# Changelog Every change we ship, in plain language. All Access ReviewGovernanceIntegrationsCookie BannerDocumentsCompliance PortalIAMRisk ManagementConsoleTPRMAuditsDevicesAssetsInternationalizationInfraPrivacy ## October 2026 36 changes [Oct 27 ### Force opt-in cookie banners Force an opt-in banner for every visitor, including people in opt-out or notice jurisdictions. Consent records keep the detected regulation, and California visitors still see the privacy-choices link. Cookie Banner](/changelog/2026-10-27-force-opt-in-cookie-banners)[Oct 27 ### Mention teammates in tasks Mention teammates in task descriptions and comments from the console or employee portal. Each newly mentioned teammate gets an in-app notification, while repeat mentions and the author are left out. Governance](/changelog/2026-10-27-mention-teammates-in-tasks)[Oct 27 ### Add checklists to task descriptions Task descriptions now support checkbox lists, including when written in Markdown, and those checks stay intact when a description syncs with Linear. Teams can keep a simple action list beside the task itself. Governance](/changelog/2026-10-27-task-description-checklists)[Oct 23 ### New access review source: Planetscale Connect PlanetScale to an Access Review and choose which organization to review when a single account manages several. The connection dialog also links to the provider's setup page for its API key or client credentials. Access Review](/changelog/2026-10-23-access-reviews-across-organizations)[Oct 23 ### Probo MCP now works with Dust Connect the Probo MCP server to Dust and let your Dust agents read and update tasks, risks, documents, vendors, and controls in Probo. Integrations](/changelog/2026-10-23-probo-mcp-works-with-dust)[Oct 23 ### See Linear comments on task timelines Comments brought over from Linear now appear in the Probo task timeline, including comments imported before this release. Review the discussion alongside task activity instead of missing those earlier comments. Integrations](/changelog/2026-10-23-see-linear-comments-on-task-timelines)[Oct 22 ### Notifications for tasks and requests The console and employee portal now surface notifications when another person assigns a task or requests a signature or approval. People can spot these updates in the product across both spaces. Console](/changelog/2026-10-22-notifications-for-tasks-and-requests)[Oct 22 ### Real-time document collaboration Edit a document alongside other collaborators and see who is working in it, then review changes by author and restore an earlier editing session. Published versions remain frozen snapshots. Documents](/changelog/2026-10-22-real-time-document-collaboration)[Oct 22 ### Task comments in the activity timeline Task comments now sit alongside task activity, so collaborators can read the conversation in context and manage comments from the same timeline. Comments appear in chronological order and can be edited or deleted. Governance](/changelog/2026-10-22-task-comments-in-the-activity-timeline)[Oct 21 ### Create cookie banner trackers Add cookie banner trackers from their own page in the console. Matching is inferred from the pattern itself: a `*` enables glob matching, while a pattern without it is matched exactly. Cookie Banner](/changelog/2026-10-21-create-cookie-banner-trackers)[Oct 20 ### Find unconnected integrations The integrations marketplace now surfaces third parties with a matching Probo connector that your organization has not connected yet, and lets you filter the catalog to those providers. This makes available integrations easier to find. Integrations](/changelog/2026-10-20-find-unconnected-integrations)[Oct 20 ### OVHcloud US joins access reviews Access reviews now support OVHcloud US as a separate connector alongside OVHcloud EU. The console labels the US region with a flag, while existing connections remain on EU. Access Review](/changelog/2026-10-20-ovhcloud-us-access-reviews)[Oct 20 ### Replace connector API Keys Rotate a connector's API key without deleting the connector. Its name and enabled accounts stay in place, so changing credentials no longer requires rebuilding the connector setup. Integrations](/changelog/2026-10-20-replace-connector-api-keys)[Oct 19 ### Flag devices with posture warnings Find devices whose latest posture is failing or unknown, then open a warning badge to inspect the failing checks. The filter stays in place while you review the device list. Devices](/changelog/2026-10-19-device-posture-warning-filters)[Oct 16 ### Assigned tasks in the employee portal Employees can view and update the tasks assigned to them from the employee portal. Task follow-through can happen in the employee workspace instead of depending on access to the main console. Governance](/changelog/2026-10-16-assigned-tasks-employee-portal)[Oct 16 ### Audits across multiple frameworks A single audit can now cover several frameworks. Teams can manage those links as scope changes, keeping related audit work together instead of duplicating records across frameworks. Audits](/changelog/2026-10-16-audits-multiple-frameworks)[Oct 16 ### Edit tasks from the list The task list now groups work by status and lets teams update priority, due date, estimate, assignee, and Linear links in place. Due-date filters and collapsible groups make larger lists easier to scan. Console](/changelog/2026-10-16-edit-tasks-from-the-list)[Oct 16 ### Sync Linear issues into Probo tasks New Linear issues on the configured team can now create Probo tasks that stay in sync. Set the default team and decide whether imports are active from the task settings. Integrations](/changelog/2026-10-16-linear-issue-import)[Oct 15 ### Filter and manage devices Narrow the device list by owner, state, platform, or agent version, with filters applied across the full result set and later pages. The refreshed rows show owners