August was mostly about the audit engagement workspace and the evidence request loop. Highlights below; the full list is in the product changelog.
Added
- Evidence request tracking — every request now carries a state, an owner and an age, and overdue ones surface on the engagement dashboard.
- Bulk policy adoption — adopt an entire policy set into an engagement in one action instead of thirty.
- External auditor access — grant a firm scoped, time-boxed access to one engagement without creating tenant users.
Changed
- Control instances now show their evidence coverage inline rather than behind a tab.
- The findings list defaults to open findings. It defaulted to all of them, which meant it defaulted to noise.
Fixed
- Assessment reminders could send twice when a cycle was reopened within the same hour.
- The engagement report omitted controls that were in scope but had no evidence, which is exactly the set a reader most needs to see.
Facts last verified 1 Sept 2026