Compyl is a commercial compliance-automation platform, run as a hosted service, that organizes governance, risk, and compliance work around policies, assets, contracts, clients, audits, and forms, with an Evidence Studio for turning ingested data into a view of current GRCGRCGovernance, Risk, and Compliance — a framework for aligning IT controls with business policy, regulatory requirements, and risk management so organizations can audit and report on their posture systematically. and security posture. It is built for compliance and audit-readiness teams who need to map controls to evidence rather than track them in spreadsheets, and it leans on integrations with systems like Azure, ServiceNow, Okta, GitHub, and Google Workspace to pull evidence automatically instead of requiring manual collection. Its tag set and structure place it in the control-mapping and audit-readiness space alongside other GRC platforms, distinguished by how deeply it wires into existing IT and identity systems. Launched in 2020 and still shipping releases roughly every couple of weeks, with its latest just over two weeks old, it is under active development.
Which of our controls have no evidence linked to them ahead of an audit?
checks each control record against its linked evidence and artefacts and lists the ones an auditor would find empty
Which policies are overdue for their scheduled review?
tracks each policy's update schedule and flags the ones past their review date
Which contracts are coming up for renewal and who owns them?
reads owner and expiry fields across the contract register and surfaces the ones approaching expiry, so cost or risk conversations happen before renewal
Which of our cloud and SaaS controls can we evidence automatically versus manually?
pulls role assignments, access packages, compliance policy status, and backup records directly from connected systems like Azure and ServiceNow, replacing manual collection for those controls
Where is a given asset exposed through vendors, contracts, or open risks?
follows the links from an asset record out to whatever vendors, contracts, risks, or people are attached to it, showing the full chain in one view
How confident should we be in AI-drafted answers to a vendor questionnaire?
matches each generated answer to the configured option set and attaches a confidence score, flagging low-confidence answers for manual review before they go out
Built from Compyl's releases, docs, README and our own runs.
“Seen” marks the month we first spotted a release the vendor didn't date.
Group names and tags are our labels.
+Incremental Data SyncshippedSwitches synchronization processes from full rebuilds to incremental updates to reduce latency and API usage for large datasets.15 releases · 1 other source · first seen Jun 2024▸
Also counts toward: CI/CD pipeline integration
release
15 total
Staggers overnight integration syncs to start gradually instead of all at once, reducing database load during high-volume sync windows.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Sep 23rd, 2026 · Sep 2026
· source
· release history
Switches Google Workspace Drive file syncs from full rebuilds to incremental syncs, reducing sync time and API usage for large Drive environments.
Sep 15th, 2026 · Sep 2026
· source
· release history
Switches ServiceNow CMDB syncs from full-table rebuilds to incremental syncs, dramatically reducing sync time for large inventories.
Sep 15th, 2026 · Sep 2026
· source
· release history
Adds Rapid7 InsightCloudSec integration to aggregate discovered packages, vulnerabilities, and resource inventories
October 17, 2025 · Oct 2025
· source
· release history
Adds SentinelOne integration for endpoint detection and response (EDR) data including device status, threat events, and policy configurations
October 17, 2025 · Oct 2025
· source
· release history
Adds JumpCloud integration for user identities, group assignments, MFA settings, and login events
October 17, 2025 · Oct 2025
· source
· release history
example
Connect NetSuite to pull user and device data for vulnerability identification.$ Enable the NetSuite integration in Compyl Dashboards.
May 14, 2025 · May 2025
· source
+AI Questionnaire AssistanceshippedUses AI to generate answers for questionnaires and maps them to configured option sets with confidence scoring.9 releases · 1 other source · first seen Jun 2024▸
Shared capability: Security baseline assessment
release
9 total
Adds answer-mapping in Questionnaire Assist so AI-generated answers are matched to configured option sets (Yes/No/N/A or maturity scales) with a confidence score and manual review flag for low-confidence results.
Sep 15th, 2026 · Sep 2026
· source
· release history
Updates Questionnaire Assist to map AI-generated answers to configured answer options with a confidence score instead of free text
Sep 15th, 2026 · Sep 2026
· source
· release history
Questionnaire Assist maps AI-generated answers to configured options with a confidence score instead of free text
Sep 15th, 2026 · Sep 2026
· source
· release history
Improves Compyl.AI to utilize the entire form for text field suggestions including likelihood, impact, owner, and tags
October 17, 2025 · Oct 2025
· source
· release history
Adds AI-Assisted Assessment Automation to generate context-aware responses for questionnaires, assessments, surveys, RFPs, and RFIs.
May 14, 2025 · May 2025
· source
· release history
AI Policy Alignment button on policies linked to controls provides evaluation and improvement suggestions
March 4, 2025 · Mar 2025
· source
· release history
example
Automate compliance questionnaire responses using the new AI feature.$ Use the 'AI-Assisted Assessment' workflow in the Compyl platform to analyze existing documentation and generate answers for RFPs and RFIs.