and posture summaries, and several devices can be revoked or deleted in one all-or-nothing operation. Devices](/changelog/2026-10-15-device-list-filters-and-bulk-actions)[Oct 15 ### Download device posture PDFs Export a PDF snapshot of device postures from the console or MCP, with one page per device. The report gives teams a portable view of device status, while employees cannot download it. Devices](/changelog/2026-10-15-device-posture-pdf-snapshots)[Oct 14 ### Attach files in a task Images and files can live in documents, tasks, comments, and risk descriptions. Files stay private, task sync carries them into Linear, and generated documents include their images. Assets](/changelog/2026-10-14-attach-files-to-your-work)[Oct 13 ### Connector names carry into access reviews Keep multiple connections to the same provider straight in access reviews. Probo now shows each connector account's instance name on source cards and in the accounts drawer, then preserves it in campaign snapshots. Access Review](/changelog/2026-10-13-connector-names-in-access-reviews)[Oct 9 ### Link tasks to multiple controls Connect one task to every internal control it supports, then filter the task list by control. Removing a control now unlinks its tasks instead of deleting those tasks. Governance](/changelog/2026-10-09-link-tasks-to-multiple-controls)[Oct 9 ### Manage employee portal settings Set the employee portal's branding and device-agent availability from its own console page, giving admins a clear place to manage the portal instead of configuring those options through APIs. Console](/changelog/2026-10-09-manage-employee-portal-settings)[Oct 9 ### Name your connector connections Give each connection to the same provider a clear label, such as Production or Access review only, so admins can tell credentials and accounts apart before using or managing them. Integrations](/changelog/2026-10-09-name-your-connector-connections)[Oct 8 ### Cookies stay split by domain A cookie name can appear on several hosts with different scopes. Probo now records each cookie's Domain and keeps stronger detection sources, so host-only and domain-wide cookies stay distinct instead of being merged. Cookie Banner](/changelog/2026-10-08-cookies-stay-split-by-domain)[Oct 8 ### See overdue tasks at a glance Tasks that pass their deadline while still open now carry an Overdue badge. Teams can spot late work in the task list without opening each item or comparing dates by hand. Console](/changelog/2026-10-08-see-overdue-tasks-at-a-glance)[Oct 7 ### Inspect consent records Consent records now open into a detail view with the recorded action, request, TCF string, categories, and location. A map and version navigation make it easier to trace what a visitor saw and chose. Cookie Banner](/changelog/2026-10-07-inspect-consent-records)[Oct 6 ### A clearer cookie banner setup Cookie banner setup now separates installation, configuration, and translations into their own pages, with each page showing whether its work is draft, deactivated, or live. Cookie Banner](/changelog/2026-10-06-clearer-cookie-banner-setup)[Oct 6 ### Recurring tasks follow their deadline A recurring task now stays active until its deadline. Probo creates the next task when that date passes, using the previous deadline plus the recurrence interval to set its due date. Governance](/changelog/2026-10-06-recurring-tasks-follow-deadline)[Oct 5 ### Origin details on consent records Consent records now show the origin of the request that created them. Teams get a clearer audit trail when reviewing where consent activity came from across their sites and deployments. Cookie Banner](/changelog/2026-10-05-consent-record-origins)[Oct 5 ### Measures are now internal controls Measures are renamed internal controls and carry the fields teams use to run them: a stable code, control type, implementation status, owner, reviewer, and evidence and testing cadences. Governance](/changelog/2026-10-05-measures-as-internal-controls)[Oct 5 ### Registered legal names Organizations can store a registered legal name alongside the name they use day to day. Set it in workspace settings, then access the same value through Probo's GraphQL, MCP, CLI, and n8n interfaces. Console](/changelog/2026-10-05-registered-legal-names)[Oct 2 ### A cleaner cookie banner workspace Cookie Banner Discovery now separates trackers from resources, with shareable list views and dedicated tracker pages. Configuration and publishing controls stay where they belong. Cookie Banner](/changelog/2026-10-02-cleaner-cookie-banner-workspace)[Oct 2 ### See and manage connector accounts The Integrations settings page now shows which vendors have a connector and which can be added. Each connector lists its accounts, and blocked disconnects explain what still uses the credential. Integrations](/changelog/2026-10-02-manage-connector-accounts)[Oct 2 ### Unlinking clears visitor requests Unlinking a document or audit from the Compliance Portal now clears its visitor access requests, with a confirmation before the change. Compliance Portal](/changelog/2026-10-02-trust-center-visitor-requests) ## September 2026 34 changes [Sep 30 ### Access reviews for OVHcloud Review OVHcloud access with a roster that covers users, service accounts, API credentials, federated identities, last login, and the MFA method used for a session. Access Review](/changelog/2026-09-30-access-reviews-for-ovhcloud)[Sep 30 ### Filter tasks by assignee Narrow organization and measure task lists to the person responsible. Former members remain available in the filter, so assignments stay findable after someone leaves the team. Governance](/changelog/2026-09-30-filter-tasks-by-assignee)[Sep 30 ### Identity settings, reorganized SAML and SCIM now have separate settings sections, with dedicated SAML setup pages, clearer enforcement choices, visible DNS verification