PAGES
← all tools
◆ Compliance Automation & Trust Management

Compyl

Oct 29th, 2026 commercial

Summary

Compyl is a commercial compliance-automation platform, run as a hosted service, that organizes governance, risk, and compliance work around policies, assets, contracts, clients, audits, and forms, with an Evidence Studio for turning ingested data into a view of current GRCGRCGovernance, Risk, and Compliance — a framework for aligning IT controls with business policy, regulatory requirements, and risk management so organizations can audit and report on their posture systematically. and security posture. It is built for compliance and audit-readiness teams who need to map controls to evidence rather than track them in spreadsheets, and it leans on integrations with systems like Azure, ServiceNow, Okta, GitHub, and Google Workspace to pull evidence automatically instead of requiring manual collection. Its tag set and structure place it in the control-mapping and audit-readiness space alongside other GRC platforms, distinguished by how deeply it wires into existing IT and identity systems. Launched in 2020 and still shipping releases roughly every couple of weeks, with its latest just over two weeks old, it is under active development.

How Compyl helps

Which of our controls have no evidence linked to them ahead of an audit?

checks each control record against its linked evidence and artefacts and lists the ones an auditor would find empty

Which policies are overdue for their scheduled review?

tracks each policy's update schedule and flags the ones past their review date

Which contracts are coming up for renewal and who owns them?

reads owner and expiry fields across the contract register and surfaces the ones approaching expiry, so cost or risk conversations happen before renewal

Which of our cloud and SaaS controls can we evidence automatically versus manually?

pulls role assignments, access packages, compliance policy status, and backup records directly from connected systems like Azure and ServiceNow, replacing manual collection for those controls

Where is a given asset exposed through vendors, contracts, or open risks?

follows the links from an asset record out to whatever vendors, contracts, risks, or people are attached to it, showing the full chain in one view

How confident should we be in AI-drafted answers to a vendor questionnaire?

matches each generated answer to the configured option set and attaches a confidence score, flagging low-confidence answers for manual review before they go out

all 46 features, with the evidence for each →

Languages

Not documented

Features

46 capabilities

Built from Compyl's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

  • Compyl covers 1 of the 8 data discovery and protection capabilities we track.
  • Compyl covers 1 of the 11 endpoint investigation and controls capabilities we track.

What Compyl offers you

  • Administrative audit log3
  • Built-in AI assistant2
  • Scheduled jobs2
  • CI/CD pipeline integration1
  • Natural-language query1
  • REST API1
  • SAML SSO1
  • Single sign-on1
  • Ticketing integration1
All capabilities 46 capabilities
Incremental Data Sync shipped Switches synchronization processes from full rebuilds to incremental updates to reduce latency and API usage for large datasets. 15 releases · 1 other source · first seen Jun 2024

Also counts toward: CI/CD pipeline integration

release 15 total

  • Staggers overnight integration syncs to start gradually instead of all at once, reducing database load during high-volume sync windows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Compyl screenshot Sep 23rd, 2026 · Sep 2026 · source · release history
  • Switches Google Workspace Drive file syncs from full rebuilds to incremental syncs, reducing sync time and API usage for large Drive environments. Sep 15th, 2026 · Sep 2026 · source · release history
  • Switches ServiceNow CMDB syncs from full-table rebuilds to incremental syncs, dramatically reducing sync time for large inventories. Sep 15th, 2026 · Sep 2026 · source · release history
  • Adds Rapid7 InsightCloudSec integration to aggregate discovered packages, vulnerabilities, and resource inventories October 17, 2025 · Oct 2025 · source · release history
  • Adds SentinelOne integration for endpoint detection and response (EDR) data including device status, threat events, and policy configurations October 17, 2025 · Oct 2025 · source · release history
  • Adds JumpCloud integration for user identities, group assignments, MFA settings, and login events October 17, 2025 · Oct 2025 · source · release history

example

  • Connect NetSuite to pull user and device data for vulnerability identification. Enable the NetSuite integration in Compyl Dashboards. May 14, 2025 · May 2025 · source
AI Questionnaire Assistance shipped Uses AI to generate answers for questionnaires and maps them to configured option sets with confidence scoring. 9 releases · 1 other source · first seen Jun 2024

Shared capability: Security baseline assessment

release 9 total

  • Adds answer-mapping in Questionnaire Assist so AI-generated answers are matched to configured option sets (Yes/No/N/A or maturity scales) with a confidence score and manual review flag for low-confidence results. Compyl screenshot Sep 15th, 2026 · Sep 2026 · source · release history
  • Updates Questionnaire Assist to map AI-generated answers to configured answer options with a confidence score instead of free text Sep 15th, 2026 · Sep 2026 · source · release history
  • Questionnaire Assist maps AI-generated answers to configured options with a confidence score instead of free text Sep 15th, 2026 · Sep 2026 · source · release history
  • Improves Compyl.AI to utilize the entire form for text field suggestions including likelihood, impact, owner, and tags October 17, 2025 · Oct 2025 · source · release history
  • Adds AI-Assisted Assessment Automation to generate context-aware responses for questionnaires, assessments, surveys, RFPs, and RFIs. May 14, 2025 · May 2025 · source · release history
  • AI Policy Alignment button on policies linked to controls provides evaluation and improvement suggestions March 4, 2025 · Mar 2025 · source · release history

