PAGES
← all tools
◆ Compliance Automation & Trust Management

TrustCloud

Salesforce → Jira Customer Sync is now live! commercial

TrustCloud is a compliance and security management platform that automates vendor risk assessments and regulatory compliance monitoring.

source ↗ rss ↗ What is a cyber toolchain?

Summary

TrustCloud is a commercial compliance-automation platform, run as a SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. service, that automates control monitoring, evidence collection, and audit workflows across frameworks like SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria., CMMC, and ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 9001, with support for custom frameworks organizations define themselves. It suits compliance owners and GRCGRCGovernance, Risk, and Compliance — a framework for aligning IT controls with business policy, regulatory requirements, and risk management so organizations can audit and report on their posture systematically. teams managing audit readiness across a growing set of standards, rather than security engineers working at the infrastructure level. The wider TrustCloud family extends this into related workflows: TrustShare for sharing compliance status with customers, TrustRegister for risk management, and AuditLens for audit execution, positioning the platform as a shared system of record spanning compliance, sales, and risk rather than a single-purpose tool. Its documentation describes a hybrid data fabric that unifies fragmented spreadsheets and asset lists into one live view for compliance purposes.

TrustCloud is a compliance and security management platform that automates vendor risk assessments and regulatory compliance monitoring.

How TrustCloud helps

Which of our controls are drifting out of compliance before an auditor finds them?

continuously monitors configured controls against the connected systems and asset lists, flagging any that fall out of the expected state so the gap is closed before evidence is pulled for audit

Which spreadsheets and asset lists actually reflect our current environment?

unifies scattered spreadsheets, user lists, device inventories, and data stores into one live view, so a control's evidence traces back to a current system rather than a stale export

Can we run a framework that isn't SOC 2, CMMC, or ISO 9001?

lets an organization define its own custom framework with tailored controls, mapped alongside the built-in ones so audit-readiness tracking covers requirements the standard frameworks don't

Which of our identified risks have an actual plan behind them, and is it moving?

attaches treatment plans and tasks to each risk, so a risk sitting without a strategy or an owner is visible instead of buried in a register

What should we tell a customer about our compliance posture without another email thread?

publishes current compliance status to a shareable trust page, so the answer to a customer's security questionnaire is a link rather than a fresh document each time

all 5 features, with the evidence for each →

Languages

Not documented

Features

5 capabilities

Built from TrustCloud's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What TrustCloud offers you

All capabilities 5 capabilities
Inventory management shipped Enables users to create and manage inventories of resources such as policies, documents, risks, systems, controls, and teams. 28 releases · first seen Nov 2023

release 28 total

  • Adds id field to the Systems inventory data model Added a number of improvements to the TrustCloud System · May 2025 · source · release history
  • Adds a new Tests inventory to track test artifacts Added a number of improvements to the TrustCloud System · May 2025 · source · release history
  • Enables management of Role Settings within the new Roles V2 interface Released UX changes as part of Roles V2 · Oct 2024 · source · release history
  • Adds dedicated Team Details page for viewing team composition and roles Released UX changes as part of Roles V2 · Oct 2024 · source · release history
  • Updates the Invite New Member flow in Roles V2 Released UX changes as part of Roles V2 · Oct 2024 · source · release history
  • Updates the Edit User flow in Roles V2 Released UX changes as part of Roles V2 · Oct 2024 · source · release history
Risk treatment plans shipped Enables users to define and manage strategies for addressing identified risks, targeting reduction of their impact or likelihood. 13 releases · 3 other sources · first seen Sep 2023

release 13 total

  • Updates Test Evaluation Policy to support customization of test evaluation policy for custom test definitions. Test Evaluation Policy V1 · Apr 2025 · source · release history
  • External Tests V1 is GA now. External Tests V1 is GA now · Jan 2025 · source · release history
  • Adds API support for creating, reading, and deleting custom test definitions in a program space. Update on control assurance workflow · Oct 2024 · source · release history
  • Adds an intuitive, action-driven post-onboarding user interface with clear, actionable tasks for tracking progress toward SOC 2 audit readiness. Post-Onboarding Experience for free SOC 2 Customers · Sep 2024 · source · release history
  • Adds the ability to upload resources to external tests via the TrustCloud API. The TrustCloud API now allows uploading resources to external tests · Jun 2024 · source · release history
  • Users can now remove a risk assessment from the vendor page. User can now remove risk assessments · Jun 2024 · source · release history