details, and a paginated SCIM event history. IAM](/changelog/2026-09-30-identity-settings-reorganized)[Sep 30 ### Search third parties by name Find a third party by name instead of scrolling through the full register. Name search makes it quicker to locate a vendor record and continue reviewing its details. TPRM](/changelog/2026-09-30-search-third-parties-by-name)[Sep 25 ### A clearer task list Task lists now put status, ownership, linked Linear issues, estimates, deadlines, and recurrence details in each row, so teams can scan work and make routine updates with fewer clicks. Console](/changelog/2026-09-25-clearer-task-lists)[Sep 25 ### Filter tasks by name and state Large task lists are easier to scan when you narrow them by task name or state. Search and state filters work in the console and through GraphQL, MCP, the CLI, and n8n, with special characters matched literally. Governance](/changelog/2026-09-25-filter-tasks-by-name-and-state)[Sep 25 ### Keep Linear comments in sync Comments on linked tasks now travel with the work. Linking or publishing copies existing comments, and later edits and deletions sync between Probo and Linear. Comments from people outside Probo remain intact without a Probo owner. Integrations](/changelog/2026-09-25-linear-comments-stay-in-sync)[Sep 25 ### Link existing Linear issues Find a Linear issue in a team and attach it to an existing Probo task, or choose it while creating one. That gives work already underway a shared home, with the issue visible from the task workflow. Integrations](/changelog/2026-09-25-link-existing-linear-issues)[Sep 24 ### Find any page with Cmd+K Press Cmd+K or Ctrl+K anywhere in the console to open a page search listing every page you can open, so you stop hunting through the side nav to find where something lives. Console](/changelog/2026-09-24-cmd-k-page-search)[Sep 24 ### Filter findings by audit Reviewers can filter findings by audit in the console, GraphQL, and MCP. It is easier to focus on the evidence tied to one engagement when a finding register spans several audits. Audits](/changelog/2026-09-24-filter-findings-by-audit)[Sep 24 ### Multiple accounts per connector Teams can connect additional AWS, GCP, and Azure accounts under one set of credentials, then discover and enable the accounts they need. This makes large, multi-account access reviews easier to set up and maintain. Access Review](/changelog/2026-09-24-multiple-accounts-one-connector)[Sep 24 ### Task events for webhooks Webhook subscriptions can now send task and task comment events when records are created, updated, or deleted. Automations can also follow task changes synced from linked Linear issues, keeping connected workflows current. Integrations](/changelog/2026-09-24-task-webhook-events)[Sep 24 ### User management gets a new home Workspace admins can create and edit users from one page, with deactivated accounts grouped at the bottom and contract dates managed in a typed field. People can also upload their own avatars from the redesigned Users page. Console](/changelog/2026-09-24-users-page)[Sep 23 ### Link tasks to Linear Turn a Probo task into a Linear issue, keep the two aligned as work moves forward, and remove the link when plans change. Teams and issue details are available from the task workflow. Integrations](/changelog/2026-09-23-link-tasks-to-linear)[Sep 23 ### Webhook delivery history Inspect each webhook subscription, filter its delivery history, and review or copy the payload Probo sent. The subscription card also shows its latest delivery, making failures easier to spot. Integrations](/changelog/2026-09-23-webhook-delivery-history)[Sep 22 ### Publish risk analyses as documents Turn a risk analysis into a versioned generated document from the console or API, with approvers and minor revisions supported so the approved record can live alongside your other controlled documents. Risk Management](/changelog/2026-09-22-risk-analysis-publishing)[Sep 22 ### Risk history before deletion The delete confirmation now shows how many risk analyses still include a risk, and removing it also clears those historical references, making the impact clear before you confirm. Risk Management](/changelog/2026-09-22-risk-history-deletion)[Sep 21 ### MongoDB Atlas access review connector Access reviews can now pull the MongoDB Atlas roster directly. Connect a service account from your own Atlas organization and review every organization-level principal, from active members to API keys. Access Review](/changelog/2026-09-21-mongodb-atlas-access-review-connector)[Sep 18 ### Preview evidence files in the console Evidence files attached to audits and findings can now be previewed right in the console when they are CSV, text, or Markdown, so you can read what a file contains before referencing it in a review, without downloading it first. Audits](/changelog/2026-09-18-evidence-file-preview)[Sep 15 ### Azure access review connector Connect an Azure subscription to Access Reviews and see RBAC assignments, last login, and MFA state for every principal, enriched from Entra ID, all through a single workload identity setup. Access Review](/changelog/2026-09-15-azure-access-review-connector)[Sep 15 ### Manage compliance portal visitors Add compliance portal visitors by member or email, then deactivate and reactivate them without ever revoking their grants, so access is controlled by the visitor's own state instead of their wider membership. Compliance Portal](/changelog/2026-09-15-compliance-portal-visitor-management)[Sep 15 ### Recurring tasks that clone themselves Give a task a recurrence interval and completing it automatically clones the next occurrence and carries the interval forward, so ongoing work keeps reproducing itself without you re-creating it by hand. Governance](/changelog/2026-09-15-recurring-tasks)[Sep 14 ### Five more access review connectors