example

  • Automate compliance questionnaire responses using the new AI feature. Use the 'AI-Assisted Assessment' workflow in the Compyl platform to analyze existing documentation and generate answers for RFPs and RFIs. May 14, 2025 · May 2025 · source
ServiceNow Integration shipped Ingests Service Catalog requests, approval workflows, and CMDB data for continuous compliance evidence. 8 releases · 1 other source · first seen Apr 2026

release 8 total

  • Extends the ServiceNow CMDB connector to support Business Applications, Service Instances, Servers, and their relationships, including custom compliance fields like System ID and PCI/SOX tags. Compyl screenshot Sep 30th, 2026 · Sep 2026 · source · release history
  • ServiceNow CMDB connector now supports Business Applications, Service Instances, Servers, custom compliance fields (System ID, PCI/SOX tags) and their relationships. Sep 30th, 2026 · Sep 2026 · source · release history
  • ServiceNow CMDB connector now supports Business Applications, Service Instances, Servers, custom compliance fields (System ID), and PCI/SOX tags. Sep 30th, 2026 · Sep 2026 · source · release history
  • Adds ServiceNow integration support for Service Catalog Request and Requested Item data, including exception requests and approval workflows Sep 15th, 2026 · Sep 2026 · source · release history
  • Extends the ServiceNow integration to ingest Service Catalog Request and Requested Item data, including exception requests, approval workflows, and related records. Sep 15th, 2026 · Sep 2026 · source · release history
  • Switches ServiceNow CMDB syncs from full-table rebuilds to incremental syncs, dramatically reducing sync time for large inventories. Sep 15th, 2026 · Sep 2026 · source · release history

example

  • Configure ServiceNow CMDB for expanded asset discovery including custom compliance metadata. In Settings > Integrations > ServiceNow, enable 'Business Applications', 'Service Instances', and 'Servers'. Enable 'Custom Compliance Fields' to map System ID and PCI/SOX tags. Sep 30th, 2026 · Sep 2026 · source
Vendor Risk Analytics shipped Generates AI-powered vendor profiles, enriches records with financial signals, and schedules automated data revalidation. 6 releases · 2 other sources · first seen Feb 2026

Also counts toward: Scheduled jobs

release

  • Vendor Vanguard enriches vendor records with financial and organizational signals and surfaces criticality, data-protection posture, and recommended actions in the register June 6th, 2026 · Jun 2026 · source · release history
  • Adds Monday.com integration May 8th, 2026 · May 2026 · source · release history
  • Introduces a dedicated Insights tab on vendor workflows, enabling AI-powered Vendor Insights with automated profile generation for risk, compliance, and financial health. February 19, 2026 · Feb 2026 · source · release history
  • Establishes scheduled refresh cycles that automatically revalidate vendor data every 90 days. February 19, 2026 · Feb 2026 · source · release history
  • Provides new Inline execution of Vendor Insights directly from the Add/Edit Vendor flow with results displayed in a unified dashboard. February 19, 2026 · Feb 2026 · source · release history
  • Adds the Catered Onboarding Agent which converts unstructured inputs (PDFs, DOCX, spreadsheets) into structured system records to surface organizational risk signals during initial setup. February 19, 2026 · Feb 2026 · source · release history

example

  • Vendor analysis: Generate comprehensive AI profiles for specific vendors directly from their workflow without leaving the record. Open the Add/Edit Vendor flow, trigger `Vendor Insights` to view automated risk and compliance profiles on the new `Insights` tab. February 19, 2026 · Feb 2026 · source
  • Initial platform setup: Ingest PDF/DOCX assets and scan vendor risks via the Catered Onboarding Agent without manual entry. Use the Catered Onboarding Agent interface to upload unstructured documents (PDFs, DOCX, spreadsheets) to automatically populate the Risk Register and module registers. February 19, 2026 · Feb 2026 · source
Integration Sync Cancellation shipped Allows users to cancel a queued or running integration sync from the UI, stopping it immediately or cleanly at its next saved step, and marking it as cancelled so a new sync can start right away. 3 releases · 4 other sources · first seen Sep 2025

release

  • Adds the ability to cancel an integration sync directly: a queued sync stops immediately, a running sync stops cleanly at its next saved step, and cancelled syncs are marked as Cancelled so a new sync can start right away.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Compyl screenshot Sep 30th, 2026 · Sep 2026 · source · release history
  • Adds the ability to cancel integration syncs (queued or running) via UI/API, with identity tracking for manual cancellations. Sep 30th, 2026 · Sep 2026 · source · release history
  • Adds the ability to cancel an integration sync directly, stopping queued runs immediately and running ones cleanly at the next saved step. Sep 30th, 2026 · Sep 2026 · source · release history