docs

  • Treatment plans and tasks Estimated reading: 4 minutes 2059 views On this page Toggle Treatment plans in risk management define strategies to address identified risks. These strategies aim to reduce the impact or likelihood of risks. docs update · Aug 2026 · source
  • Treatment plans and tasks Treatment plans and tasks are components that outline strategies and specific actions to address and manage identified Treatment types Treatment types refer to the various approaches or strategies that organizations use to address and manage identified 2 years ago 5 months ago seen Aug 2026 · source
  • Treatment types Estimated reading: 3 minutes 1596 views On this page Toggle Treatment types in TrustRegister Treatment types define the different strategies organizations use to manage identified risks. seen Aug 2026 · source
Vendor management shipped Allows users to categorize vendors into custom tiers and manage vendor information. 11 releases · first seen Jul 2023

release 11 total

  • Adds Salesforce → Jira Customer Sync for automatic propagation of customer information to Jira Product issues on creation or update Salesforce → Jira Customer Sync is now live! · Jul 2026 · source · release history
  • All mandatory fields defined in your Jira project configuration are now properly retrieved, validated, and submitted during issue creation. Support for required fields when creating Jira tickets from TrustCloud · Jun 2025 · source · release history
  • Adds Inventory Build Pipelines item to the Azure Pipelines integration Updates for the Azure Pipelines Integrations · Sep 2024 · source · release history
  • Added support for ServiceNow integration so that an outdated OAuth connection is refreshed Added support for ServiceNow integration · Jul 2024 · source · release history
  • Display of accountId on the GitHub provider inventory details page. An update for the GitHub provider inventories · Jul 2024 · source · release history
  • Adds a new Create service principal (Multiple Connections) step in the Azure AD integration setup UI to support multiple connections An improvement for the current guide to set up integration for Azure Ad · Apr 2024 · source · release history
Custom compliance frameworks shipped Allows organizations to create and manage compliance frameworks tailored to their own regulatory and operational requirements. 6 releases · 1 other source · first seen Dec 2023

release

  • Adds support for scope-based audit exports An audit export enhancement · Jul 2024 · source · release history
  • Allows frameworks associated with a segment to be updated using the existing route. An update to the segments API · Apr 2024 · source · release history
  • Automates password policy adherence verification for Cloudflare systems, replacing the previous manual self-assessment process Automated tests instead of self-assessment · Mar 2024 · source · release history
  • Adds Jira Data Center as a supported platform, allowing TrustCloud features to work seamlessly for both Jira Cloud and DataCenter. Jira Data Center support · Feb 2024 · source · release history
  • The Procedures feature reaches general availability (GA). The procedures are now GA · Dec 2023 · source · release history
  • Adds the ability to create and manage an inventory of Controls within the TrustCloud system. Updates for TrustCloud system · Dec 2023 · source · release history

docs

  • Custom Frameworks Estimated reading: 7 minutes 2272 views On this page Toggle What are custom frameworks? Custom frameworks allow organizations to create and manage compliance frameworks tailored to their unique regulatory and operational requirements. docs update · Jul 2026 · source
Hybrid data fabric shipped Provides a live map of an organization's digital footprint, representing systems, users, devices, and data stores in TrustOps. 6 releases · 1 other source · first seen May 2023

Also counts toward: Single sign-on, OIDC SSO, SAML SSO

release

  • Adds support for automatic user creation with a default TrustCloud role and optional role mappings for enterprise SSO customers Automatic user creation with a default TrustCloud role and optional role mappings is now allowed · Dec 2025 · source · release history
  • Adds execution steps and logs for GitHub integration An enhancement for GitHub integration · Dec 2023 · source · release history
  • Users can now add a system to integrate easily An update to the integration flow · Dec 2023 · source · release history
  • Adds the ability to create and manage an inventory of Systems within the TrustCloud system. Updates for TrustCloud system · Dec 2023 · source · release history
  • The TrustCloud API is now generally available for use. TrustCloud API is now GA · Jul 2023 · source · release history
  • Adds Enterprise Single Sign-on integration capability for the following identity providers: ADP OIDC, Allthenticate, Classlink, Cloudflare, Cyberark, Google SAML, Keycloak, Microsoft ADFS, miniOrange, NetIQ, Okta, OneLogin, Oracle Cloud, Ping Federate, Salesforce SSO, SimpleSAMLphp, StrongDM and VMWare Workspace One… Enterprise Single Sign-on support for 18 identity providers · May 2023 · source · release history

docs

  • Hybrid Data Fabric Estimated reading: 5 minutes 3143 views On this page Toggle Imagine having a live map of your organization’s digital footprint, with every system, user, device, and data store represented clearly and precisely. That’s what hybrid data fabric in TrustOps brings to life. docs update · Jul 2026 · source