May 14, 2025 · May 2025
· source
+ServiceNow IntegrationshippedIngests Service Catalog requests, approval workflows, and CMDB data for continuous compliance evidence.8 releases · 1 other source · first seen Apr 2026▸
release
8 total
Extends the ServiceNow CMDB connector to support Business Applications, Service Instances, Servers, and their relationships, including custom compliance fields like System ID and PCI/SOX tags.
Sep 30th, 2026 · Sep 2026
· source
· release history
ServiceNow CMDB connector now supports Business Applications, Service Instances, Servers, custom compliance fields (System ID, PCI/SOX tags) and their relationships.
Sep 30th, 2026 · Sep 2026
· source
· release history
ServiceNow CMDB connector now supports Business Applications, Service Instances, Servers, custom compliance fields (System ID), and PCI/SOX tags.
Sep 30th, 2026 · Sep 2026
· source
· release history
Adds ServiceNow integration support for Service Catalog Request and Requested Item data, including exception requests and approval workflows
Sep 15th, 2026 · Sep 2026
· source
· release history
Extends the ServiceNow integration to ingest Service Catalog Request and Requested Item data, including exception requests, approval workflows, and related records.
Sep 15th, 2026 · Sep 2026
· source
· release history
Switches ServiceNow CMDB syncs from full-table rebuilds to incremental syncs, dramatically reducing sync time for large inventories.
Sep 15th, 2026 · Sep 2026
· source
· release history
example
Configure ServiceNow CMDB for expanded asset discovery including custom compliance metadata.$ In Settings > Integrations > ServiceNow, enable 'Business Applications', 'Service Instances', and 'Servers'. Enable 'Custom Compliance Fields' to map System ID and PCI/SOX tags.
Sep 30th, 2026 · Sep 2026
· source
+Vendor Risk AnalyticsshippedGenerates AI-powered vendor profiles, enriches records with financial signals, and schedules automated data revalidation.6 releases · 2 other sources · first seen Feb 2026▸
Also counts toward: Scheduled jobs
release
Vendor Vanguard enriches vendor records with financial and organizational signals and surfaces criticality, data-protection posture, and recommended actions in the register
June 6th, 2026 · Jun 2026
· source
· release history
Introduces a dedicated Insights tab on vendor workflows, enabling AI-powered Vendor Insights with automated profile generation for risk, compliance, and financial health.
February 19, 2026 · Feb 2026
· source
· release history
Establishes scheduled refresh cycles that automatically revalidate vendor data every 90 days.
February 19, 2026 · Feb 2026
· source
· release history
Provides new Inline execution of Vendor Insights directly from the Add/Edit Vendor flow with results displayed in a unified dashboard.
February 19, 2026 · Feb 2026
· source
· release history
Adds the Catered Onboarding Agent which converts unstructured inputs (PDFs, DOCX, spreadsheets) into structured system records to surface organizational risk signals during initial setup.
February 19, 2026 · Feb 2026
· source
· release history
example
Vendor analysis: Generate comprehensive AI profiles for specific vendors directly from their workflow without leaving the record.$ Open the Add/Edit Vendor flow, trigger `Vendor Insights` to view automated risk and compliance profiles on the new `Insights` tab.
February 19, 2026 · Feb 2026
· source
Initial platform setup: Ingest PDF/DOCX assets and scan vendor risks via the Catered Onboarding Agent without manual entry.$ Use the Catered Onboarding Agent interface to upload unstructured documents (PDFs, DOCX, spreadsheets) to automatically populate the Risk Register and module registers.
February 19, 2026 · Feb 2026
· source
+Integration Sync CancellationshippedAllows users to cancel a queued or running integration sync from the UI, stopping it immediately or cleanly at its next saved step, and marking it as cancelled so a new sync can start right away.3 releases · 4 other sources · first seen Sep 2025▸
release
Adds the ability to cancel an integration sync directly: a queued sync stops immediately, a running sync stops cleanly at its next saved step, and cancelled syncs are marked as Cancelled so a new sync can start right away.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Sep 30th, 2026 · Sep 2026
· source
· release history
Adds the ability to cancel integration syncs (queued or running) via UI/API, with identity tracking for manual cancellations.
Sep 30th, 2026 · Sep 2026
· source
· release history
Adds the ability to cancel an integration sync directly, stopping queued runs immediately and running ones cleanly at the next saved step.
Sep 30th, 2026 · Sep 2026
· source
· release history
example
Stop a stuck sync in progress without waiting for it to fail or hang.$ In the Integration Sync Management UI, locate the running/queued sync and click Cancel. Verify the status changes to 'Cancelled' and the requestor is logged.
Sep 30th, 2026 · Sep 2026
· source
Stop a stuck sync via the UI to allow an immediate retry.$ In the Integration Syncs list, select the running entry and click 'Cancel'.
Sep 30th, 2026 · Sep 2026
· source
When a runaway or misconfigured integration sync is consuming resources, cancel it from the UI so a corrected sync can start immediately.$ In Compyl, go to Integrations > Sync History, locate the queued or running sync, and click 'Cancel Sync'.