Access Reviews now connects to Attio, ElevenLabs, New Relic, Retool, and Twingate. Each connector authenticates with a single API key bound to one workspace, organization, or network, so setup never asks for a tenant picker. Access Review](/changelog/2026-09-14-access-review-connectors-attio-twingate)[Sep 14 ### Task activity: see what changed on a task Task details now include an activity tab that lists every field-level change newest-first, so you can see which edits were made, by whom, and when without combing through audit logs. Governance](/changelog/2026-09-14-task-activity-history)[Sep 11 ### Spanish for the employee portal The employee portal now ships in Spanish, joining English, French, and Dutch, so team members can review signatures, approvals, and documents in the language they work in. Internationalization](/changelog/2026-09-11-employee-portal-spanish)[Sep 11 ### Link findings to audits Findings can now be linked to the specific audits they relate to, so each audit's report references are visible right in the finding details and can be unlinked in place when the scope changes. Audits](/changelog/2026-09-11-link-findings-to-audits)[Sep 9 ### Search documents by title The document list now has a search box. Type part of a title and the list filters as you go, and the query stays in the URL so a shared link opens the same view. Documents](/changelog/2026-09-09-search-documents-by-title)[Sep 8 ### Identity avatars for people Anyone in the organization can upload a profile photo. It replaces the initials placeholder on people lists, owner cells, and the account menu. IAM](/changelog/2026-09-08-identity-avatars)[Sep 7 ### GCP access review connector Access Review now supports Google Cloud Platform as a connector, listing project IAM principals and service accounts with best-effort MFA and last-activity signals from a dedicated setup page in the console. Access Review](/changelog/2026-09-07-gcp-access-review-connector)[Sep 7 ### Rich text for task descriptions and comments Task descriptions and comments now use the same editor as documents. You can format text, add lists, and structure updates instead of writing everything as a flat string. Governance](/changelog/2026-09-07-task-rich-text-editor)[Sep 3 ### Personal API keys retired Personal API keys and their creation UI are gone. Use scoped OAuth access tokens instead, which limit exactly what a token can do rather than acting with a user's full permissions. IAM](/changelog/2026-09-03-personal-api-keys-retired)[Sep 2 ### Comments on tasks Tasks can now hold a running conversation. Add a comment, see who said what and when, and keep the discussion attached to the work instead of scattered across Slack or email threads. Governance](/changelog/2026-09-02-task-comments)[Sep 1 ### AWS access review setup gets easier Connecting AWS to Access Review used to mean hand rolling an IAM role. Now Probo hands you the exact Terraform snippet or CloudFormation link, and the review picks up MFA status and last login automatically. Access Review](/changelog/2026-09-01-aws-access-review-setup)[Sep 1 ### Rewind risk analyses to any date Risk analyses change over time as treatments get applied and scores move. The new as-of view reconstructs the heatmap, plan table, and measures exactly as they looked on any past date, not just today. Risk Management](/changelog/2026-09-01-risk-analysis-as-of-view) ## August 2026 29 changes [Aug 28 ### Device enrollment moves to the employee portal Employees can now see their registered devices and enroll new ones from the employee portal, with a three-step wizard and a manual one-time token option for devices that can't run the agent. Devices](/changelog/2026-08-28-employee-portal-device-enrollment)[Aug 28 ### Employee portal: signing and approvals get a new home A dedicated employee portal replaces the console's employee pages, with independent signature and approval queues, document viewers with version history, and a dashboard that surfaces what's pending. Documents](/changelog/2026-08-28-employee-portal-signing-approvals)[Aug 27 ### Fork a risk analysis Forking a risk analysis copies its diagrams, treatment plans, and their relations into a fresh analysis, so a new review period starts from the same graph instead of a blank page. Risk Management](/changelog/2026-08-27-fork-a-risk-analysis)[Aug 26 ### Visitors page for the compliance portal Manage compliance portal visitors in the visitors page with document access managed as a real table, multi-select bulk actions, and search by name or email instead of a single edit dialog. Compliance Portal](/changelog/2026-08-26-compliance-portal-visitors-page)[Aug 26 ### NDA uploads via PDF drop The compliance portal's NDA card now accepts a PDF dropped straight onto it, with download and delete controls up top and the full signature history behind an activity popover. Compliance Portal](/changelog/2026-08-26-nda-pdf-upload)[Aug 26 ### Treatment plans for risk analyses Risk analyses now hold a dedicated treatment plan for each risk with its own score, treatment choice, and owner, and linked measures move it from inherent toward residual automatically. Risk Management](/changelog/2026-08-26-treatment-plans-risk-analyses)[Aug 25 ### ChatGPT and Codex can now log in to Probo's MCP ChatGPT and Codex can connect to Probo over MCP with a real OAuth login instead of a workaround, using resource bound tokens so each connection is scoped to your Probo organization. Integrations](/changelog/2026-08-25-chatgpt-codex-mcp-oauth)[Aug 25 ### Attribution labels on tracker pages Tracker pages in the console now show whether a script is a known vendor, first party code, or still being identified, even when the underlying catalog entry has no vendor name of its own. Cookie Banner](/changelog/2026-08-25-tracker-catalog-attribution)[Aug 24 ### New access review connectors Access