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Screenshots

From the release notes, newest first. Click one to see it full size.

docs update Aug 11, 2026

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface

Five scores for TrustCloud, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail TrustCloud puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Releases

Show

69 entries

  1. September 20261
  3. August 20261
  5. July 20263
  8. March 20261
  10. December 20251
  12. November 20251
  14. June 20251
  16. May 20251
  18. April 20251
  20. January 20252
  22. October 20242
  25. September 20246
  31. July 20246
  38. June 20244
  42. April 20243
  46. March 20244
  51. February 20244
  56. January 20243
  60. December 20236
  67. November 20233
  70. October 20236
  74. September 20234
  79. July 20234
  84. May 20231
    Show

    69 entries

    1. docs update Sep 24, 2026 · issue 084

      TrustCloud adds Application Launchpad with per-app IRA workflow, dynamic control scoping, AI Impact Reports, and consistent CSV export across all views.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

      └──▷ HOW TO FIND IT
      Trigger dynamic control rescoping for an application after updating its IRA answers, so the Mapped Controls page immediately reflects the new scope without opening a support ticket.
      📍In TrustOps, go to Applications › [your application] › Inherent Risk Assessment. Edit answers in the inline side panel, then save. A progress dialog confirms saving responses, recalculating risk scores, and refreshing the assessment before returning you to the updated Mapped Controls view.
      Export a filtered snapshot of an application's findings — including control ID, exception status, and related ticket — to CSV for offline triage or reporting.
      📍In TrustOps, go to Applications › [your application] › Findings. Apply column filters and search as needed, then select CSV export from the table controls to download the current view.
      Review how many scoping rules place each control in scope for an application, and drill into the levers driving a specific control's test set.
      📍In TrustOps, go to Applications › [your application] › Mapped Controls. Check the Scoping Levers column for each control row, then select a control to open the detail view listing each lever and the tests it drives.
      • Adds the Application Launchpad — a single landing page per application under TrustOps > Applications — consolidating findings, controls, tests, risks, exceptions, and tech stack into one context-scoped view instead of global filtered views.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
      • Adds a dedicated Inherent Risk Assessment (IRA) page per application, where answers stored as key-value custom attributes drive dynamic control and test scoping without a support ticket.
      • Adds dynamic scoping: saving IRA answers triggers an immediate foreground recompute of control test scope and risk score, with a progress dialog reporting saving responses, recalculating risk scores, and refreshing the assessment.
      • Adds a Scoping Levers column on the Mapped Controls page showing how many rules place each control in scope, with a drill-in view listing the levers and the tests they drive.
      • Adds a Test Assurance over Time stacked-area chart on the Tests page, with a date-range selector covering past week, past month, past 60 days, past 90 days, past 180 days, and past year.
      +9 more show less
      • Adds an AI Impact Report action (View Impact Report) on the Launchpad attributes panel, producing a written summary scored across four areas: risk, controls, frameworks, and governance.
      • Adds a live semantic relationship graph on the Launchpad, with nodes grouped by dimension (Impact, Governance, Surface, Protection, Tech Stack) that expand in place and support a filter.
      • Adds per-application Exceptions and Mapped Risks detail pages, scoped to the individual application rather than the global view.
      • Adds inherited classification propagation: data classifications set on a tech-stack component are inherited by the parent application and surfaced as Inherited Classification on the top card with the source component named in a side panel.
      • Extends application metadata with four attributes used by scoping rules: Criticality, Deployment Model, Tech Stack, and Data Classification.
      • Adds CSV export, per-column search, filtering, sorting, column visibility controls, and a page-size selector to every Launchpad table (Findings, Exceptions, Mapped Controls, Tests, Mapped Risks, Tech Stack, IRA).
      • Adds a Posture panel to the Launchpad top card showing Residual Risk (0–100 banded score with qualitative label) and Control Assurance (qualitative label plus passing ratio).
      • Adds Tech Stack component tabs by kind (Infrastructure, Applications, Systems, Security Tools, All) with add-from-catalog, remove, and reclassify actions available without leaving the Launchpad.
      • Renames TrustOps Self Assessments to Self Attestations to separate them from Application Assurance assessment terminology.
      • Adds the Application Launchpad — a single landing page per application under TrustOps > Applications — consolidating findings, controls, tests, risks, exceptions, and tech stack into one context-scoped view instead of global filtered views.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
      • Adds a dedicated Inherent Risk Assessment (IRA) page per application, where answers stored as key-value custom attributes drive dynamic control and test scoping without a support ticket.
      • Adds dynamic scoping: saving IRA answers triggers an immediate foreground recompute of control test scope and risk score, with a progress dialog reporting saving responses, recalculating risk scores, and refreshing the assessment.
      • Adds a Scoping Levers column on the Mapped Controls page showing how many rules place each control in scope, with a drill-in view listing the levers and the tests they drive.
      • Adds a Test Assurance over Time stacked-area chart on the Tests page, with a date-range selector covering past week, past month, past 60 days, past 90 days, past 180 days, and past year.
      +7 more show less
      • Adds an AI Impact Report action (View Impact Report) on the Launchpad attributes panel, producing a written summary scored across four areas: risk, controls, frameworks, and governance.
      • Adds a live semantic relationship graph on the Launchpad, with nodes grouped by dimension (Impact, Governance, Surface, Protection, Tech Stack) that expand in place and support a filter.
      • Adds per-application Exceptions and Mapped Risks detail pages, scoped to the individual application rather than the global view.
      • Adds inherited classification propagation: data classifications set on a tech-stack component are inherited by the parent application and surfaced as Inherited Classification on the top card with the source component named in a side panel.
      • Adds CSV export, per-column search, filtering, sorting, column visibility controls, and a page-size selector to every Launchpad table (Findings, Exceptions, Mapped Controls, Tests, Mapped Risks, Tech Stack, IRA).
      • Adds a Posture panel to the Launchpad top card showing Residual Risk (0–100 banded score with qualitative label) and Control Assurance (qualitative label plus passing ratio).
      • Adds Tech Stack component tabs by kind (Infrastructure, Applications, Systems, Security Tools, All) with add-from-catalog, remove, and reclassify actions available without leaving the Launchpad.