Sep 30th, 2026 · Sep 2026
· source
Monitor query health at a glance in the UI grid.$ In the Query Builder view, check the grid columns for the program health status (pass/fail) indicators.
September 12, 2025 · Sep 2025
· source
+Box IntegrationshippedCollects user, group, file, folder, collaboration, legal hold, retention, classification, and enterprise event data from Box.5 releases · 2 other sources · first seen Jun 2024▸
release
Adds Box as a new integration, collecting users, groups, files, folders, collaborations, shared links, legal holds, retention policies, classifications, and enterprise events for continuous compliance evidence.
Sep 22nd, 2026 · Sep 2026
· source
· release history
Adds Box as a new integration, collecting users, groups, files, folders, collaborations, shared links, legal holds, retention policies, classifications, and enterprise events for continuous compliance evidence.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Sep 22nd, 2026 · Sep 2026
· source
· release history
Adds Box as a new integration, collecting users, groups, files, folders, collaborations, shared links, legal holds, retention policies, classifications, and enterprise events for continuous compliance evidence
Sep 22nd, 2026 · Sep 2026
· source
· release history
New coverage: CIS Benchmarks and CIS Critical Security Controls mapping
June 11, 2024 · Jun 2024
· source
· release history
example
Connect Box to gather continuous compliance evidence including legal holds and retention policies.$ In the Integrations panel, select 'Box' and authenticate with enterprise admin credentials to sync users, groups, files, folders, collaborations, shared links, legal holds, retention policies,…
Sep 22nd, 2026 · Sep 2026
· source
Connect Compyl to Box for automated evidence collection.$ In Settings > Integrations, select `Box` and enter your OAuth credentials.
July 6th, 2026 · Jul 2026
· source
+Guided Integration SetupshippedProvides a guided, multi-step wizard with live validation and framework-aware defaults for configuring new integrations.4 releases · 2 other sources · first seen Feb 2026▸
release
Expands the Axonius integration to pull additional asset inventory data, and expands the SentinelOne integration to include blueprints and control mappings for threats, groups, and policies data.
Oct 20th, 2026 · Oct 2026
· source
· release history
Adds new integration blueprints for recently onboarded data sources.
Oct 20th, 2026 · Oct 2026
· source
· release history
Add CheckHub configuration flow for guided setup
April 30th, 2026 · Apr 2026
· source
· release history
Replaces the legacy single-form integration setup with a guided, multi-step Integration Configuration wizard supporting granular scoping and live validation.
February 19, 2026 · Feb 2026
· source
· release history
example
Guide users through setting up the new CheckHub connector in the web console.$ In the console, go to Integrations > Add Integration > CheckHub and follow the configuration flow.
April 30th, 2026 · Apr 2026
· source
Integration setup: Configure new integrations with guided validation and framework-aware defaults instead of legacy single-form configuration.$ Navigate to Integrations > New Integration to use the multi-step wizard for scoped access selection and live connectivity validation.
February 19, 2026 · Feb 2026
· source
+SSO Provider ConfigurationshippedApplies SSO provider changes immediately at the next sign-in without requiring an application restart.5 releases · 1 other source · first seen Sep 2025▸
release
SSO provider changes take effect immediately at the next sign-in without requiring an application restart.
Sep 30th, 2026 · Sep 2026
· source
· release history
Enables SSO provider changes to take effect immediately at the next sign-in, with no application restart required.
Sep 30th, 2026 · Sep 2026
· source
· release history
Adds instant visibility of upcoming schedule frequency and owners without extra clicks.
September 12, 2025 · Sep 2025
· source
· release history
Adds approver and recipient details to every record in the run history.
September 12, 2025 · Sep 2025
· source
· release history
Enriches audit-ready run records to capture status, ownership, and review context.
September 12, 2025 · Sep 2025
· source
· release history
example
Verify who is accountable for a specific evidence run.$ In the run history view, locate the approver and recipient details displayed for each record.
September 12, 2025 · Sep 2025
· source
+Enhanced Query BuildershippedProvides a visual drag-and-drop interface, inline result preview, advanced filtering with SQL syntax, and bulk task creation capabilities.6 releases · first seen Jul 2024▸
release
Introduces Compliance Trend module showing daily trend lines of Control Set compliance scores for up to 90 days in the Compliance Overview
October 17, 2025 · Oct 2025
· source
· release history
Adds program health pass/fail status indicators directly in the Query Builder grid.
September 12, 2025 · Sep 2025
· source
· release history
Adds a visual drag-and-drop interface for the Query Builder that previews results inline and supports duplicating pre-built queries.
November 19, 2024 · Nov 2024
· source
· release history
Allows creating tasks directly from Query Builder results with bulk approve/decline actions requiring optional or mandatory comments.