Review now connects to GitHub App installations and Resend, so you can pull in access data from two more tools without setting up a workaround or a manual import. Access Review](/changelog/2026-08-24-new-access-review-connectors)[Aug 21 ### More access review connectors Access Reviews now connect to Calendly and Cal.com over OAuth, including Cal.com team accounts, so scheduling tool access shows up alongside every other connector in the same review. Access Review](/changelog/2026-08-21-access-review-calendly-cal-com)[Aug 20 ### Webhook deliveries now retry automatically Outbound webhooks are now durable delivery jobs with automatic retries, exponential backoff, Retry-After support, and stable idempotency headers so a timeout or 5xx no longer drops the event after one attempt. Integrations](/changelog/2026-08-20-webhook-delivery-retries)[Aug 18 ### authentik as an access review source Access Review can now pull user and MFA data straight from authentik, so teams running their own identity provider don't need a manual export to run a review. Access Review](/changelog/2026-08-18-authentik-access-review-source)[Aug 18 ### Probot: compliance notifications in Slack Employees can link their Slack identity to their Probo account with /probot login, then get compliance review and approval notifications right in Slack, complete with action buttons for each request. Integrations](/changelog/2026-08-18-probot-slack-bot)[Aug 14 ### A clearer path to install the Probo agent Device enrollment now walks people through installing the Probo agent before they pick an organization, and skips the step if it's already installed. Devices](/changelog/2026-08-14-clearer-path-to-install-the-probo-agent)[Aug 14 ### More control over risk analysis Set a review period with start and end dates and pick the right matrix size, 3x3, 4x4, or 5x5, for each risk analysis so every assessment reflects the scale your team actually uses. Risk Management](/changelog/2026-08-14-more-control-over-risk-analyses)[Aug 13 ### AI systems register Keep a complete inventory of every AI system in use across your organization, with owner, purpose, and status details ready to share in audits and compliance reviews. Governance](/changelog/2026-08-13-ai-systems-register)[Aug 13 ### Compliance portal manager roles Delegate day-to-day compliance portal work with two focused roles, so teammates can manage portal content or approve visitor access requests without full organization admin access. Compliance Portal](/changelog/2026-08-13-compliance-portal-manager-roles)[Aug 13 ### Disable resource detection on the cookie banner Turn off script and iframe scanning per banner when you only need cookie consent, so the SDK skips resource detection while cookies and storage keep reporting to you as usual. Cookie Banner](/changelog/2026-08-13-disable-resource-detection-cookie-banner)[Aug 11 ### Nuki joins access reviews Nuki smart locks now join Access Reviews, so you can see who can open which office doors. This connector was built by a customer. Access Review](/changelog/2026-08-11-new-access-review-connector)[Aug 10 ### Full SCIM audit detail SCIM provisioning events now store the full request and response body, so admins can see exactly what the identity provider sent and received. IAM](/changelog/2026-08-10-full-scim-audit-detail)[Aug 8 ### Compliance portal requests toggle Admins can now turn the public Requests surface on a compliance portal on or off, so visitors only see it when you want them filing requests. Compliance Portal](/changelog/2026-08-08-compliance-portal-requests-toggle)[Aug 8 ### Custom watermark text on exports Document export watermarks can now say whatever you want, up to 64 characters, instead of being locked to the downloader's email. Documents](/changelog/2026-08-08-custom-watermark-text-on-exports)[Aug 8 ### More access review entry filters Filter access review campaign entries by authentication method and account status, sitting next to the MFA filter already in the toolbar. Access Review](/changelog/2026-08-08-more-access-review-entry-filters)[Aug 8 ### Simpler way to build compliance portals Adding documents, audits, and subprocessors to a compliance portal is now a checkbox list instead of jumping through separate add dialogs. Compliance Portal](/changelog/2026-08-08-simpler-way-to-build-compliance-portals)[Aug 5 ### DORA business functions register Track DORA Critical ICT Functions in a dedicated register and link each one to the assets, third parties, and people that keep it running. Assets](/changelog/2026-08-05-dora-business-functions-register)[Aug 5 ### Smarter privacy law detection Cookie consent now resolves geolocation to the state or province, so US and Canadian visitors get the privacy law that actually applies. Cookie Banner](/changelog/2026-08-05-smarter-privacy-law-detection)[Aug 4 ### CCPA privacy choices panel California visitors get a Your Privacy Choices panel to opt out of data sale and sharing, plus a notice-only banner where no consent law applies. Cookie Banner](/changelog/2026-08-04-ccpa-privacy-choices-panel)[Aug 4 ### Dutch language support Dutch is now supported across the console, compliance portal, and cookie banner—including documents, NDA flows, access requests, and Privacy Choices panel copy. Internationalization](/changelog/2026-08-04-dutch-language-support)[Aug 3 ### Multiple compliance portals Run multiple compliance portals from one organization, each with its own catalog, visitor experience, and publication controls for different products. Compliance Portal](/changelog/2026-08-03-multiple-compliance-portals) ## July 2026 17 changes [Jul 29 ### Log exports for audits Export audit logs or SCIM events as a CSV from the console, Connect, MCP, or CLI when auditors or your SIEM need the raw history. IAM](/changelog/2026-07-29-audit-and-scim-log-exports)[Jul 28 ### Audit start