      2 more in Everything

      └──▷ BREAKING ON UPGRADE
      • !TrustOps Self Assessments are renamed to Self Attestations; any documentation, integrations, or workflows referencing the old label Self Assessments will need to be updated.
    2. docs update Aug 11, 2026 · issue 042

      TrustRegister adds treatment plan tasks with Jira/ServiceNow linking, budget tracking, and Slack notifications.

      • Adds treatment plan task management in TrustRegister under Action Plan > Treatment Plan Tasks, with fields for task name, owner, group, notes, due date, budget requested, and budget allocated.
      • Supports linking treatment plan tasks directly to Jira and ServiceNow tickets for cross-team tracking of risk remediation work.
      • Enables team collaboration on treatment plan tasks via comments for tracking approvals and managing change.
      • Supports email and Slack reminders for treatment plan tasks.

      4 details in Everything

    3. docs update Jul 31, 2026 · issue 031

      TrustCloud TrustOps gains a Hybrid Data Fabric providing a unified, live compliance data hub across cloud, on-prem, and custom sources.

      └──▷ HOW TO FIND IT
      Attach live data feed records as control evidence to replace manual spreadsheet uploads and give auditors accurate, real-time data.
      📍In TrustOps, go to Controls › [your control] › Tests › Self-Attestation › three-dot menu › Add Evidence › Data Feed Records. Select your data feed source, click Select Records, choose the relevant records, click Proceed, then Add Evidence.
      Request a new custom data feed to bring an unsupported source into the Hybrid Data Fabric for compliance tracking.
      📍In TrustOps, go to the Hybrid Data Fabric page, click Data Feed, enter the data feed name, source, and description, then click Send Request.
      • Adds Hybrid Data Fabric page in TrustOps, giving a centralized view of all ingested data feeds from cloud, on-prem, and custom sources for compliance and security.
      • Supports data feed categories including Alerts, Assets, Access, Background Checks, CI/CD Projects, Data Stores, Employees, Job Listings, Logs, Monitoring, Phishing Attempts, Repositories, Security Training, Users, and Vulnerability Scans.
      • Integrates with tools such as CloudWatch Logs, Datadog, Sumo Logic, Jamf, Jumpcloud, Kolide, Duo, Buildkite, CircleCI, Travis CI, Checkr, RDS, BambooHR, Freshteam, TriNet, Greenhouse, KnowBe4, Bitbucket, Google Auth, Azure AD, Okta AD, and Snyk.
      • Enables using live data feed records directly as audit evidence for controls, with TrustOps auto-generating an evidence report from selected records.
      • Allows requesting new custom data feeds via the Data Feed button on the Hybrid Data Fabric page.