November 19, 2024 · Nov 2024
· source
· release history
Added > GETDATE() syntax to Query Builder for post-date filtering
July 23, 2024 · Jul 2024
· source
· release history
Added DISTINCT keyword support in Query Builder for unique records
July 23, 2024 · Jul 2024
· source
· release history
+Evidence Health RecalculationshippedDynamically re-evaluates evidence health scores based on policy mappings and control scope changes.4 releases · first seen Aug 2026▸
release
Policies attached to a control now count toward its pass/fail compliance evaluation, and policy mappings linked to a control now factor into the evidence health coverage score, with approved policies improving the score and draft or overdue policies counted as gaps.
Oct 20th, 2026 · Oct 2026
· source
· release history
Toggling a Control between In Scope and Out of Scope immediately re-evaluates Evidence Health
Aug 27th, 2026 · Aug 2026
· source
· release history
Toggling a Control between In Scope and Out of Scope immediately re-evaluates Evidence Health, so the health chip and drawer always reflect the current scope instead of showing a stale Unevaluated or No Evidence state
Aug 27th, 2026 · Aug 2026
· source
· release history
Updates Evidence Health scoring to factor in Policy Mappings
Aug 6th, 2026 · Aug 2026
· source
· release history
+GoDaddy IntegrationshippedConnects to GoDaddy with endpoint validation, letting users selectively enable ingestion of Domains, Orders, and Subscriptions during setup.2 releases · 2 other sources · first seen Sep 2026▸
release
GoDaddy integration adds endpoint validation for Domains, Orders, and Subscriptions during setup.
Sep 30th, 2026 · Sep 2026
· source
· release history
Adds endpoint validation to the GoDaddy integration, letting you individually review and toggle Domains, Orders, and Subscriptions during setup.
Sep 30th, 2026 · Sep 2026
· source
· release history
example
When setting up the GoDaddy integration, use endpoint validation to selectively enable only the asset types your programme needs.$ In Compyl, go to Integrations > GoDaddy > Setup, then use the endpoint validation screen to individually toggle Domains, Orders, and Subscriptions on or off before completing the connection.
Sep 30th, 2026 · Sep 2026
· source
Validate specific GoDaddy endpoints before fully activating the integration to review Domains, Orders, or Subscriptions individually.$ In Settings > Integrations > GoDaddy setup, use the endpoint validation toggle to review and enable/disable Domains, Orders, and Subscriptions.
Sep 30th, 2026 · Sep 2026
· source
+Inline Entity CreationshippedAllows users to create related entities directly from parent record views without navigating away.4 releases · first seen Sep 2026▸
release
Extends inline creation to Contracts for Vendors, Clients, Assets, and Tasks.
Sep 15th, 2026 · Sep 2026
· source
· release history
Expands inline record creation to Contracts for Vendors, Clients, Assets, and Tasks
Sep 15th, 2026 · Sep 2026
· source
· release history
Adds inline + New buttons on Control records to create Blueprints and Tasks with automatic linking to the parent Control.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Sep 15th, 2026 · Sep 2026
· source
· release history
Adds + New buttons on Control records for creating linked Blueprints and Tasks
Sep 15th, 2026 · Sep 2026
· source
· release history
+Comment Tagging & NotificationsshippedAllows @mentioning colleagues in comments with automatic email or Slack notifications and manages notification filters.2 releases · 2 other sources · first seen Nov 2024▸
release
Adds in-platform @name tagging for comments with automatic email or Slack notifications to mentioned users.
November 19, 2024 · Nov 2024
· source
· release history
Adds timestamped keyword search, sorting, and read/unread filtering for the Notification center.
November 19, 2024 · Nov 2024
· source
· release history
example
Filter notifications to see only unread items from the past week.$ In Notifications, select 'Unread' filter and sort by Date Descending
November 19, 2024 · Nov 2024
· source
Tag a colleague in a comment to assign action on a query result.$ Type '@name' in the comment box on a task or query row
November 19, 2024 · Nov 2024
· source
+Dashboard ExportingshippedEnables exporting dashboards and risk summaries to PDF, image, and Excel formats for external reporting.2 releases · 1 other source · first seen Nov 2024▸
release
Dashboard and report definitions now track the tables and columns they reference.
Oct 20th, 2026 · Oct 2026
· source
· release history
Enables exporting Dashboards to PDF, Image (PNG/JPEG), and Excel formats from the UI.
November 19, 2024 · Nov 2024
· source
· release history
example
Export a risk summary dashboard for executive reporting.$ In Dashboard, click Export > Excel / PDF
November 19, 2024 · Nov 2024
· source
+FAIR Risk AnalysisshippedGuides teams through quantitative risk simulation to generate loss estimates and ownership assignments for controls.2 releases · 1 other source · first seen Jun 2026▸
release
The Decision step in the guided risk flow now suggests a risk treatment based on selected risk attributes.
