Release Notes

​

Bug fixes

• Fixed an issue where assessment summaries could reference controls from domains outside the relationship’s scope.

​

Bug fixes

• Restored the option to download an individual questionnaire.

​

Bug fixes

• Fixed an unclear “Action not allowed” error when starting an assessment. Users now see an explanation when their organization has reached its assessment limit.
• Fixed low contrast on the assessment summary generation header in dark mode.
• Fixed user relationship counts that included relationships no longer shown in the list.
• Fixed layout issues on the relationship Artifacts tab on smaller screens.
• Fixed an issue where a questionnaire could be removed from a relationship and its assessment.
• Fixed risk analysis being unavailable for assessments completed before the risk model update.

​

Enhancements

• Emails to third-party contacts that previously bounced can now be retried.
• Users can now view the content of requests sent to third parties for follow-ups, information collection and remediation.
• Business Owner is now optional on relationships.
• Standardized how assurance is shown across the app, with color-coded assurance levels on detection cards, side panels, the artifact viewer and artifact tables.
• Added filtering and updated classification and assurance columns on the artifact glossary page.
• The Client API now supports updating and deleting external intelligence reports.
• The assessment summary can now be updated through the Client API.
• Redesigned the control domains glossary as the new Control framework page.
• Users created through the Client API can now be assigned a business unit.
• The documentation changelog is now available as an RSS feed.

​

Bug fixes

• Fixed an unclear “Action not allowed” error when starting an assessment. Users now see an explanation when their organization has reached its assessment limit.
• Fixed an error that could occur when creating an assessment through the Client API.
• Fixed an issue that prevented new risk advisories from being generated from news articles.
• Risk advisories are no longer created from old or undated news articles.
• Third parties are no longer asked to upload audit documents when only a supplemental questionnaire is in scope.
• Fixed supplemental questionnaires added through a bulk request not being applied to each selected relationship.

​

Bug fixes

• Fixed an issue where outdated news articles could appear as new risk advisories, and advisories now show the article’s original publish date.

​

Bug fixes

• Fixed an issue where co-branded emails to third parties could show the VISO TRUST logo alongside the client’s logo.
• Fixed an issue where some AI-only and Instant Analysis assessments could remain in Review Started instead of completing.
• Fixed an error message that could appear after saving document changes outside of a relationship page.
• Fixed an issue where screenshots shared in a support chat were not attached to the resulting support request.

​

Enhancements

• Organizations can now add a BCC address in Notification Settings so a copy of every platform email sent on their behalf is delivered to it.
• Removed the expiration date from collection request and reminder emails sent to third parties.

​

Enhancements

• Removed “Submitted by” details from public, presumed and trust profile artifacts.

​

Bug fixes

• Fixed text wrapping in the duplicate-relationship warning when creating a relationship.
• Fixed the artifact viewer redirecting to the relationship’s landing page.
• Fixed AI controls not appearing in the list of pending changes.
• Fixed the layout of the Edit intake questionnaire dialog so its footer stays at the bottom.
• The AI support assistant is rolling out to customers, helping resolve artifact and account questions directly in the app.
• Fixed the relationships list loading indefinitely after quickly removing a status filter.
• Fixed the “Performed by” field appearing blank in the Activity tab.
• Fixed a remediation request being shown when there was nothing to remediate.
• Fixed the third-party organization search dropdown appearing too bright in dark mode.
• Fixed relationship and assessment downloads failing, and added a loading indicator to the download button.
• Fixed the AI assistant reopening the wrong conversation after logging out or switching between assistants.
• Risk advisory rows on the monitoring page are now fully clickable, and long titles are truncated correctly.
• Fixed the width of the Take action button on the assessment expiration screen.
• Fixed breadcrumb dividers and the current location being hard to see in dark mode.
• Fixed an error that could occur when deleting a web link artifact.
• Fixed links in emails from the Australia region pointing to the US site.
• Creating a relationship for a new vendor is now significantly faster.
• Fixed the AI assistant failing in long conversations that searched many documents.
• Trust Center (Beta): Fixed artifact status briefly showing “In progress” between analyzing steps.