and end dates Audits now track a start and end date, so review windows show up as sortable columns without opening each audit to check. Audits](/changelog/2026-07-28-audit-start-and-end-dates)[Jul 27 ### Bulk document access requests Portal visitors can request access to several locked documents at once instead of filing a separate request for each one. Compliance Portal](/changelog/2026-07-27-bulk-document-access-requests)[Jul 27 ### French language support Probo speaks French now, in the console and in the compliance portal your customers see, its first shipped language besides English. Internationalization](/changelog/2026-07-27-french-language-support)[Jul 27 ### More access review connectors Access Reviews now cover five more platforms, from web analytics to payments infrastructure, including Google Analytics and Segment. Access Review](/changelog/2026-07-27-more-access-review-connectors)[Jul 25 ### Employee device management Admins get a full view of employee device posture in the console, and employees can self-serve enrollment confirmation without an assumed session. Devices](/changelog/2026-07-25-employee-device-management)[Jul 22 ### Updates feed for your compliance portal Visitors can now browse your compliance portal updates as a real feed, and subscribe by email to hear about changes automatically. Compliance Portal](/changelog/2026-07-22-compliance-portal-updates-feed)[Jul 22 ### Filter subprocessors on your compliance portal Visitors can now narrow down your subprocessor list by facet instead of scrolling through everything on the public trust page. Compliance Portal](/changelog/2026-07-22-filter-subprocessors-compliance-portal)[Jul 20 ### Compliance portal replaces trust center Trust Center is now the Compliance Portal, live in production with its own branded sign-in, custom domain, and document library. Compliance Portal](/changelog/2026-07-20-compliance-portal-replaces-trust-center)[Jul 20 ### Data subject rights requests Visitors can now file GDPR and CCPA rights requests directly from the Compliance Portal and track their status without an email chain. Privacy](/changelog/2026-07-20-data-subject-rights-requests)[Jul 15 ### Webhooks now show what changed Update events now include the entity's prior state, so you can diff old vs new values without making a separate lookup call. Integrations](/changelog/2026-07-15-webhook-updated-from-snapshots)[Jul 13 ### More access review connectors Four new managed connectors mean fewer manual access reviews. Provider logos and ownership checks ship before a connection goes live. Access Review](/changelog/2026-07-13-access-review-scaleway-yousign-railway-crisp)[Jul 13 ### Risk assessments now has its own tab Jump straight from a risk to its assessments without leaving the risks list, saving clicks every time you review your risk register. Risk Management](/changelog/2026-07-13-risk-assessments-tab-risks-page)[Jul 9 ### Edit draft documents via n8n The document.update node action now edits body, title, classification, and type, and creates a draft automatically when none exists. Documents](/changelog/2026-07-09-2026-07-09-edit-draft-documents-n8n)[Jul 9 ### FERPA and PCI DSS frameworks Import FERPA and PCI DSS controls straight into your compliance program, no manual setup needed for student or payment card data. Governance](/changelog/2026-07-09-2026-07-09-ferpa-pci-dss-frameworks)[Jul 2 ### Document lifecycle webhooks Subscribe to document created, updated, signed, and approved events instead of polling the API and diffing the result yourself. Documents](/changelog/2026-07-02-document-lifecycle-webhooks)[Jul 2 ### n8n: trigger workflows from Probo events A new Probo Trigger node starts your n8n workflow the moment a document event happens, with HMAC verification and no polling node. Integrations](/changelog/2026-07-02-n8n-trigger-workflows-from-probo-events) ## June 2026 19 changes [Jun 30 ### Deeper third-party vetting reports Third-party vetting now keeps the full structured analysis, not just a short summary, covering risk, privacy, and AI governance. TPRM](/changelog/2026-06-30-deeper-third-party-vetting-reports)[Jun 25 ### Four more access review connectors Support, AI routing, incident response, and email marketing join the access review connector list with Pylon and three more tools. Access Review](/changelog/2026-06-25-four-more-access-review-connectors-pylon-openrouter)[Jun 24 ### DocuSign signing integration Connect DocuSign with a full OAuth2 flow and pick which account to use, no manual API key wrangling or copy-pasting required. Documents](/changelog/2026-06-24-docusign-signing-integration)[Jun 24 ### Five new access review connectors Cover banking, sales tooling, and AI infrastructure in your next access review campaign with Mercury, Apollo.io, and three more tools. Access Review](/changelog/2026-06-24-five-new-access-review-connectors-mercury-apollo-deepgram)[Jun 22 ### Custom URL slugs for the compliance portal Give Compliance Portal pages a memorable custom URL slug instead of a generated ID, perfect for links in a sales deck or email. Compliance Portal](/changelog/2026-06-22-custom-url-slugs-trust-center)[Jun 19 ### Connect AI agents via OAuth2 (CIMD) MCP clients like Claude and ChatGPT can now register with Probo through a standard OAuth2 client metadata document instead of a pre-provisioned client ID. Integrations](/changelog/2026-06-19-connect-ai-agents-oauth2-cimd)[Jun 19 ### Personal API tokens Create, list, and revoke your own bearer tokens for scripting against the Probo API, without sharing a service account with your team. IAM](/changelog/2026-06-19-personal-api-tokens)[Jun 16 ### Electronic signatures for employee documents Employee document signings now generate a real signed PDF and an esign record, the same way document approvals already did. Documents](/changelog/2026-06-16-electronic-signatures-employee-documents)[Jun 