Oct 20th, 2026 · Oct 2026
· source
· release history
FAIR Analysis flow provides a five-step risk simulation outputting minimum, average, and maximum loss estimates plus ALE, ownership, status, and due dates
June 6th, 2026 · Jun 2026
· source
· release history
example
Guide a team through quantitative risk analysis using the new FAIR flow to get loss estimates before creating a record.$ Initiate the 'FAIR Analysis' flow from the Risk module; complete the five-step identification and simulation to export ALE, ownership, status, and due dates.
June 6th, 2026 · Jun 2026
· source
+Separation of Duties EnforcementshippedEnforces policy administration rules to prevent the same user from being appointed as both owner and approver.2 releases · 1 other source · first seen Jul 2026▸
Also counts toward: Administrative audit log
release
Policy administrators can now assign the same person as policy owner and approver, with a required warning, acknowledgment, and business justification recorded in the audit trail.
Oct 20th, 2026 · Oct 2026
· source
· release history
Policy Administration now enforces separation-of-duties when reassigning policy owners and approvers.
July 6th, 2026 · Jul 2026
· source
· release history
example
Reassign a policy owner ensuring the same user is not appointed as approver simultaneously.$ In the Policy Editor, use the 'Policy Administration' reassign flow which enforces separation-of-duties constraints.
July 6th, 2026 · Jul 2026
· source
+GitHub Security IntegrationshippedsuggestedIngests Dependabot alerts, secret scanning alerts, code scanning alerts, security settings, collaborators, and rulesets.3 releases · first seen Sep 2026▸
Suggested capability: Security baseline assessment. This is our guess, not confirmed.
Expands the GitHub integration to cover Dependabot alerts, secret scanning alerts, code scanning alerts, organization security settings (including 2FA status), outside collaborators, and rulesets.
Sep 22nd, 2026 · Sep 2026
· source
· release history
+Global Custom Field SearchshippedEnables searching and filtering of custom field values directly in grid views across all major record types.2 releases · 1 other source · first seen Sep 2026▸
release
Makes custom field values searchable and filterable directly in grid views across Risks, Vendors, Incidents, Contracts, Assets, and Audits.
Sep 22nd, 2026 · Sep 2026
· source
· release history
Adds Custom field values searchable and filterable directly in grid views across Risks, Vendors, Incidents, Contracts, Assets, and Audits
Sep 22nd, 2026 · Sep 2026
· source
· release history
example
Filter risks or assets by custom field values to quickly isolate specific compliance attributes.$ In the Risks grid view, use the 'Custom Fields' filter dropdown to search and filter by specific custom field values across Risks, Vendors, Incidents, Contracts, Assets, and Audits.
Sep 22nd, 2026 · Sep 2026
· source
+Okta IntegrationshippedsuggestedIngests application entitlements, MFA status, group rules, admin roles, and user lifecycle events from Okta.3 releases · first seen Sep 2026▸
Suggested capability: Data access governance. This is our guess, not confirmed.
release
Expands the Okta integration to cover application entitlements, MFA enrollment status, group rules, admin role assignments, and user lifecycle events.
Sep 22nd, 2026 · Sep 2026
· source
· release history
Expands Okta integration to cover application entitlements, MFA enrollment status, group rules, admin role assignments, and user lifecycle events.
Sep 22nd, 2026 · Sep 2026
· source
· release history
Expands Okta integration to cover application entitlements, MFA enrollment status, group rules, admin role assignments, and user lifecycle events
Sep 22nd, 2026 · Sep 2026
· source
· release history
+Azure Identity and Compliance IntegrationshippedsuggestedCollects evidence from Azure Privileged Identity Management, Entitlement Management, Intune, and backup systems.3 releases · first seen Sep 2026▸
Suggested capability: Data access governance. This is our guess, not confirmed.
release
Extends Azure integration to Privileged Identity Management role assignments, Entitlement Management access packages, Intune compliance policy status, and backup protected items
Sep 15th, 2026 · Sep 2026
· source
· release history
Expands the Azure integration to cover Privileged Identity Management role assignments, Entitlement Management access packages, Intune compliance policy status, and backup protected items for automated evidence collection.
Sep 15th, 2026 · Sep 2026
· source
· release history
Azure integration now covers Privileged Identity Management role assignments, Entitlement Management access packages, Intune compliance policy status, and backup protected items
Sep 15th, 2026 · Sep 2026
· source
· release history
+Dynamic Task AssignmentshippedsuggestedAutomatically assigns review tasks from query results to specific users based on data fields.2 releases · 1 other source · first seen Nov 2024▸
Suggested capability: Data access governance. This is our guess, not confirmed.
release
Bulk submit or approve multiple policies in one action from the Security Policies module
March 4, 2025 · Mar 2025
· source
· release history
Enables dynamic ownership to automatically assign review tasks from query results to specific users based on data fields.
November 19, 2024 · Nov 2024
· source
· release history
example
Quickly approve multiple pending policies in one go.$ Select multiple policies in the Security Policies module list and choose 'Bulk Approve'.