      5 details in Everything

    4. docs update Jul 31, 2026 · issue 031

      TrustCloud adds Custom Frameworks: build, import, and map bespoke compliance frameworks with AI-assisted control suggestions.

      └──▷ HOW TO FIND IT
      Create and populate a custom framework from scratch using the downloadable template and import it into TrustOps.
      📍In TrustOps, go to Custom Frameworks (left-hand menu) › click Create New Custom Framework › enter a name and category › click Download template › fill in Framework Name, Section Name/ID, Subsection Name/ID/Description, and optionally Mapped TrustCloud Control ID › click Import Framework to upload.
      Map existing program controls to a custom framework subsection and use AI suggestions to fill coverage gaps quickly.
      📍In TrustOps, go to Custom Frameworks › select your framework › click a section › click Map program control › review AI-suggested controls from the catalog › search for additional controls and click the plus button to add › click Add to confirm mappings.
      • Adds Custom Frameworks capability in TrustOps, letting organizations define and manage compliance frameworks tailored to unique regulatory or contractual requirements beyond built-in standards like SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. or CMMC.
      • Enables mapping of program controls to custom framework subsections, with AI-generated suggestions from the TrustCloud Common Control Catalog to accelerate coverage.
      • Supports mapping of company policies to framework sections, linking policy governance directly to custom compliance requirements.
      • Custom frameworks integrate platform-wide, appearing alongside standard frameworks and supporting cross-framework control reuse ('test once, satisfy many').

      4 details in Everything

    5. Salesforce → Jira Customer Sync is now live! Jul 9, 2026 · release notes

      TrustCloud v359 adds automated Salesforce to Jira customer info sync for Product issues.

    6. Assessors can now to send existing assessments to new users Mar 19, 2026 · release notes

      TrustCloud version 351 introduces an automated workflow allowing assessors to directly send existing assessments to new users, replacing a previous white-glove process.

    7. Automatic user creation with a default TrustCloud role and optional role mappings is now allowed Dec 19, 2025 · release notes

      TrustCloud 3.4.4 enables automatic user creation with default roles and optional role mappings

    8. The "view raw data" option on automated test reports with a direct download Nov 3, 2025 · release notes

      Adds a view raw data option for automated test reports that provides a direct download link

    9. Support for required fields when creating Jira tickets from TrustCloud Jun 27, 2025 · release notes

      TrustCloud v3.3.1 adds proper support for Jira required fields during ticket creation.

      • All mandatory fields defined in your Jira project configuration are now properly retrieved, validated, and submitted during issue creation.

      1 detail in Everything

    10. Added a number of improvements to the TrustCloud System May 12, 2025 · release notes

      TrustCloud 3.2.5 introduces a new Tests inventory and adds an id field to the Systems inventory.

      • Adds a new Tests inventory to track test artifacts
      • Adds id field to the Systems inventory data model

      2 details in Everything

    11. Test Evaluation Policy V1 Apr 17, 2025 · release notes

      Adds ability to customize test evaluation policies for custom test definitions.

      • Updates Test Evaluation Policy to support customization of test evaluation policy for custom test definitions.

      1 detail in Everything

    12. API support to list all custom test definitions Jan 16, 2025 · release notes

      TrustCloud v3.05 introduces programmatic access to custom test definitions via a new API endpoint.

      • Adds GET /custom-test-definitions endpoint.

      1 detail in Everything

    13. External Tests V1 is GA now Jan 16, 2025 · release notes

      TrustCloud External Tests V1 reaches general availability

      • External Tests V1 is GA now.

      1 detail in Everything

    14. Update on control assurance workflow Oct 31, 2024 · release notes

      TrustCloud adds API endpoints to manage custom test definitions within program spaces.

      • Adds API support for creating, reading, and deleting custom test definitions in a program space.