example

  • Stop a stuck sync in progress without waiting for it to fail or hang. In the Integration Sync Management UI, locate the running/queued sync and click Cancel. Verify the status changes to 'Cancelled' and the requestor is logged. Sep 30th, 2026 · Sep 2026 · source
  • Stop a stuck sync via the UI to allow an immediate retry. In the Integration Syncs list, select the running entry and click 'Cancel'. Sep 30th, 2026 · Sep 2026 · source
  • When a runaway or misconfigured integration sync is consuming resources, cancel it from the UI so a corrected sync can start immediately. In Compyl, go to Integrations > Sync History, locate the queued or running sync, and click 'Cancel Sync'. Sep 30th, 2026 · Sep 2026 · source
  • Monitor query health at a glance in the UI grid. In the Query Builder view, check the grid columns for the program health status (pass/fail) indicators. September 12, 2025 · Sep 2025 · source
Box Integration shipped Collects user, group, file, folder, collaboration, legal hold, retention, classification, and enterprise event data from Box. 5 releases · 2 other sources · first seen Jun 2024

release

  • Adds Box as a new integration, collecting users, groups, files, folders, collaborations, shared links, legal holds, retention policies, classifications, and enterprise events for continuous compliance evidence. Compyl screenshot Sep 22nd, 2026 · Sep 2026 · source · release history
  • Adds Box as a new integration, collecting users, groups, files, folders, collaborations, shared links, legal holds, retention policies, classifications, and enterprise events for continuous compliance evidence.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Sep 22nd, 2026 · Sep 2026 · source · release history
  • Adds Box as a new integration, collecting users, groups, files, folders, collaborations, shared links, legal holds, retention policies, classifications, and enterprise events for continuous compliance evidence Sep 22nd, 2026 · Sep 2026 · source · release history
  • Added Box integration. July 6th, 2026 · Jul 2026 · source · release history
  • New coverage: CIS Benchmarks and CIS Critical Security Controls mapping June 11, 2024 · Jun 2024 · source · release history

example

  • Connect Box to gather continuous compliance evidence including legal holds and retention policies. In the Integrations panel, select 'Box' and authenticate with enterprise admin credentials to sync users, groups, files, folders, collaborations, shared links, legal holds, retention policies,… Sep 22nd, 2026 · Sep 2026 · source
  • Connect Compyl to Box for automated evidence collection. In Settings > Integrations, select `Box` and enter your OAuth credentials. July 6th, 2026 · Jul 2026 · source
Guided Integration Setup shipped Provides a guided, multi-step wizard with live validation and framework-aware defaults for configuring new integrations. 4 releases · 2 other sources · first seen Feb 2026

release

  • Expands the Axonius integration to pull additional asset inventory data, and expands the SentinelOne integration to include blueprints and control mappings for threats, groups, and policies data. Compyl screenshot Oct 20th, 2026 · Oct 2026 · source · release history
  • Adds new integration blueprints for recently onboarded data sources. Oct 20th, 2026 · Oct 2026 · source · release history
  • Add CheckHub configuration flow for guided setup April 30th, 2026 · Apr 2026 · source · release history
  • Replaces the legacy single-form integration setup with a guided, multi-step Integration Configuration wizard supporting granular scoping and live validation. February 19, 2026 · Feb 2026 · source · release history

example

  • Guide users through setting up the new CheckHub connector in the web console. In the console, go to Integrations > Add Integration > CheckHub and follow the configuration flow. April 30th, 2026 · Apr 2026 · source
  • Integration setup: Configure new integrations with guided validation and framework-aware defaults instead of legacy single-form configuration. Navigate to Integrations > New Integration to use the multi-step wizard for scoped access selection and live connectivity validation. February 19, 2026 · Feb 2026 · source
SSO Provider Configuration shipped Applies SSO provider changes immediately at the next sign-in without requiring an application restart. 5 releases · 1 other source · first seen Sep 2025

release

  • SSO provider changes take effect immediately at the next sign-in without requiring an application restart. Compyl screenshot Sep 30th, 2026 · Sep 2026 · source · release history
  • Enables SSO provider changes to take effect immediately at the next sign-in, with no application restart required. Sep 30th, 2026 · Sep 2026 · source · release history
  • Adds instant visibility of upcoming schedule frequency and owners without extra clicks. September 12, 2025 · Sep 2025 · source · release history
  • Adds approver and recipient details to every record in the run history. September 12, 2025 · Sep 2025 · source · release history
  • Enriches audit-ready run records to capture status, ownership, and review context. September 12, 2025 · Sep 2025 · source · release history

example

  • Verify who is accountable for a specific evidence run. In the run history view, locate the approver and recipient details displayed for each record. September 12, 2025 · Sep 2025 · source
Enhanced Query Builder shipped Provides a visual drag-and-drop interface, inline result preview, advanced filtering with SQL syntax, and bulk task creation capabilities. 6 releases · first seen Jul 2024