March 4, 2025 · Mar 2025
· source
+CSV Questionnaire ConfigurationshippedEnables uploading question sets via CSV with configurable branching logic, default answer mapping, and dynamic column targeting.3 releases · first seen Jul 2024▸
release
Adds Branch Question Name column to specify which subsequent question a branch should target during CSV upload.
July 22, 2024 · Jul 2024
· source
· release history
Adds DefaultAnswerSet column in the Questions table to store the name of an uploaded CSV answer set as the default answer ID.
July 22, 2024 · Jul 2024
· source
· release history
Adds Branch To column options (Complete, Question, Next Section) to define assessment flow branching when uploading question sets via CSV.
July 22, 2024 · Jul 2024
· source
· release history
+SSO Federation ConfigurationshippedSupports SAML 2.0 federated Single Sign-On via corporate identity providers such as Azure AD, Okta, and Ping for enterprise customers.2 releases · first seen Oct 2025▸
Also counts toward: Single sign-on, SAML SSO
release
Added OIDC and SAML configuration field validation for Authentication Provider URI and certificate on save.
Aug 25th, 2026 · Aug 2026
· source
· release history
Adds SAML 2.0 federated Single Sign-On (SSO) for enterprise customers via corporate identity providers such as Azure AD, Okta, and Ping
October 17, 2025 · Oct 2025
· source
· release history
+Bulk Data Import TemplatesshippedProvides standardized templates for bulk uploading data related to vendors, assets, risks, incidents, and contracts.1 release · 1 other source · first seen Jul 2024▸
release
Added bulk data upload templates for Vendor Lists, IT Assets, Risks, Incidents, Audits, Clients, and Contracts
July 23, 2024 · Jul 2024
· source
· release history
example
Map CSV columns to custom tenant fields during contract bulk import$ In the Contract module bulk import wizard, select the custom field mapping options corresponding to your tenant-configured fields.
July 22nd, 2026 · Jul 2026
· source
+Batch Activity ViewshippedDisplays run history, status, approvers, and report download options for Blueprint batches within the drawer.1 release · 1 other source · first seen Jul 2026▸
release
Adds Batch Activity view to the Blueprint drawer for viewing run history, status, approvers, recipients, and downloading reports without navigating away
July 16th, 2026 · Jul 2026
· source
· release history
example
Monitor scheduled Blueprint runs and export reports directly from the detail panel.$ In the Compyl service UI, open the Blueprint drawer for a specific blueprint and select the 'Batch Activity' view tab to see approvers and download reports.
July 16th, 2026 · Jul 2026
· source
+Blueprint Generation AssistantshippedUses an AI agent to draft blueprints, control mappings, and SQL queries from natural language descriptions.1 release · 1 other source · first seen Jun 2026▸
Also counts toward: Built-in AI assistant, Natural-language query
release
Blueprint Building AI agent drafts blueprints from natural language descriptions including SQL queries and control mappings, with schedules configurable for report-only or human attestation
June 6th, 2026 · Jun 2026
· source
· release history
example
Automate blueprint creation for new compliance requirements using natural language input.$ Use the Blueprint Building `AI agent` to describe systems or data to monitor, which generates SQL queries and attaches relevant controls; configure the schedule output type to 'report-only' or…
June 6th, 2026 · Jun 2026
· source
+External Auditor AccessshippedsuggestedGrants third-party auditors dedicated, scoped access to review portfolio posture and collaborate on tasks without full platform permissions.1 release · 1 other source · first seen Jun 2026▸
Suggested capability: Data access governance. This is our guess, not confirmed.
release
External Auditor Portal gives third-party auditors dedicated access while auditees collaborate via Tasks within the main UI
June 6th, 2026 · Jun 2026
· source
· release history
example
Grant an external auditor dedicated access to review portfolio posture without giving them full platform access.$ Invite the user as an 'External Auditor' to assign them the `External Auditor Portal` role, allowing them to view register visualizations and progress via `Tasks`.
June 6th, 2026 · Jun 2026
· source
+BitSight IntegrationshippedCollects security ratings, findings, and related risk data from BitSight.1 release · first seen Oct 2026▸
release
The BitSight integration now loads ratings, findings, and related BitSight data.
Oct 29th, 2026 · Oct 2026
· source
· release history
+Google Cloud Platform IntegrationshippedsuggestedCollects Security Command Center findings, organization policies, KMS keys, logging sinks, firewall rules, Secret Manager metadata, Cloud SQL instances, storage buckets and IAM, and the org/folder/project hierarchy from Google Cloud Platform.1 release · first seen Oct 2026▸
Suggested capability: Security baseline assessment. This is our guess, not confirmed.
release
The Google Cloud Platform integration now collects Security Command Center findings, organization policies, KMS keys, logging sinks, firewall rules, Secret Manager metadata, Cloud SQL instances, storage buckets and IAM, and the org/folder/project hierarchy.