12 ### Auto-enriched vendor catalog Import vendors from a shared, auto-enriched catalog instead of typing in the same third-party details your peers already found. TPRM](/changelog/2026-06-12-auto-enriched-vendor-catalog)[Jun 10 ### 5 new access review connectors Pull user access straight from five more infrastructure and observability tools: Better Stack, SigNoz, Neon, Render, and Qovery. Access Review](/changelog/2026-06-10-5-new-access-review-connectors-june-2026)[Jun 10 ### Nested third-party relationships Third parties can now nest to any depth, not just one level of sub-vendor, so subprocessors of subprocessors are representable. TPRM](/changelog/2026-06-10-nested-third-party-relationships)[Jun 9 ### Risk assessment boundaries Group risk assessment nodes into named, nestable boundaries so large Mermaid diagrams stay readable as your system map grows. Risk Management](/changelog/2026-06-09-risk-assessment-boundaries)[Jun 7 ### Cookie banner now supports 9 more languages The Probo cookie consent banner adds 9 languages — bringing the total to 13 — and adapts to a visitor's browser language with no extra configuration. Cookie Banner](/changelog/2026-06-07-cookie-banner-new-languages)[Jun 6 ### Archive documents Archive documents you no longer need active from the row action menu — non-destructive and consistent with archiving elsewhere in Probo. Documents](/changelog/2026-06-06-archive-document)[Jun 6 ### Five new access review connectors Probo adds access review connectors for Zendesk, Okta, Clerk, SendGrid, and Datadog — each pulling your user list so reviewers see who has access to what. Access Review](/changelog/2026-06-06-five-access-review-connectors)[Jun 5 ### Tracker type now visible in the cookie banner SDK @probo/cookie-banner 0.8.0 exposes trackerType on every CookieItem, so the headless cookie list and themed banner can render what kind of tracker each entry is. Cookie Banner](/changelog/2026-06-05-cookie-banner-sdk-tracker-type)[Jun 4 ### Automatic tracker policy Publishing your cookie banner now generates a tracker policy document automatically, listing every detected tracker and its vendor. Cookie Banner](/changelog/2026-06-04-tracker-policy)[Jun 3 ### Async third-party vetting now available in n8n The thirdParty vet operation is now available in the Probo n8n node, queueing a vetting job that runs asynchronously without blocking your workflow. TPRM](/changelog/2026-06-03-third-party-vetting-n8n)[Jun 2 ### Filter and identify trackers by vendor See the vendor behind each tracker on the banner trackers page, and filter the entire list by third party to audit everything a given vendor places. Cookie Banner](/changelog/2026-06-02-tracker-by-vendor) ## May 2026 14 changes [May 28 ### Archive users and link third parties in n8n Three new capabilities land in the n8n node: archive users, link measures to third parties, and model self-referential third-party relations. TPRM](/changelog/2026-05-28-archive-users-link-third-parties-n8n)[May 28 ### Seven new access review connectors Seven new access review connectors land in Probo, plus HTTP Basic auth support and automatic signature request cancellation. Access Review](/changelog/2026-05-28-posthog-metabase-grafana-cursor-access-reviews)[May 27 ### Archive users Deactivate a user with the new archiveUser operation — removed from active workflows but kept in the org for audit trail purposes. IAM](/changelog/2026-05-27-archive-user)[May 27 ### Link measures to third parties Measures and third parties can now be linked many-to-many, third parties support self-referential relations, and measure state moves to a header badge. TPRM](/changelog/2026-05-27-link-measure-to-third-parties)[May 27 ### SCIM bridge errors now visible in the UI Sync errors from the SCIM bridge are now exposed in the API and surfaced on the Google Workspace and Microsoft 365 connector cards in the console. IAM](/changelog/2026-05-27-scim-bridge-errors-in-ui)[May 26 ### Official Helm chart for Kubernetes Self-hosting Probo on Kubernetes now has a proper path with an official Helm chart that deploys the full stack in one command. Infra](/changelog/2026-05-26-helm-chart)[May 23 ### Risk assessment in n8n The riskAssessment resource is live in n8n, covering the entire risk assessment hierarchy with full CRUD operations for automation. Risk Management](/changelog/2026-05-23-risk-assessment-n8n)[May 15 ### Vendors are now third parties Vendor is now Third Party across the API, CLI, webhooks, and console — a breaking rename that better matches compliance terminology. TPRM](/changelog/2026-05-15-rename-vendors-third-parties)[May 10 ### Cookie banner jurisdiction from geolocation Every cookie banner interaction is mapped to country and privacy regulation automatically — consent records, APIs, and the banner UI stay aligned. Cookie Banner](/changelog/2026-05-10-cookie-banner-jurisdiction-geolocation)[May 10 ### Google Cloud Identity now supported in SCIM bridge The SCIM bridge syncs Google Cloud Identity directories the same way as Google Workspace — automate provisioning without a Workspace license. IAM](/changelog/2026-05-10-google-cloud-identity-scim-bridge)[May 6 ### Microsoft 365 in access reviews Run access reviews against your Microsoft 365 users and groups directly from Probo, pulling decisions straight from Entra ID. Access Review](/changelog/2026-05-06-microsoft365-access-review)[May 6 ### Microsoft 365 SCIM bridge Sync users and groups from Microsoft Entra ID into Probo automatically, closing the identity sync gap for Microsoft 365 shops. IAM](/changelog/2026-05-06-microsoft365-scim-bridge)[May 5 ### SCIM via MCP and CLI Probo's SCIM management is now reachable from your AI agent and the terminal, so you can script provisioning without the console. IAM](/changelog/2026-05-05-scim-via-mcp-and-cli)[May 4 ### Cookie