release

  • Introduces Compliance Trend module showing daily trend lines of Control Set compliance scores for up to 90 days in the Compliance Overview October 17, 2025 · Oct 2025 · source · release history
  • Adds program health pass/fail status indicators directly in the Query Builder grid. September 12, 2025 · Sep 2025 · source · release history
  • Adds a visual drag-and-drop interface for the Query Builder that previews results inline and supports duplicating pre-built queries. November 19, 2024 · Nov 2024 · source · release history
  • Allows creating tasks directly from Query Builder results with bulk approve/decline actions requiring optional or mandatory comments. November 19, 2024 · Nov 2024 · source · release history
  • Added > GETDATE() syntax to Query Builder for post-date filtering July 23, 2024 · Jul 2024 · source · release history
  • Added DISTINCT keyword support in Query Builder for unique records July 23, 2024 · Jul 2024 · source · release history
Evidence Health Recalculation shipped Dynamically re-evaluates evidence health scores based on policy mappings and control scope changes. 4 releases · first seen Aug 2026

release

  • Policies attached to a control now count toward its pass/fail compliance evaluation, and policy mappings linked to a control now factor into the evidence health coverage score, with approved policies improving the score and draft or overdue policies counted as gaps. Compyl screenshot Oct 20th, 2026 · Oct 2026 · source · release history
  • Toggling a Control between In Scope and Out of Scope immediately re-evaluates Evidence Health Aug 27th, 2026 · Aug 2026 · source · release history
  • Toggling a Control between In Scope and Out of Scope immediately re-evaluates Evidence Health, so the health chip and drawer always reflect the current scope instead of showing a stale Unevaluated or No Evidence state Aug 27th, 2026 · Aug 2026 · source · release history
  • Updates Evidence Health scoring to factor in Policy Mappings Aug 6th, 2026 · Aug 2026 · source · release history
GoDaddy Integration shipped Connects to GoDaddy with endpoint validation, letting users selectively enable ingestion of Domains, Orders, and Subscriptions during setup. 2 releases · 2 other sources · first seen Sep 2026

release

  • GoDaddy integration adds endpoint validation for Domains, Orders, and Subscriptions during setup. Compyl screenshot Sep 30th, 2026 · Sep 2026 · source · release history
  • Adds endpoint validation to the GoDaddy integration, letting you individually review and toggle Domains, Orders, and Subscriptions during setup. Sep 30th, 2026 · Sep 2026 · source · release history

example

  • When setting up the GoDaddy integration, use endpoint validation to selectively enable only the asset types your programme needs. In Compyl, go to Integrations > GoDaddy > Setup, then use the endpoint validation screen to individually toggle Domains, Orders, and Subscriptions on or off before completing the connection. Sep 30th, 2026 · Sep 2026 · source
  • Validate specific GoDaddy endpoints before fully activating the integration to review Domains, Orders, or Subscriptions individually. In Settings > Integrations > GoDaddy setup, use the endpoint validation toggle to review and enable/disable Domains, Orders, and Subscriptions. Sep 30th, 2026 · Sep 2026 · source
Inline Entity Creation shipped Allows users to create related entities directly from parent record views without navigating away. 4 releases · first seen Sep 2026

release

  • Extends inline creation to Contracts for Vendors, Clients, Assets, and Tasks. Compyl screenshot Sep 15th, 2026 · Sep 2026 · source · release history
  • Expands inline record creation to Contracts for Vendors, Clients, Assets, and Tasks Sep 15th, 2026 · Sep 2026 · source · release history
  • Adds inline + New buttons on Control records to create Blueprints and Tasks with automatic linking to the parent Control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Sep 15th, 2026 · Sep 2026 · source · release history
  • Adds + New buttons on Control records for creating linked Blueprints and Tasks Sep 15th, 2026 · Sep 2026 · source · release history
Comment Tagging & Notifications shipped Allows @mentioning colleagues in comments with automatic email or Slack notifications and manages notification filters. 2 releases · 2 other sources · first seen Nov 2024

release

  • Adds in-platform @name tagging for comments with automatic email or Slack notifications to mentioned users. November 19, 2024 · Nov 2024 · source · release history
  • Adds timestamped keyword search, sorting, and read/unread filtering for the Notification center. November 19, 2024 · Nov 2024 · source · release history

example

  • Filter notifications to see only unread items from the past week. In Notifications, select 'Unread' filter and sort by Date Descending November 19, 2024 · Nov 2024 · source
  • Tag a colleague in a comment to assign action on a query result. Type '@name' in the comment box on a task or query row November 19, 2024 · Nov 2024 · source
Dashboard Exporting shipped Enables exporting dashboards and risk summaries to PDF, image, and Excel formats for external reporting. 2 releases · 1 other source · first seen Nov 2024

release

  • Dashboard and report definitions now track the tables and columns they reference. Compyl screenshot Oct 20th, 2026 · Oct 2026 · source · release history
  • Enables exporting Dashboards to PDF, Image (PNG/JPEG), and Excel formats from the UI. November 19, 2024 · Nov 2024 · source · release history