Oct 29th, 2026 · Oct 2026
· source
· release history
+OpenAI API Platform IntegrationshippedCollects users, projects, API keys, usage, cost, spend limits, data-retention settings, and admin activity from the OpenAI API Platform.1 release · first seen Oct 2026▸
Also counts toward: Administrative audit log
release
The OpenAI API Platform integration now loads users, projects, API keys, usage, cost, spend limits, data-retention settings, and admin activity on Sync All.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Oct 29th, 2026 · Oct 2026
· source
· release history
+Supabase IntegrationshippedCollects organizations, projects, functions, secrets, custom hostnames, and network restrictions from Supabase.1 release · first seen Oct 2026▸
release
Compyl adds a Supabase integration that syncs organizations, projects, functions, secrets, custom hostnames, and network restrictions.
Oct 27th, 2026 · Oct 2026
· source
· release history
+Workspace ONE IntegrationshippedsuggestedCollects device compliance status, patch and OS version inventory, disk encryption status, profile and policy assignments, and enrollment state from Workspace ONE.1 release · first seen Oct 2026▸
Suggested capability: Security baseline assessment. This is our guess, not confirmed.
release
Compyl adds a Workspace ONE integration that collects device compliance status, patch and OS version inventory, disk encryption (BitLocker) status, profile and policy assignments, and enrollment state.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Oct 27th, 2026 · Oct 2026
· source
· release history
+Custom Fields on Client RecordsshippedAllows administrators to define and manage custom fields on client records within the Clients module.1 release · first seen Oct 2026▸
release
Adds custom fields support to the Clients module, enabling administrators to define and manage custom fields on client records.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Oct 23rd, 2026 · Oct 2026
· source
· release history
+API Field ValidationshippedEnforces required fields on IT Assets and Tasks API update calls, returning a clear error when required fields such as users are omitted rather than silently clearing data.1 release · first seen Oct 2026▸
release
The users field is now required on IT Assets and Tasks API update calls; omitting it previously cleared role assignments silently but now returns a clear error.
Oct 20th, 2026 · Oct 2026
· source
· release history
+API Key ManagementshippedDisplays the environment's API base URL alongside API keys to enable quick endpoint discovery.1 release · first seen Oct 2026▸
release
The API Keys page now displays the environment's API base URL for quick endpoint discovery.
Oct 20th, 2026 · Oct 2026
· source
· release history
+Association SuggestionsshippedOffers auto-suggestions when linking Controls, Risks, and Tasks through association pickers to speed up record linking.1 release · first seen Oct 2026▸
release
Association pickers for Controls, Risks, and Tasks now offer suggestions to speed up linking.
Oct 20th, 2026 · Oct 2026
· source
· release history
+Flat File Integration APIshippedProvides V2 APIs for flat file integrations supporting replace, append, parse, update, and delete operations with API key and JWT authentication, returning errors on failed parses without saving partial data.1 release · first seen Oct 2026▸
Also counts toward: REST API
release
Adds V2 Flat File Integration APIs supporting replace, append, parse, update, and delete operations, with API key and JWT authentication; failed parses return an error without saving partial data.︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄
Oct 20th, 2026 · Oct 2026
· source
· release history
+Task View PersistenceshippedSaves view configurations and filter selections across the Board, List, and Approvals views in Tasks so they persist between sessions.1 release · first seen Oct 2026▸
release
Adds saved views and filter persistence across the Board, List, and Approvals views in Tasks.
Oct 20th, 2026 · Oct 2026
· source
· release history
+Asana Vendor WorkflowshippedAutomates vendor record creation from Asana milestone-stage tickets via a dedicated workflow.1 release · first seen Aug 2026▸
Also counts toward: Ticketing integration
release
Enables automatic vendor record creation from Asana milestone-stage tickets via the new Asana Vendor Workflow
Aug 6th, 2026 · Aug 2026
· source
· release history
+Centralized Notification SystemshippedReplaces scattered emails with a priority-tiered pipeline that bundles actionable items into periodic digests.1 release · first seen Jun 2026▸
Also counts toward: Scheduled jobs
release
Compyl Notification System (CNS) replaces scattered emails with a priority-tiered pipeline bundling actionable items every 10 minutes into a daily digest with deduplicated cards
June 6th, 2026 · Jun 2026
· source
· release history
+Evidence Quality ExaminationshippedAnalyzes control-linked evidence submissions for completeness, relevance, and quality prior to formal review.1 release · first seen Jun 2026▸
release
Evidence Examiner analyzes control-linked evidence submissions for completeness, relevance, and quality before formal review
June 6th, 2026 · Jun 2026
· source
· release history
+Policy Acknowledgement TrackingshippedMonitors and logs the receipt, reviews, and acknowledgments of policies to support audit requirements.1 release · first seen Jun 2026▸
Also counts toward: Administrative audit log
release
Policy Acknowledgement monitoring and logging tracks receipt, reviews, and acknowledgments of policies for audit purposes
June 6th, 2026 · Jun 2026
· source
· release history
+Control Set ManagementshippedEnables in-app creation, editing, and deletion of custom control sets with automatic change tracking for user, action, and timestamp.1 release · first seen Oct 2025▸
release
Enables in-app creation, editing, and deletion of custom control sets with automatic change tracking for user, action, and timestamp
October 17, 2025 · Oct 2025
· source
· release history
+Policy Alignment AssistantshippedUses AI to evaluate policy alignment with control requirements and generates actionable tasks with selectable owners and due dates.1 other source · first seen Mar 2025▸
Also counts toward: Built-in AI assistant
example
Align a policy to a control requirement and generate actionable tasks via AI.$ In Policy Management, click the 'AI' button on a control-linked policy, then click 'Create AI Tasks' to assign owners and due dates.
