1One shared foundation instead of module-by-module fixes
New global patterns: a 2026 sidebar navigation (modules grouped under Compliance, Security and Smart Inventories, collapsible, in light and dark mode), custom table columns, filtering with saved bookmark filters (up to six per user), status drop-downs, placeholders, rich-text support, a side drawer for quick record details, and updated toast messages. Each module was then rebuilt from these parts.
Slower start, in exchange for consistency across a large product and faster design of every later module.
2Show less by default — details on demand
Tables show the essentials; the full record opens in a side drawer without leaving the list. Tables start with fewer columns by default, and users choose which extra columns to show and save the filters they use most.
Some information is one click further away, in exchange for screens that can be scanned.
3Assessments as a visible lifecycle (Assessments 4.0)
The biggest workflow redesign. An assessment now moves through five named phases — Setting up → Collect → Analysis → Review → Completed:
- Setting up is a three-step wizard (framework → template → name and reviewer), separating creating an assessment from running it.
- Collect shows who has been invited and who has answered, with internal and external respondents, comments and email notifications.
- Analysis is where admins go through answers, gaps, risks and data mappings, with the option to step back to collection.
- Review belongs to the assigned reviewer, who finalises or reopens.
- Completed locks the assessment and produces a report (summary, questionnaire results, gaps, risks, data mappings).
Inside a running assessment, a simple stepper (Collect → Analyze → Finalize) shows where you are, and the analysis is a guided sequence of tabs — Answers → Gaps summary → Risks summary → Data mapping → Comments — with Step back and Next buttons.
More structure and more steps, in exchange for always knowing where an assessment stands and who owns the next move.
4Words that match what actually happened
In respondent status, “Not started” became Pending and “Received” became Sent — “Received” read as if the system had received answers, not that the questionnaire had been sent out.
5Templates that can be built, shared and reused
New template creation for frameworks, assessments (Settings / Builder / Mapping / Rules) and inventories, plus template sharing from the Admin panel and within corporate groups — with clear read-only vs editable states.
A more complex admin side, so that customers get ready-made, consistent content.
6Smart Inventories instead of spreadsheets
Processes, vendors, assets and personal data became connected records. Each record has the same tabs (Details, Gaps, Risks, Assessments, Comments, History, Attachments), so a user can see every gap linked to a vendor or process without leaving the record. Configuring them got simpler: used and unused attributes are separated, and attributes can be hidden. New flows include starting an assessment directly from a record and a DPIA screening — nine yes/no questions; two or more “yes” answers turn the button into “Start assessment”.
7A new Security section
Designed from scratch: a central library of security measures and packages (ISO 27000, NIST), where each measure shows its type, goal and confidentiality, integrity and availability levels, with an AI Suggestions action next to “New measure”. Measures are bundled into ready-made packages by classification level, suggested automatically from an asset's classification, and SecAI suggests a classification based on the information an asset handles.
8Frameworks and compliance, made easier to follow
Framework templates and sharing, icons for deliverable types, and a clearer Definition of Done and references for each requirement — so users know what “compliant” means for every item.
9Gaps, Tasks and Risks — same structure, new design
Kept because the logic worked. Redesigned for the new system, with additions such as a task completion rate column in the gap and risk tables and a clearer new-gap flow.
10Dashboard 3.0 — one dashboard per area
Instead of one page trying to show the whole application, Dashboard 3.0 is split into Compliance, Inventories and Security dashboards. The Compliance dashboard reads top-down: executive summary, core compliance status, execution and control, then trends and reporting. A “View charts” menu lets users choose which sections to show.
More dashboards to maintain, in exchange for each one answering one question well.