example

  • Export a risk summary dashboard for executive reporting. In Dashboard, click Export > Excel / PDF November 19, 2024 · Nov 2024 · source
FAIR Risk Analysis shipped Guides teams through quantitative risk simulation to generate loss estimates and ownership assignments for controls. 2 releases · 1 other source · first seen Jun 2026

release

  • The Decision step in the guided risk flow now suggests a risk treatment based on selected risk attributes. Compyl screenshot Oct 20th, 2026 · Oct 2026 · source · release history
  • FAIR Analysis flow provides a five-step risk simulation outputting minimum, average, and maximum loss estimates plus ALE, ownership, status, and due dates June 6th, 2026 · Jun 2026 · source · release history

example

  • Guide a team through quantitative risk analysis using the new FAIR flow to get loss estimates before creating a record. Initiate the 'FAIR Analysis' flow from the Risk module; complete the five-step identification and simulation to export ALE, ownership, status, and due dates. June 6th, 2026 · Jun 2026 · source
Separation of Duties Enforcement shipped Enforces policy administration rules to prevent the same user from being appointed as both owner and approver. 2 releases · 1 other source · first seen Jul 2026

Also counts toward: Administrative audit log

release

  • Policy administrators can now assign the same person as policy owner and approver, with a required warning, acknowledgment, and business justification recorded in the audit trail. Compyl screenshot Oct 20th, 2026 · Oct 2026 · source · release history
  • Policy Administration now enforces separation-of-duties when reassigning policy owners and approvers. July 6th, 2026 · Jul 2026 · source · release history

example

  • Reassign a policy owner ensuring the same user is not appointed as approver simultaneously. In the Policy Editor, use the 'Policy Administration' reassign flow which enforces separation-of-duties constraints. July 6th, 2026 · Jul 2026 · source
GitHub Security Integration shipped suggested Ingests Dependabot alerts, secret scanning alerts, code scanning alerts, security settings, collaborators, and rulesets. 3 releases · first seen Sep 2026

Suggested capability: Security baseline assessment. This is our guess, not confirmed.

release

  • Expands GitHub integration to cover Dependabot alerts, secret scanning alerts, code scanning alerts, organization security settings (including 2FA status), outside collaborators, and rulesets. Compyl screenshot Sep 22nd, 2026 · Sep 2026 · source · release history
  • Expands GitHub integration to cover Dependabot alerts, secret scanning alerts, code scanning alerts, organization security settings (including 2FA status), outside collaborators, and rulesets Sep 22nd, 2026 · Sep 2026 · source · release history
  • Expands the GitHub integration to cover Dependabot alerts, secret scanning alerts, code scanning alerts, organization security settings (including 2FA status), outside collaborators, and rulesets. Sep 22nd, 2026 · Sep 2026 · source · release history
Global Custom Field Search shipped Enables searching and filtering of custom field values directly in grid views across all major record types. 2 releases · 1 other source · first seen Sep 2026

release

  • Makes custom field values searchable and filterable directly in grid views across Risks, Vendors, Incidents, Contracts, Assets, and Audits. Compyl screenshot Sep 22nd, 2026 · Sep 2026 · source · release history
  • Adds Custom field values searchable and filterable directly in grid views across Risks, Vendors, Incidents, Contracts, Assets, and Audits Sep 22nd, 2026 · Sep 2026 · source · release history

example

  • Filter risks or assets by custom field values to quickly isolate specific compliance attributes. In the Risks grid view, use the 'Custom Fields' filter dropdown to search and filter by specific custom field values across Risks, Vendors, Incidents, Contracts, Assets, and Audits. Sep 22nd, 2026 · Sep 2026 · source
Okta Integration shipped suggested Ingests application entitlements, MFA status, group rules, admin roles, and user lifecycle events from Okta. 3 releases · first seen Sep 2026

Suggested capability: Data access governance. This is our guess, not confirmed.

release

  • Expands the Okta integration to cover application entitlements, MFA enrollment status, group rules, admin role assignments, and user lifecycle events. Compyl screenshot Sep 22nd, 2026 · Sep 2026 · source · release history
  • Expands Okta integration to cover application entitlements, MFA enrollment status, group rules, admin role assignments, and user lifecycle events. Sep 22nd, 2026 · Sep 2026 · source · release history
  • Expands Okta integration to cover application entitlements, MFA enrollment status, group rules, admin role assignments, and user lifecycle events Sep 22nd, 2026 · Sep 2026 · source · release history
Azure Identity and Compliance Integration shipped suggested Collects evidence from Azure Privileged Identity Management, Entitlement Management, Intune, and backup systems. 3 releases · first seen Sep 2026

Suggested capability: Data access governance. This is our guess, not confirmed.