March 4, 2025 · Mar 2025
· source
+Compliance Overview PaginationshippedImplements paginated results for query outputs and compliance overview screens to manage large datasets.1 release · first seen Jul 2024▸
release
Enabled pagination for all query results (100 per page) and Compliance Overview (20 controls per page)
July 23, 2024 · Jul 2024
· source
· release history
+Granular Dashboard PermissionsshippedRestricts dashboard access to specific users or departments with view-only privileges.1 release · first seen Jul 2024▸
Shared capability: Data access governance
release
Added granular dashboard permissions allowing view-only access at departmental, user, or other levels
July 23, 2024 · Jul 2024
· source
· release history
Lines in monospace are the tool's own words: help text
parsed from its source, or an endpoint from its API document. Under
release, a line is our summary of a dated release. Under
docs, it is quoted from the tool's own documentation or
website. Each links back to the source it came from.
Screenshots
From the release notes, newest first. Click one to see it full size.
Breaking-change disciplinehow rarely a release breaks users, and notice given
Maintenance riskquiet time against its own cadence, maintainers
Innovation & surfacenew capabilities, API and MCP surface
Five scores for Compyl, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.
Each score is 0–100 on a published rubric, derived from data this site already shows.
A dimension we cannot measure says so — it is never scored 0 and never enters a rank.
How this is scored
Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
Documentation quality — the release-notes rubric published on the analytics page, unchanged.
Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.
Release-note detail over time
See how much detail Compyl puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.
What Compyl connects to, runs on and detects, read from its release notes and docs. So far: 12 updated integrations, 3 new integrations.
Show
When
15 changes, tracked since Sep 23, 2026.
Oct 292026
updatedOpenAI API Platform integration expanded data collection
The OpenAI API Platform integration now loads users, projects, API keys, usage, cost, spend limits, data-retention settings, and admin activity when you run Sync All.
updatedGoogle Cloud Platform integration expanded data collection
With Security Command Center, KMS, Secret Manager, Cloud SQL
The Google Cloud Platform integration now collects Security Command Center findings, organization policies, KMS keys, logging sinks, firewall rules, Secret Manager metadata, Cloud SQL instances, storage buckets and IAM, and the org/folder/project hierarchy.
The Workspace ONE integration now collects device compliance status, patch and OS version inventory, disk encryption (BitLocker) status, profile and policy assignments, and enrollment state.
updatedEntra / Azure AD authentication error reporting improved
Improved Entra / Azure AD credential failures, such as an expired secret, invalid tenant, or missing scopes, are now clearly reported as authentication errors, with repeated failures grouped together so you can take action.
Okta , Grafana , CrowdStrike , Axonius , Rapid7 CNAPP , and Atlassian syncs now fail once with a clear error when the base URL is missing or invalid, instead of repeating an invalid request URI error on every call.
updatedAWS SES suppression-list sync rate limiting and log privacy fixed
AWS SES suppression-list syncs no longer fail with Rate exceeded for tenants with large recipient lists, and customer email addresses are no longer written to logs.
updatedAWS integration — six new evidence collection areas
With Config rules and compliance, CloudTrail, Backup, IAM credential reports, Access Analyzer findings, Organizations SCPs
The AWS integration now automatically collects evidence from six new areas: Config rules and compliance, CloudTrail, Backup, IAM credential reports, Access Analyzer findings, and Organizations SCPs.
Nothing first seen in this window. That doesn't mean Compyl shipped nothing, only that we found no record of it.
Changes per month New Updated Retired
2026-09
1
2026-10
14
How we count
Read from 6 of 30 release notes and docs updates we hold for Compyl. "First seen" is the earliest note that names something; "last" is the latest. Our history may start partway through Compyl's life, so an old integration can show a recent first-seen date.
Each change counts once: "added 40 checks" is one line, so the numbers measure how often coverage moves, not how big the catalogue is or how well it detects.
Releases
Show
Coverage in all entries
30 entries
No entries match these filters.
October 20265
September 20264
August 20263
July 20264
June 20261
May 20263
April 20261
February 20261
October 20251
September 20251
May 20251
March 20251
November 20241
July 20242
June 20241
Add the badge to your README
Maintain this project? The badge links readers straight to this page, so they can
follow every release here.