Changelog

You can now view your ISO 42001 Project Status Reports directly in Secfix, giving you a clear overview of progress and remaining tasks in one place.

Evidence details page

Each evidence task now has a dedicated page bringing together task details, upload guidance, and evidence history in one place. When renewing evidence, an AI-generated changelog automatically compares the new version to the previous one and summarizes what changed. You can also paste screenshots directly; AI will generate a descriptive title for each one.

Stay ahead of renewals with Due soon

We’ve added a new Due soon status to help you spot evidence that needs to be renewed before it becomes overdue.

This makes it easier to prepare updated evidence on time, keep documentation fresh, and avoid last-minute work before audits.

Risk register matrix view

The risk register now includes inherent and residual risk matrices, giving you an at-a-glance view of your overall risk posture.

Automatically fill out Security Questionnaires using Secfix AI

The Questionnaires help you complete customer security questionnaires faster by using the approved resources in your Knowledge Base.

You can upload an Excel-based questionnaire, let Secfix generate first-draft answers, and then review the completed file before sharing it externally.

Answers library

Save reusable question and answer pairs in your Knowledge Base, and Secfix will automatically reuse them when filling out future security questionnaires. You can import answers in bulk from a completed questionnaire (XLSX) or add them manually one at a time.

Policy AI assistant

Ask questions about your policies and get instant answers. Especially handy during audits, when an auditor asks where something is documented, you can ask the assistant and get the answer, plus the exact policy it came from.

Employee-level IDP scoping

Following up on IDP group scoping, you can now exclude individual employees from the scope. This is useful when you don't want to exclude an entire group, just specific people.

Settings page

A new home for workspace-level configuration:

• AI features: opt in or out of AI features across Secfix

• Workspace branding: upload your company logo and company legal name

• Company details: set your workspace name, company legal name, and website

✅ Identity provider group scoping

IdP scoping lets you control which employees are synced into Secfix from your identity provider. This is useful when you do not want all users from your identity provider to appear in your Secfix workspace. For example, you may only want to include employees who are part of a specific product, business unit, or audit scope.

Note: Currently available for Microsoft 365 only, Google Workspace support is coming soon.

✅ Manual evidence got a facelift

We said goodbye to the old look. Manual evidence now comes in a table view, and clicking on any item opens a side panel with all the details.

✅ Improved filters & sorting across tables

Finding what you need just got faster. We've added new filters across three key areas:

• Risk register: Filter by owner, status, and risk rating. Quickly find scenarios assigned to you or needing attention.

• Treatment tasks: Filter by status and owner.

• Vendors: Filter by owner, status, and risk level. You can also search directly by data type (like PII or ePHI) to instantly find vendors storing sensitive data.

Your Secfix URL now includes your workspace name (e.g. https://app.secfix.com/paperoffice/home). Users can now belong to multiple workspaces, and admins can connect a single IdP account to more than one Secfix workspace.

You can now filter tasks by owner in the Project Status Report, making it easier to track progress and identify unassigned tasks.

ISO 27001:2022 Maintenance Project Status Report
We’ve added a new maintenance project status report to help you stay audit-ready after certification. This roadmap guides you through key recurring ISO 27001:2022 recurring tasks, so you always know what needs attention to maintain ongoing compliance.

Also you can now assign an owner to each task, making it easier to divide the work and keep things moving.

Trust Collaborator role
You can now assign a Trust Collaborator role to team members who are responsible for managing Trust Center access requests. This makes it easier to delegate Trust Center operations without granting broader admin permissions.

When uploading a new version of a policy, Secfix AI now automatically detects and summarizes the key changes between versions. This makes it much easier during audits to show what has changed, without manually comparing documents or scanning through files.

You can now search within your uploaded policy file preview, helping you quickly locate relevant sections during reviews and audits.

You can now view your TISAX Project Status Reports directly in Secfix, giving you a clear overview of progress and remaining tasks in one place.