release

  • Extends Azure integration to Privileged Identity Management role assignments, Entitlement Management access packages, Intune compliance policy status, and backup protected items Compyl screenshot Sep 15th, 2026 · Sep 2026 · source · release history
  • Expands the Azure integration to cover Privileged Identity Management role assignments, Entitlement Management access packages, Intune compliance policy status, and backup protected items for automated evidence collection. Sep 15th, 2026 · Sep 2026 · source · release history
  • Azure integration now covers Privileged Identity Management role assignments, Entitlement Management access packages, Intune compliance policy status, and backup protected items Sep 15th, 2026 · Sep 2026 · source · release history
Dynamic Task Assignment shipped suggested Automatically assigns review tasks from query results to specific users based on data fields. 2 releases · 1 other source · first seen Nov 2024

Suggested capability: Data access governance. This is our guess, not confirmed.

release

  • Bulk submit or approve multiple policies in one action from the Security Policies module March 4, 2025 · Mar 2025 · source · release history
  • Enables dynamic ownership to automatically assign review tasks from query results to specific users based on data fields. November 19, 2024 · Nov 2024 · source · release history

example

  • Quickly approve multiple pending policies in one go. Select multiple policies in the Security Policies module list and choose 'Bulk Approve'. March 4, 2025 · Mar 2025 · source
CSV Questionnaire Configuration shipped Enables uploading question sets via CSV with configurable branching logic, default answer mapping, and dynamic column targeting. 3 releases · first seen Jul 2024

release

  • Adds Branch Question Name column to specify which subsequent question a branch should target during CSV upload. July 22, 2024 · Jul 2024 · source · release history
  • Adds DefaultAnswerSet column in the Questions table to store the name of an uploaded CSV answer set as the default answer ID. July 22, 2024 · Jul 2024 · source · release history
  • Adds Branch To column options (Complete, Question, Next Section) to define assessment flow branching when uploading question sets via CSV. July 22, 2024 · Jul 2024 · source · release history
SSO Federation Configuration shipped Supports SAML 2.0 federated Single Sign-On via corporate identity providers such as Azure AD, Okta, and Ping for enterprise customers. 2 releases · first seen Oct 2025

Also counts toward: Single sign-on, SAML SSO

release

  • Added OIDC and SAML configuration field validation for Authentication Provider URI and certificate on save. Aug 25th, 2026 · Aug 2026 · source · release history
  • Adds SAML 2.0 federated Single Sign-On (SSO) for enterprise customers via corporate identity providers such as Azure AD, Okta, and Ping October 17, 2025 · Oct 2025 · source · release history
Bulk Data Import Templates shipped Provides standardized templates for bulk uploading data related to vendors, assets, risks, incidents, and contracts. 1 release · 1 other source · first seen Jul 2024

release

  • Added bulk data upload templates for Vendor Lists, IT Assets, Risks, Incidents, Audits, Clients, and Contracts July 23, 2024 · Jul 2024 · source · release history

example

  • Map CSV columns to custom tenant fields during contract bulk import In the Contract module bulk import wizard, select the custom field mapping options corresponding to your tenant-configured fields. July 22nd, 2026 · Jul 2026 · source
Batch Activity View shipped Displays run history, status, approvers, and report download options for Blueprint batches within the drawer. 1 release · 1 other source · first seen Jul 2026

release

  • Adds Batch Activity view to the Blueprint drawer for viewing run history, status, approvers, recipients, and downloading reports without navigating away July 16th, 2026 · Jul 2026 · source · release history

example

  • Monitor scheduled Blueprint runs and export reports directly from the detail panel. In the Compyl service UI, open the Blueprint drawer for a specific blueprint and select the 'Batch Activity' view tab to see approvers and download reports. July 16th, 2026 · Jul 2026 · source
Blueprint Generation Assistant shipped Uses an AI agent to draft blueprints, control mappings, and SQL queries from natural language descriptions. 1 release · 1 other source · first seen Jun 2026

Also counts toward: Built-in AI assistant, Natural-language query

release

  • Blueprint Building AI agent drafts blueprints from natural language descriptions including SQL queries and control mappings, with schedules configurable for report-only or human attestation June 6th, 2026 · Jun 2026 · source · release history

example

  • Automate blueprint creation for new compliance requirements using natural language input. Use the Blueprint Building `AI agent` to describe systems or data to monitor, which generates SQL queries and attaches relevant controls; configure the schedule output type to 'report-only' or… June 6th, 2026 · Jun 2026 · source
External Auditor Access shipped suggested Grants third-party auditors dedicated, scoped access to review portfolio posture and collaborate on tasks without full platform permissions. 1 release · 1 other source · first seen Jun 2026

Suggested capability: Data access governance. This is our guess, not confirmed.