      1 detail in Everything

    15. Released UX changes as part of Roles V2 Oct 14, 2024 · release notes

      TrustCloud releases Roles V2 UX changes including navigation, Team Details page, Role Settings, and updated invite/edit flows.

      • Introduces Roles V2 UX overhaul with TrustCloud navigation changes
      • Adds dedicated Team Details page for viewing team composition and roles
      • Enables management of Role Settings within the new Roles V2 interface
      • Adds ability to Request a Custom Role through the updated UI
      • Updates the Invite New Member flow in Roles V2
      +2 more show less
      • Updates the Edit User flow in Roles V2
      • Releases My Account Changes as part of the Roles V2 update

      7 details in Everything

    16. Updates for the Azure Repos Integrations. Sep 30, 2024 · release notes

      This release extends the Azure Repos integration with new inventory data for repository policies, enabling visibility into policy configurations.

    17. Enhancement to the import resource custom inventory endpoint Sep 30, 2024 · release notes

      Enhances the import resource custom inventory endpoint to accept mixed data types in TEXT fields.

    18. New ability to enhance control over custom inventory management. Sep 26, 2024 · release notes

      TrustCloud 265 introduces enhanced control over custom inventory management for Compliance Admin and Team Member roles.

    19. Post-Onboarding Experience for free SOC 2 Customers Sep 24, 2024 · release notes

      TrustCloud v268 introduces a new action-driven post-onboarding journey with clear tasks for free SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. customers to track audit readiness.

      • Adds an intuitive, action-driven post-onboarding user interface with clear, actionable tasks for tracking progress toward SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. 2 audit readiness.

      1 detail in Everything

    20. Updates for the Azure Pipelines Integrations Sep 16, 2024 · release notes

      TrustCloud 2.81 adds a Build Pipelines inventory entry to track Azure pipeline resources.

    21. Eenhancement to the custom inventory import resource endpoint Sep 13, 2024 · release notes

      TrustCloud v2.84 adds support for custom delimiters in the custom inventory import resource endpoint.

    22. API error while accessing Inventory page Jul 31, 2024 · release notes

      TrustCloud 24.0 improves inventory resource population.

      • Improves population of missing resources for Inventories.

      1 detail in Everything

    23. Added support for ServiceNow integration Jul 30, 2024 · release notes

      TrustCloud v23.4 adds ServiceNow integration and refreshes stale OAuth connections.

      • Added support for ServiceNow integration so that an outdated OAuth connection is refreshed

      1 detail in Everything

    24. Registered trademarks have been added Jul 16, 2024 · release notes

      TrustCloud v2.5 updates the UI app switcher and logo assets to include registered trademark symbols.

      • Adds ® symbols to the app switcher dropdown to indicate registered trademarks.
      • Includes registered trademark indicators on all application logos within the UI.

      2 details in Everything

    25. An update to the TrustCloud API Jul 12, 2024 · release notes

      TrustCloud v223 enables Inventory Instance Id usage across all Inventory V2 API endpoints.

      • All Inventory V2 API endpoints now accept and process requests using the Inventory Instance Id parameter.

      1 detail in Everything

    26. An update for the GitHub provider inventories Jul 4, 2024 · release notes

      TrustCloud v219 displays accountId on the GitHub provider inventory details page.

    27. An audit export enhancement Jul 1, 2024 · release notes

      TrustCloud 2.1.5 adds scope-based audit export capability

    28. The TrustCloud API now allows uploading resources to external tests Jun 18, 2024 · release notes

      TrustCloud API now supports uploading resources to external tests.

    29. Implementation of assets inventory for Tenable integration Jun 18, 2024 · release notes

      TrustCloud v209 adds implementation of assets inventory for Tenable integration

    30. User can now remove risk assessments Jun 13, 2024 · release notes

      TrustCloud adds ability to remove risk assessments for vendors.

      • Users can now remove a risk assessment from the vendor page.

      1 detail in Everything

    31. The risk assessment frequency option now has two more frequencies added Jun 8, 2024 · release notes

      TrustCloud adds Every two years and Every three years to risk assessment frequency options.

      • Adds Every two years as a selectable option for the Risk Assessment frequency setting.
      • Adds Every three years as a selectable option for the Risk Assessment frequency setting.

      2 details in Everything

    32. An improvement for the current guide to set up integration for Azure Ad Apr 23, 2024 · release notes

      TrustCloud v18.2 adds a Create service principal (Multiple Connections) step to the Azure AD integration guide

    33. The "One Test Report" (Unified Testing) is released Apr 18, 2024 · release notes

      TrustCloud introduces the One Test Report feature for unified testing.