​

Enhancements

• Updated the design of the artifact upload dialog.
• Improved the emails sent when an artifact collection request expires.
• Trust Center (Beta): Redesigned the questionnaire answering experience in the Trust Center.
• Refreshed the breadcrumb navigation with an updated design.
• Added a “Submitted by” column to the artifact table.
• Context prediction now researches the vendor’s and your organization’s public web presence to suggest more accurate relationship context.
• The AI assistant can now answer precise questions about your relationships using the same search and filters as the Relationships page.
• Users can now accept risk on a relationship through the Client API.
• New Risk Analysis is now available to all organizations, and the preview tab and banner have been removed.
• Trust Center (Beta): Fixed the “In progress” status wrapping onto two lines in the knowledge base.
• Trust Center (Beta): New knowledge base artifacts now show their assurance, valid-until date, and analyzing status without a page refresh.
• Trust Center (Beta): Fixed knowledge base artifacts that are also on a relationship blocking questionnaire creation.
• Relationships with imported legacy risk now show it on the Assessments tab instead of the get-started wizard.
• Trust Center (Beta): Fixed new questionnaires briefly appearing at the bottom of the list.
• Trust Center (Beta): The knowledge base now refreshes automatically when artifacts are superseded.
• Trust Center (Beta): Fixed an error when deleting an excluded artifact from the knowledge base.
• Trust Center (Beta): Removed stray formatting characters, such as **, from questionnaire answers.
• Trust Center (Beta): Answer edits and flags on Trust Center questionnaires now save instantly.
• Updated the wording of assessment emails for consistency.

​

Bug fixes

• Fixed an issue where AI-only assessments could stay in review instead of completing automatically.

​

Enhancements

• Relationship context predictions now use the relationship’s product or service, business purpose, and client and vendor industries.

​

Bug fixes

• Fixed an issue that could prevent third parties from submitting a completed follow-up questionnaire.

​

Bug fixes

• Fixed an issue where third parties could receive a blank follow-up questionnaire.
• Fixed follow-up requests including supplemental questionnaire questions that had already been answered.
• Fixed an issue where the follow-up questionnaire could fail to load for third parties, blocking them from submitting.
• Fixed answered supplemental questionnaire questions appearing under “No response”.

​

Bug fixes

• Fixed an issue where financial viability and sanctions & trade documents were incorrectly excluded from relationships and left out of risk analysis.

​

Bug fixes

• Users can now skip the auditor review after requesting one following an AI assessment.
• Fixed the AI Systems and Personal Data Privacy business cases not appearing in the intake form for some organizations.
• Fixed the assessment summary describing inherent risk with the wrong level; it now uses the organization’s own risk level names.
• Fixed presumed compliance artifacts being shown for third parties with no publicly available evidence, which understated their residual risk.
• Fixed bulk artifact download failing for a relationship.
• Creating a new relationship is now significantly faster.
• Risk overrides are now reflected in the Risk Analysis navigation and the Security dimension’s risk cards.
• Fixed vendor homepages with hyphens, www prefixes, or international domains being rejected as invalid.
• Fixed a double scroll bar in the release notes dialog that hid the action buttons.
• Fixed the If all and Clear all filter controls appearing when no filters were selected.
• Fixed follow-up requests including supplemental questionnaire questions that had already been answered.
• Fixed business owner filtering not working when adding a new relationship.
• Fixed Workato webhooks not unsubscribing after repeated delivery failures; other webhook types now stay subscribed and show a warning state instead.
• Fixed the add artifact button icon not appearing disabled along with the button on the relationship details page.
• Fixed menu items rendering in bold text.
• Fixed missing table outlines and related styling issues in date pickers, chips, and menus.
• Fixed the relationships table header scrolling out of sync with the table body.
• Fixed the Risk Analysis navigation showing risk levels on dimensions other than Security and truncating long dimension names.

​

Enhancements

• Uploading a file that was already provided now shows a warning instead of blocking the submission with an error.
• Controls with many detections now always display a scroll bar.
• Control descriptions now display in full instead of being truncated behind a Read more link.
• Replaced the control row menu with a Risk breakdown button that opens the control details panel.
• Added risk advisory lookup and vendor directory search actions to the Workato connector.
• Supporting evidence in the control details panel now shows the artifact name instead of the file name.
• Fixed the instant assessment showing an endless loading state when creating a relationship with an existing vendor.
• Lightened the selected item color in the tertiary navigation for better contrast.
• Control rows now show detection type chips, such as subservicer and CUEC, alongside issues.
• The Activity tab now shows who submitted each artifact and displays artifact names instead of IDs.
• Aligned application colors with the design system for a consistent appearance in light and dark mode.
• The relationships table now sizes to its rows and scrolls with the page, and the Clear all button sits inline with the filters.
• The If all and Clear all filter controls no longer appear when only a keyword search is active.
• The If all and Clear all filter controls now appear only when two or more filters are selected.
• Added an Assessment Email Bounced webhook event so integrations are notified when a third-party contact’s email cannot be delivered.
• Added five new risk dimensions: Corporate Governance & Ethics, Fourth-Party & Suppliers, Sustainability & Human Rights, Sanctions & Trade, and Financial Viability, each with intake questions, controls, and artifact types.

​

Bug fixes

• Fixed an issue that prevented new news-based risk advisories from appearing in Monitoring.

​

Bug fixes

• Fixed an issue where cancelling an assessment could trigger repeated automatic re-assessments.
• Fixed an inconsistency between the All Controls list and the Control Coverage card.
• Fixed an issue where a supplemental questionnaire could fail to be created after an assessment completed.
• Fixed an issue where AI-answered supplemental questionnaires were not updated when a new assessment started if another supplemental questionnaire was also active.
• Fixed an issue where a supplemental questionnaire kept showing a pending-changes banner after the assessment had been updated.
• Fixed an issue where extending an expired assessment did not send it to the relationship’s current primary contact.
• Fixed presumed artifacts incorrectly displaying a high assurance level.
• Fixed an issue where answers could be lost when multiple supplemental questionnaires were answered at the same time.

​

Bug fixes

• Addressed stability issues in the AU region.

​

Bug fixes

• Artifact sources now use Public and Private labels instead of “Collected by” wording, fixing questionnaires incorrectly shown as collected by the third party.
• Search results now stay available at all times, including while relationship and vendor data is being refreshed in the background.
• Fixed an issue where excluding an artifact from the Artifact Viewer did not remove it from the assessment.
• Fixed relationship context prediction for bulk-imported vendors, and large imports now run in the background so the page is usable while they process.
• Removed misleading questionnaire wording from third-party collection emails.
• Fixed an issue where the page could not be scrolled while a dropdown menu or date picker was open.
• Comments entered while excluding an artifact from risk analysis now appear in the relationship activity.
• Corrected card background colors in the artifact collection flow.
• Polished the toggle controls on the vendor discovery screen.
• Page headers are now consistent across the application, with titles, actions, and filters in the same position on every screen.
• Fixed an error when sending a recommended follow-up questionnaire that reported no follow-up questions existed.
• Fixed an error when deleting a webhook through the public API, and made repeated deletes safe.
• Fixed a rare issue that could lock a user out of the application with an error page on every screen until they signed in again.
• Fixed dark mode rendering, restoring readable body text, opaque side panels, and visible header chips.

​

Enhancements

• The AI-generated assessment summary now replaces the legacy summary throughout the assessment.
• Imported relationships are now attributed to the user performing the import, and the ambiguous “Client username” column has been removed from the import template.
• The audit log is now surfaced as “All activity” at the top of the Activity tab, with icons for easier scanning.
• Third parties can now view and complete every questionnaire in a collection on a single page, with navigation and per-questionnaire progress.
• Users can now export nth parties to CSV from the Relationships page, with the export respecting applied filters.
• Saved filters now follow the user across browsers and devices instead of living in a single browser.
• Added divider lines between control domains to more clearly separate domains from their controls.
• Users can now expand or collapse all control domains at once.
• Fixed an error when saving a custom subdomain under Manage Domains.
• Fixed an issue where users mentioned in a comment did not receive a notification and the mention displayed incorrectly.
• The relationship import template now includes an organization’s custom data types, so imports containing them no longer fail with column errors.
• Supplemental questionnaires are now answered from the full text of a relationship’s artifacts, with supporting citations shown alongside each answer.
• The New Risk Analysis opt-in card now includes a demo video so admins can preview the experience before enabling it.
• Supplemental questionnaires now show whether each answer is AI-generated or vendor-provided, display progress while answering is in flight, and carry vendor answers forward between rounds.
• The user who started a relationship import is now emailed if the import fails, with a new notification setting to control it.
• Redesigned the supplemental questionnaire panel and “Get answers now” button, making it clear that answers are generated by running an assessment.

​

Bug fixes

• Fixed spacing on the vendor signature screen.
• Fixed an error when changing lifecycle management and onboarding settings on a relationship.
• Fixed assessment results showing the previous assessment instead of the newly updated one.
• The “Pending changes since last assessment update” notice no longer appears during a normal assessment, such as when a third party provides artifacts.
• Selecting a detection from risk analysis now highlights that detection on the destination page.
• Compliance attestations no longer affect initial risk when excluded in your framework.
• Pending changes no longer reappear immediately after starting an assessment from the pending-changes prompt.
• Presumed artifacts are now shown by default in the artifact list.
• Fixed the assessment collection stepper layout on smaller screens and corrected spacing on the Sign & Submit step.

​

Enhancements

• Filtering detections by type now displays the matching detections instead of their controls.
• Fixed missing historical data in risk analysis after an artifact was deleted.
• Detections are now sorted by highest assurance first.
• Removed the placeholder text shown when a control has no detections.
• Risk analysis now accounts for a third party’s subprocessor list.

​

Bug fixes

• Fixed CSV export not generating or downloading.
• Added spacing between the left navigation and main content in the vendor experience.
• Fixed the star icon in the AI Assistant rendering in the wrong color.
• Reopening the AI Assistant now restores the previous conversation instead of starting a new one.
• Regenerating an assessment summary now shows progress and confirms success only once the new summary is ready.
• Pressing Enter in the artifact selector now adds the highlighted option instead of leaving the text in the search field.
• Fixed lifecycle management notification settings reverting to the third-party contact instead of saving the selected business owner.
• Saved filters no longer show internal identifiers for tiers that have since been removed.
• Fixed an error that prevented third parties from opening the collections page.
• Relationship count links on the tier settings page now open the relationship list filtered to the selected tier.
• Risk model settings now clearly show whether each option is on or off.
• Compliance standards removed from an organization are no longer automatically re-added by artifact predictions.

​

Enhancements

• Release notes are now available directly in the app.
• Assessment leads, subscribers, and org admins now receive a notification when an email to a contact bounces.
• Artifact table rows are now clickable in full, not just the link text.
• Expired assessments are now called out on the assessment timeline and in the relationship list, with the option to complete the assessment or extend its collection timeline.
• Pending Changes now surfaces program-level changes separately, with a clear prompt to bring affected relationships up to date.

​

Bug fixes

• Refined color usage across the application for improved visual consistency.
• Fixed notification links so they now navigate to the correct page.
• Fixed an issue where the AI assistant would reopen full screen unexpectedly.
• Added a webhook trigger for assessment summary generation.
• Fixed a webhook trigger for document-only artifact updates that could be subscribed to but never fired.
• Fixed an issue preventing a custom framework draft from being published after refreshing the page.
• Improved the visibility of the “No context” label on the risk tolerance card.
• Fixed the global navigation animating across the screen on first page load.
• Relationship import progress now updates on its own without requiring the user to interact with the page.
• Long artifact names now truncate in the artifacts table, with the full name shown on hover.
• The artifact upload button now shows a loading indicator while an upload is in progress.
• Fixed the artifacts table so it opens in its intended default sort order.
• Softened the AI assistant’s stop button to an outlined style.
• Archived relationships are now excluded from the Directory summary.

​

Enhancements

• Users are now returned to their originally requested page after signing in through SSO.
• Standardized page backgrounds across the application for a more consistent look.
• Redesigned the relationship list page with a reorganized filter panel and quick filters for faster drill-down.
• Users can now save groups of filters and apply them in a single click.
• Tier management now has its own settings page, including tier descriptions.
• Added a guided walkthrough on the relationship page to help users work through change management.
• Admins can now copy a user’s invite link to share it directly instead of relying on the invitation email.
• Simplified the vendor discovery page header and added a “Learn more” link to supporting documentation.
• Exceptions are now only generated for audit types that can contain them.
• Questionnaire answering is now significantly faster for organizations with large trust profiles.

​

Bug fixes

• Fixed an error that could cause the public API specification, and the API reference documentation built from it, to fail to load.
• Fixed an error that prevented organization assessment settings from loading.

​

Enhancements

• The Workato Create VISO Relationship action now exposes additional fields, including instant analysis.

​

Bug fixes

• Fixed an issue where artifacts uploaded to a trust profile were not available to questionnaire answering, leaving questions unanswered.

​

Enhancements

• Questionnaire answering is significantly faster on large trust profiles, completing in minutes rather than tens of minutes.

​

Bug fixes

• Fixed an error that caused the Integrations page to fail to load when a Workato connection was configured.

​

Bug fixes

• Corrected assessment scoping so AI controls are only included when the AI intake question is answered.
• Fixed an issue where an instant assessment summary would not appear after relationship creation until the page was refreshed.
• Fixed the color of assessment summary headers in dark mode.
• Fixed an issue where a completed artifact validation would not display automatically until the page was refreshed.
• Artifact glossary descriptions are no longer truncated and now display in full.
• Fixed a missing background when creating a new contact for the assessment lead.
• Fixed an issue where detections were not loading on the Trust → Artifact Intelligence page.
• Fixed an issue where clicking Cancel in the Manage Tiers dialog could unintentionally unassign vendor tiers instead of simply closing the dialog.
• Presumed artifacts excluded from the risk model no longer appear in the assessment summary.
• Fixed a crash on the relationship page caused by artifact expiration dates.
• Improved the visibility of certain options and buttons affected by color contrast.

​

Enhancements

• AI controls now scope only from the AI Systems intake question. AI control domains are now included in an assessment only when the AI Systems intake question is selected. Previously they could also be pulled in by the Vendor Data Processing or Technology Provider questions. This has been corrected. To include AI controls going forward, select AI Systems when scoping the vendor. No past or in-progress assessments are affected; this applies only to new assessments scoped from July 9 onward.
• The vendor directory profile now includes a Relationships view listing all relationships with a vendor along with a generated executive summary, a Details tab, and vendor-specific risk advisories.
• Added filtering options to the relationship search endpoint in the Client API.
• Refreshed the application color palette.
• Our API documentation is now publicly available at docs.visotrust.com.

​

Bug fixes

• Resolved an issue where detections were not displayed on Trust → Artifact Intelligence.

​

Bug fixes

• Resolved an issue with the new Admin user role.

​

Enhancements

• Assessment Lead role — teams can now designate a specific user to run a vendor assessment, separate from the relationship’s Business Owner.
• Control validation side panel — a new panel breaks down an individual control’s weight, supporting evidence, and mitigation details.
• Artifact glossary updates — clearer assurance-level definitions across all artifact types.
• Smarter public research — reduced the volume of irrelevant public documents pulled into assessments.
• New webhook event — a webhook now fires when an AI assessment summary is generated.
• Post-SSO redirect — users are now returned to their originally requested page after signing in through SSO.
• Light/dark mode — users can now switch between light and dark interface themes.
• Admin role — a new Admin role lets designated users manage organization-level settings.
• In-page user invitations — users can now be invited to the platform directly from the user management page.

​

Bug fixes

• Fixed orphaned supplemental questionnaire entries appearing blank in the relationship configuration dialog.
• Fixed the Assessment Activity dropdown not listing activity on the assessment page.
• Improved the artifact viewer with refined editing controls, layout, and vendor selection.
• Fixed integrations showing as Connected after their credentials expired.
• Fixed a blue overlay appearing when viewing the agent in full screen.

​

Bug fixes

• Resolved an issue that caused the AI chat assistant to become unavailable.

​

Bug fixes

• Resolved an issue where Content-Disposition header filenames were not fully RFC 6266-compliant.