release

  • External Auditor Portal gives third-party auditors dedicated access while auditees collaborate via Tasks within the main UI June 6th, 2026 · Jun 2026 · source · release history

example

  • Grant an external auditor dedicated access to review portfolio posture without giving them full platform access. Invite the user as an 'External Auditor' to assign them the `External Auditor Portal` role, allowing them to view register visualizations and progress via `Tasks`. June 6th, 2026 · Jun 2026 · source
BitSight Integration shipped Collects security ratings, findings, and related risk data from BitSight. 1 release · first seen Oct 2026

release

  • The BitSight integration now loads ratings, findings, and related BitSight data. Oct 29th, 2026 · Oct 2026 · source · release history
Google Cloud Platform Integration shipped suggested Collects Security Command Center findings, organization policies, KMS keys, logging sinks, firewall rules, Secret Manager metadata, Cloud SQL instances, storage buckets and IAM, and the org/folder/project hierarchy from Google Cloud Platform. 1 release · first seen Oct 2026

Suggested capability: Security baseline assessment. This is our guess, not confirmed.

release

  • The Google Cloud Platform integration now collects Security Command Center findings, organization policies, KMS keys, logging sinks, firewall rules, Secret Manager metadata, Cloud SQL instances, storage buckets and IAM, and the org/folder/project hierarchy. Oct 29th, 2026 · Oct 2026 · source · release history
OpenAI API Platform Integration shipped Collects users, projects, API keys, usage, cost, spend limits, data-retention settings, and admin activity from the OpenAI API Platform. 1 release · first seen Oct 2026

Also counts toward: Administrative audit log

release

  • The OpenAI API Platform integration now loads users, projects, API keys, usage, cost, spend limits, data-retention settings, and admin activity on Sync All.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Oct 29th, 2026 · Oct 2026 · source · release history
Supabase Integration shipped Collects organizations, projects, functions, secrets, custom hostnames, and network restrictions from Supabase. 1 release · first seen Oct 2026

release

  • Compyl adds a Supabase integration that syncs organizations, projects, functions, secrets, custom hostnames, and network restrictions. Compyl screenshot Oct 27th, 2026 · Oct 2026 · source · release history
Workspace ONE Integration shipped suggested Collects device compliance status, patch and OS version inventory, disk encryption status, profile and policy assignments, and enrollment state from Workspace ONE. 1 release · first seen Oct 2026

Suggested capability: Security baseline assessment. This is our guess, not confirmed.

release

  • Compyl adds a Workspace ONE integration that collects device compliance status, patch and OS version inventory, disk encryption (BitLocker) status, profile and policy assignments, and enrollment state.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Compyl screenshot Oct 27th, 2026 · Oct 2026 · source · release history
Custom Fields on Client Records shipped Allows administrators to define and manage custom fields on client records within the Clients module. 1 release · first seen Oct 2026

release

  • Adds custom fields support to the Clients module, enabling administrators to define and manage custom fields on client records.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Compyl screenshot Oct 23rd, 2026 · Oct 2026 · source · release history
API Field Validation shipped Enforces required fields on IT Assets and Tasks API update calls, returning a clear error when required fields such as users are omitted rather than silently clearing data. 1 release · first seen Oct 2026

release

  • The users field is now required on IT Assets and Tasks API update calls; omitting it previously cleared role assignments silently but now returns a clear error. Compyl screenshot Oct 20th, 2026 · Oct 2026 · source · release history
API Key Management shipped Displays the environment's API base URL alongside API keys to enable quick endpoint discovery. 1 release · first seen Oct 2026

release

  • The API Keys page now displays the environment's API base URL for quick endpoint discovery. Compyl screenshot Oct 20th, 2026 · Oct 2026 · source · release history
Association Suggestions shipped Offers auto-suggestions when linking Controls, Risks, and Tasks through association pickers to speed up record linking. 1 release · first seen Oct 2026

release

  • Association pickers for Controls, Risks, and Tasks now offer suggestions to speed up linking. Compyl screenshot Oct 20th, 2026 · Oct 2026 · source · release history
Flat File Integration API shipped Provides V2 APIs for flat file integrations supporting replace, append, parse, update, and delete operations with API key and JWT authentication, returning errors on failed parses without saving partial data. 1 release · first seen Oct 2026

Also counts toward: REST API

release

  • Adds V2 Flat File Integration APIs supporting replace, append, parse, update, and delete operations, with API key and JWT authentication; failed parses return an error without saving partial data.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Compyl screenshot Oct 20th, 2026 · Oct 2026 · source · release history
Task View Persistence shipped Saves view configurations and filter selections across the Board, List, and Approvals views in Tasks so they persist between sessions. 1 release · first seen Oct 2026

release

  • Adds saved views and filter persistence across the Board, List, and Approvals views in Tasks. Compyl screenshot Oct 20th, 2026 · Oct 2026 · source · release history
Asana Vendor Workflow shipped Automates vendor record creation from Asana milestone-stage tickets via a dedicated workflow. 1 release · first seen Aug 2026

Also counts toward: Ticketing integration

release

  • Enables automatic vendor record creation from Asana milestone-stage tickets via the new Asana Vendor Workflow Aug 6th, 2026 · Aug 2026 · source · release history
Centralized Notification System shipped Replaces scattered emails with a priority-tiered pipeline that bundles actionable items into periodic digests. 1 release · first seen Jun 2026

