Product Updates

SafeBase

Send Completed Questionnaires to Salesforce

Customers can now send completed questionnaire files directly to the linked Salesforce account, helping close the handoff gap between SafeBase users completing the work and the sales or solutions teams who often need to send the final file back to the customer. Click here to learn more!

July 24, 2026

SafeBase

Trust Center Point of Contact Validation

Customers can now optionally require the Point of Contact email to match one of their organization’s email domains, helping keep the field accurate and more useful for follow-up. If the email does not match, the requester sees a validation error. Click here to learn more!

July 24, 2026

Drata

Custom Vendor Types

Admins can now create, rename, and delete vendor types so Drata can better reflect how each organization actually classifies its vendors. Instead of relying only on Drata’s default categories, teams can now align vendor records to the same internal taxonomy they already use across procurement, security reviews, and risk workflows. Click here to learn more!

July 24, 2026

Drata

TPRM Agent: Assess Against Public Docs

Teams can now run a first-pass TPRM assessment using only the public documents available in a vendor’s SafeBase Trust Center. Click here to learn more!

July 24, 2026

Drata

General AI Usage Policy Template

Customers looking for a practical starting point for AI governance can now use our new General AI Usage Policy Template. Instead of forcing teams to jump straight into a full governance framework, the template gives them a lightweight way to cover the essentials now, including approved AI tool use, confidential data handling, human review of AI output, vendor diligence, incident reporting, and training. Click here to learn more!

July 24, 2026

Drata

New Framework Support: AIUC-1

Drata now natively supports AIUC-1, a voluntary assurance standard for AI agents that covers data and privacy, security, safety, reliability, accountability, and societal risk. It combines technical testing, certification support, and accredited audits, and can be paired with AI-specific insurance as part of AIUC’s broader trust model. Click here to learn more!

July 18, 2026

Drata

Control Readiness Progress Tracker: Visualize Control Readiness Progress To Prioritize Audit Preparation

With the new Control Readiness Progress Tracker, teams can now see a percentage-based view of each control’s progress toward readiness, making it easier to understand what is nearly complete, what still needs work, and where to focus next. Click here to learn more!

July 18, 2026

Drata

Multiple Artifacts & Multi-File Upload for Evidence Library

Multiple Artifacts & Multi-File Upload for Evidence Library lets customers upload several files, URLs, or tickets in a single session and keep more than one artifact as current evidence at the same time. This removes the need to zip files together or upload artifacts one by one when a single piece of evidence requires multiple proof points. Click here to learn more!

July 18, 2026

Drata

New Framework Support: APRA CPS 230

APRA CPS 230 (Prudential Standard CPS 230 – Operational Risk Management) is APRA’s standard for operational risk management, business continuity, and third-party/service provider risk in the Australian financial sector. It applies to APRA-regulated entities, including banks, insurers, and superannuation trustees, as well as their Material Service Providers. Drata operationalizes CPS 230 as a fully supported framework with requirement-level guidance for both APRA-regulated entities and Material Service Providers, giving organizations across Australia and New Zealand a purpose-built way to manage CPS 230 compliance natively in the platform. Click here to learn more!

July 18, 2026

SafeBase

Chrome Extension 2.7.1 Available

Version 2.7.1 of the SafeBase Chrome Extension is out! Click here to learn more!

July 2, 2026