Third-Party Risk Management - January 30, 2026 - 202601.2.0

Fixed

  • Resolved an issue that prevented the Data Mapping vendor view comments permission from appearing in the platform.

  • Resolved an issue that prevented the ability to add issues via the Vendor Details screen.

  • Resolved an issue that prevented data from appearing on the Engagement tab of vendor column reports.

  • Resolved a permission issue that prevented users with the Project owner role from assigning assessments to unrecognized respondents. The User can create invited user permission has been re-enabled for the Project owner system role.

Permissions

Assessments – Invited User Security Enhancements

OneTrust is implementing new permission controls for Invited Users and Project Respondents to align front-end access controls with back-end API behaviors. This update ensures that low-privilege users cannot access metadata or assessment content outside their assigned scope. A new permission will be available for customers who need to restore the broader access level previously granted to their Invited Users.

No action is required unless you want Invited Users to retain their previous access. If you want Invited Users to retain their previous access, you can assign the newly introduced Advanced assessment metadata permission manually to a custom copy of the Invited User role after the change goes live in OneTrust 202601.2.0. Those users with the Invited User role will then need to be reassigned to the custom invited user role with the new permission.

For more information, see Assessments – Invited User Security Enhancements, Invited Users FAQ, and Project Respondents FAQ. For a complete list of products with permission updates in this release, see Permissions Release Notes Catalog.

Permission changes have been implemented to improve platform usability and administrative efficiency.

For more information, see Permissions Release Notes: Third-Party Risk Management. For a complete list of products with permission updates in this release, see Permissions Release Notes Catalog.

Things to Know

  • You can now create up to 300 custom text‑type attributes for Engagements and Contracts.

  • You can now change a contract's status using the Change status Context Menu option on the Contract Details screen.