Also counts toward: Scheduled jobs

release

  • Compyl Notification System (CNS) replaces scattered emails with a priority-tiered pipeline bundling actionable items every 10 minutes into a daily digest with deduplicated cards June 6th, 2026 · Jun 2026 · source · release history
Evidence Quality Examination shipped Analyzes control-linked evidence submissions for completeness, relevance, and quality prior to formal review. 1 release · first seen Jun 2026

release

  • Evidence Examiner analyzes control-linked evidence submissions for completeness, relevance, and quality before formal review June 6th, 2026 · Jun 2026 · source · release history
Policy Acknowledgement Tracking shipped Monitors and logs the receipt, reviews, and acknowledgments of policies to support audit requirements. 1 release · first seen Jun 2026

Also counts toward: Administrative audit log

release

  • Policy Acknowledgement monitoring and logging tracks receipt, reviews, and acknowledgments of policies for audit purposes June 6th, 2026 · Jun 2026 · source · release history
Control Set Management shipped Enables in-app creation, editing, and deletion of custom control sets with automatic change tracking for user, action, and timestamp. 1 release · first seen Oct 2025

release

  • Enables in-app creation, editing, and deletion of custom control sets with automatic change tracking for user, action, and timestamp October 17, 2025 · Oct 2025 · source · release history
Policy Alignment Assistant shipped Uses AI to evaluate policy alignment with control requirements and generates actionable tasks with selectable owners and due dates. 1 other source · first seen Mar 2025

Also counts toward: Built-in AI assistant

example

  • Align a policy to a control requirement and generate actionable tasks via AI. In Policy Management, click the 'AI' button on a control-linked policy, then click 'Create AI Tasks' to assign owners and due dates. March 4, 2025 · Mar 2025 · source
Compliance Overview Pagination shipped Implements paginated results for query outputs and compliance overview screens to manage large datasets. 1 release · first seen Jul 2024

release

  • Enabled pagination for all query results (100 per page) and Compliance Overview (20 controls per page) July 23, 2024 · Jul 2024 · source · release history
Granular Dashboard Permissions shipped Restricts dashboard access to specific users or departments with view-only privileges. 1 release · first seen Jul 2024

Shared capability: Data access governance

release

  • Added granular dashboard permissions allowing view-only access at departmental, user, or other levels July 23, 2024 · Jul 2024 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Screenshots

From the release notes, newest first. Click one to see it full size.

Oct 27th, 2026 Oct 27, 2026

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface

Five scores for Compyl, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Compyl puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Coverage

Missing something? Tell us

What Compyl connects to, runs on and detects, read from its release notes and docs. So far: 12 updated integrations, 3 new integrations.

Show
When

15 changes, tracked since Sep 23, 2026.

  • Oct 292026

    updated OpenAI API Platform integration expanded data collection

    The OpenAI API Platform integration now loads users, projects, API keys, usage, cost, spend limits, data-retention settings, and admin activity when you run Sync All.

    Oct 29th, 2026 Source ↗

  • Oct 292026

    updated Google Cloud Platform integration expanded data collection

    With Security Command Center, KMS, Secret Manager, Cloud SQL

    The Google Cloud Platform integration now collects Security Command Center findings, organization policies, KMS keys, logging sinks, firewall rules, Secret Manager metadata, Cloud SQL instances, storage buckets and IAM, and the org/folder/project hierarchy.

    Oct 29th, 2026 Source ↗

  • Oct 292026

    updated BitSight integration expanded data collection

    The BitSight integration now loads ratings, findings, and related BitSight data.

    Oct 29th, 2026 Source ↗

  • Oct 272026

    new Workspace ONE integration

    The Workspace ONE integration now collects device compliance status, patch and OS version inventory, disk encryption (BitLocker) status, profile and policy assignments, and enrollment state.

    Oct 27th, 2026 Source ↗

  • Oct 272026

    new Supabase integration

    The Supabase integration now syncs organizations, projects, functions, secrets, custom hostnames, and network restrictions.

    Oct 27th, 2026 Source ↗

  • Oct 202026

    updated Axonius integration expanded with additional asset inventory data

    The Axonius integration now pulls additional asset inventory data.

    Oct 20th, 2026 Source ↗

Changes per month New Updated Retired
2026-091
2026-1014
How we count

Read from 6 of 30 release notes and docs updates we hold for Compyl. "First seen" is the earliest note that names something; "last" is the latest. Our history may start partway through Compyl's life, so an old integration can show a recent first-seen date.

Each change counts once: "added 40 checks" is one line, so the numbers measure how often coverage moves, not how big the catalogue is or how well it detects.

Releases

Show
Coverage in all entries

30 entries

  1. October 20265
  2. September 20264
  3. August 20263
  4. July 20264
  5. June 20261
  6. May 20263
  7. April 20261
  8. February 20261
  9. October 20251
  10. September 20251
  11. May 20251
  12. March 20251
  13. November 20241
  14. July 20242
  15. June 20241
    Show
    Coverage in all entries

    30 entries

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →