted to the following system roles:

    • Site Admins

    • TRC Admins

    • Compliance Managers

    • IT Risk Managers