banner Build, theme, translate, and ship a GDPR-ready cookie banner from Probo, with consent signals, auto-detection, CLI, and MCP support baked in. Cookie Banner](/changelog/2026-05-04-cookie-banner) ## April 2026 12 changes [Apr 22 ### CMMI maturity levels on controls Controls now carry a real CMMI maturity score instead of a binary implemented flag, showing how mature each control actually is. Governance](/changelog/2026-04-22-cmmi-maturity-controls)[Apr 22 ### Data and asset registries as documents Data and asset registry exports are gone. Both registries now publish, version, and get signed like any other compliance document. Assets](/changelog/2026-04-22-document-publish-snapshots)[Apr 22 ### OAuth2 and OpenID Connect authorization server Probo now speaks OAuth2 and OpenID Connect — anyone can build integrations that plug straight into your compliance stack. IAM](/changelog/2026-04-22-oauth2-authorization-server)[Apr 16 ### SOA as a publishable document The Statement of Applicability is now a full document you can edit, publish, version, and send for approval and signature. Governance](/changelog/2026-04-16-soa-as-document)[Apr 15 ### Ended contracts filtered from signatures People with ended contracts no longer appear in the signature request dialog, so former employees don't clutter the list. Documents](/changelog/2026-04-15-ended-contracts-filtered-from-signatures)[Apr 15 ### Inline document details Document properties like classification, owner, and version are now visible directly on the page instead of hidden in a drawer. Documents](/changelog/2026-04-15-inline-document-details)[Apr 9 ### Statement of applicability The SOA section is now correctly named Statement of Applicability, matching the exact term auditors actually use for it. Governance](/changelog/2026-04-09-statement-of-applicability-rename)[Apr 3 ### Markdown copy-paste in the editor Paste markdown into the rich text editor and it renders automatically, tables, headers, lists, and code blocks included. Documents](/changelog/2026-04-03-markdown-copy-paste)[Apr 3 ### Measure-document linking Link documents directly to measures for better evidence mapping, so auditors can see the supporting policies at a glance. Governance](/changelog/2026-04-03-measure-document-linking)[Apr 2 ### Access reviews Run periodic access reviews to verify who still has access to what, tracking evidence in Probo instead of a spreadsheet. Access Review](/changelog/2026-04-02-access-review)[Apr 2 ### In-progress state for tasks Tasks now have an in-progress state alongside open and done, making your task board genuinely useful for tracking active work. Governance](/changelog/2026-04-02-task-in-progress-state)[Apr 1 ### Rich text editor for documents Write and edit documents directly in Probo with tables, links, diagrams, and slash commands, in a proper WYSIWYG editor built on TipTap. Documents](/changelog/2026-04-01-rich-text-editor) ## March 2026 13 changes [Mar 31 ### Document classification filter Filter your document library by classification to quickly narrow a long list down to just your public policies or internal procedures. Documents](/changelog/2026-03-31-document-classification-filter)[Mar 31 ### Major.minor document versioning Minor version updates no longer require everyone to sign the document again, saving re-signatures for changes that actually matter. Documents](/changelog/2026-03-31-document-versioning)[Mar 30 ### Document approval workflow Documents now go through a proper review and approval process before publishing, tracking who signed off and when for auditors. Documents](/changelog/2026-03-30-document-approval-workflow)[Mar 30 ### Task priority Set priority levels, urgent, high, medium, or low, on tasks so your team always knows what to tackle first during a busy sprint. Governance](/changelog/2026-03-30-task-priority)[Mar 26 ### Automatic evidence descriptions Upload evidence and Probo automatically analyzes the file and generates a plain-language description of exactly what it contains. Governance](/changelog/2026-03-26-automatic-evidence-descriptions)[Mar 23 ### Search engine indexing for your compliance page Let search engines index your compliance page so prospects can find it on Google when they search your company plus "security". Compliance Portal](/changelog/2026-03-23-search-engine-indexing)[Mar 22 ### Access logs Get full visibility into every action in your organization with SIEM-ready audit logs auditors expect during SOC 2 and ISO 27001 reviews. IAM](/changelog/2026-03-22-access-logs)[Mar 22 ### Google and Microsoft SSO Sign in to Probo with your Google Workspace or Microsoft Entra ID enterprise account, no new password or magic link required. IAM](/changelog/2026-03-22-google-microsoft-sso)[Mar 20 ### Skip mailing list confirmation emails Add subscribers to your compliance page mailing list without a confirmation email, ideal for contacts who already signed a DPA or NDA. Compliance Portal](/changelog/2026-03-20-skip-mailing-list-confirmation)[Mar 19 ### Drag-and-drop audit reports Upload audit report PDFs by dragging and dropping them directly onto your audit list, no more digging through attachment menus. Audits](/changelog/2026-03-19-audit-pdf-upload)[Mar 19 ### Cross-origin CSRF protection New cross-origin request forgery (CSRF) defenses stop malicious sites from making unauthorized requests while you're logged into Probo. IAM](/changelog/2026-03-19-csrf-protection)[Mar 19 ### Full-text search for measures Find any measure instantly by searching across titles, descriptions, and details instead of scrolling through long lists. Governance](/changelog/2026-03-19-full-text-search-measures)[Mar 19 ### Unified findings Track audit findings with shared severity levels across the web app, MCP, and CLI, so nothing gets lost switching between tools. Audits](/changelog/2026-03-19-unified-findings)