Third-Party Risk Management - August 7, 2026 - 202608.1.0 (Summer Release)

General Availability

Third-Party Risk Agent in Copilot

|Available with Solution Packaging Only

Leverage our Third-Party Risk Agent in Copilot to conduct deep research to automate and accelerate the onboarding of new vendors and launch inherent risk assessments. This enhancement speeds up assessment completion, reduces support requirements, and provides users with more relevant information in the assessment.

For more information, see OneTrust Third-Party Risk Agent Feature Guide.

Deep Research Assessments

|Available with Solution Packaging Only

Automate vendor intelligence generation by triggering Deep Research directly from the vendor workflow when an assessment is launched. By calling the Deep Research service directly via workflow stage rules, OneTrust creates evidence-based vendor intelligence for standard and custom assessment templates, helping teams move onboarding forward without relying on outdated pre-generated research or manual investigation.

For more information, see AI Deep Research: Workflow-Initiated Assessments.

Custom Notifications for Assessment Templates

Send customized, trigger-based automated email messages from a new global Notifications tab on the Assessment templates screen. This enhancement speeds up assessment completion, reduces support requirements, and provides users with more relevant information in the assessment.

For more information, see Configuring Custom Email Notifications on Assessment Templates. This feature is related to the following ideas: OT-I-949, OT-I-1270, OT-I-3522, OT-I-7945, and OT-I-16348.

Configuring Approver-only Assessment Sections

Configure approver-only sections on assessments automatically using template rules or inventory-based values. These enhancements mean users can launch assessments with approver-only sections directly from the self-service portal.

For more information, see Configuring Approver-only Assessment Sections. This feature is related to the following ideas: AA-I-293 and AA-I-302.

Leveraging AI Auto-responses for Assessments

Opt-out of automatically scanning your three most recent assessments, plus add more files, more file types, and bigger files to your uploads. These enhancements improve the performance and accuracy of the AI Doc Scanner.

For more information, see Leveraging AI Auto-responses for Assessments.

DORA - LEI Updates

Enable inheritance for child copies to pass the following DORA attributes from a parent record to the child copy:

  • Identification Code of the ICT Third Party Service Provider

  • Function Identifier (Function)

  • LEI of entity (LEI number)

  • Identification code of the branch (Branch)

This enhancement helps organizations maintain the data required for DORA reporting when creating copies of parent records.

For more information, see DORA Data Validation Bulk Update Step-By-Step Instructions and DORA Report Data Validation Reference.

Fixed

  • Resolved an issue that caused archived assessments linked to engagements to appear in the Third parties screen but not in the Engagements screen.

  • Resolved an issue that prevented contracts from loading when a Contract type option was missing a translation key.

New Public Preview Features

Attribute-Based Access Control (ABAC) Phase 1

Introducing Attribute-Based Access Control (ABAC), a new access-control model that brings record-level access management to the OneTrust Platform as part of ABAC Phase 1: Foundations. ABAC complements the platform's existing Role-Based Access Control (RBAC) model by using assignments through sharing, attributes, or workflows to determine which records users can access and what permissions they have on those records. This feature introduces assignment-based permissions, sharing and access management, and record-level auditing, helping organizations implement least-privileged access, improve governance, and simplify collaboration across teams and workflows.

For more information, see Attribute-Based Access Control (ABAC) Phase 1: Foundations in the Settings & Administration release notes. This feature is related to the following ideas: PLTI-I-638 and GCIA-I-918.

Note:

ABAC is being introduced through a phased rollout that begins with ABAC Phase 1: Foundations, available in Public Preview as part of OneTrust 202608.1.0 for supported objects across Third-Party Management.

For more information, see Attribute-Based Access Control (ABAC) User Guide and Managing Attribute-Based Access Control (ABAC) for Third-Party Management.

Existing Public Preview Features

Table Enhancements for Third-Party Risk Management

Tables and table functionalities within the Assessments tab of the Engagement overview screen has been upgraded to improve usability, accessibility, and customization, including resizable columns, more records per view, clearer row actions, and more. These updates are designed to provide a consistent and improved user experience, helping users work more efficiently with data and tailor their experience to their specific needs.

Note:

Select tables across Third-Party Risk Management may support these enhancements while others may not. These updates will continue to roll out incrementally so availability may vary. For more information, see Table Enhancements Across the OneTrust Platform and Table Enhancements User Guide.

Permissions

Things to Know

Prevent invited users from viewing and selecting inventory records from drop-down fields when answering assessment questions by enabling theAccess control override for invited user inventory drop-down visibilitysetting.

For more information, see Third-Party Risk Management Settings and Invited Users FAQ.

About Known Defects

Issues that may impact our customers are documented in our Known Defects Database located here with approved workarounds and targeted releases for resolving the issue.