      • Adds the One Test Report (Unified Testing) capability to allow comparisons between Automated tests, Self-assessments, and External tests.

      1 detail in Everything

    34. An update to the segments API Apr 4, 2024 · release notes

      Segments API now supports updating associated frameworks via the existing endpoint.

      • Allows frameworks associated with a segment to be updated using the existing route.

      1 detail in Everything

    35. Support for PingIdentity Integration Mar 26, 2024 · release notes

      TrustCloud v169 adds support for PingIdentity integration.

      • Adds PingIdentity integration with additional automation tests.

      1 detail in Everything

    36. As part of the Wiz integration, implementation of more inventories Mar 25, 2024 · release notes

      TrustCloud adds vulnerability-findings, cloud-configuration-findings, issues, network-exposure, and projects inventories as part of Wiz integration.

      • Implements vulnerability-findings inventory
      • Implements cloud-configuration-findings inventory
      • Implements issues inventory
      • Implements network-exposure inventory
      • Implements projects inventory

      5 details in Everything

    37. Bulk upload workflow added Mar 15, 2024 · release notes

      TrustCloud v163 introduces a bulk upload feature within the Add People workflow, enhancing efficiency for managing employee records.

    38. Automated tests instead of self-assessment Mar 2, 2024 · release notes

      TrustCloud 159 automates password policy adherence tests for Cloudflare systems

    39. The GitLab provider integration Feb 26, 2024 · release notes

      TrustCloud adds GitLab provider integration with support for all or selected groups.

    40. The ability to upload a new user photo through the account summary Feb 16, 2024 · release notes

      Adds ability to upload a new user photo through the account summary UI

    41. An ability to upload a CSV file as evidence Feb 13, 2024 · release notes

      Adds CSV file upload capability as evidence in TrustCloud

      • Supports CSV file type as evidence for multi-evidence submissions

      1 detail in Everything

    42. Jira Data Center support Feb 2, 2024 · release notes

      TrustCloud v13.3 adds seamless support for Jira Data Center alongside Jira Cloud

    43. Capability to execute external test through TrustCloud API. Jan 25, 2024 · release notes

      TrustCloud adds capability to execute external tests via its API.

      • Enables execution of external tests through the TrustCloud API.

      1 detail in Everything

    44. Integration credentials are stored in AWS SSM Jan 20, 2024 · release notes

      TrustCloud 12.4: AWS SSMAWS SSMAWS Systems Manager, an Amazon service that lets operators manage EC2 instances and on-premises servers without opening inbound ports, replacing SSH with API-driven session and command execution. credential storage and auto-detected integration tiers

      • Auto-detects the tier for integrations instead of defaulting to the standard tier

      1 detail in Everything

    45. Released the support for Deel integration. Jan 9, 2024 · release notes

      TrustCloud adds a new Deel integration to automate Employees inventory.

    46. An enhancement for GitHub integration Dec 22, 2023 · release notes

      TrustCloud 11.1 enhances GitHub integration with better logs and test result population.

      • Adds execution steps and logs for GitHub integration
      • Improves population of test results for system-related tests

      2 details in Everything

    47. The procedures are now GA Dec 16, 2023 · release notes

      TrustCloud moves Procedures from preview to General Availability.

    48. An improvement for displaying an Info icon and content in the Popover component in Glide Dec 8, 2023 · release notes

      TrustCloud 10.5 improves Info icon and content display in Glide Popover component

    49. An update to the integration flow Dec 7, 2023 · release notes

      TrustCloud 10.4 introduces an easier system integration workflow

      • Users can now add a system to integrate easily

      1 detail in Everything

    50. Updates for TrustCloud system Dec 4, 2023 · release notes

      TrustCloud adds support for tracking Controls, Policies, Documents, Systems, and Risks inventories

      • Adds the ability to create and manage an inventory of Controls within the TrustCloud system.
      • Adds the ability to create and manage an inventory of Policies within the TrustCloud system.
      • Adds the ability to create and manage an inventory of Documents within the TrustCloud system.
      • Adds the ability to create and manage an inventory of Systems within the TrustCloud system.
      • Adds the ability to create and manage an inventory of Risks within the TrustCloud system.

      5 details in Everything

    51. An automated test for Okta System Dec 1, 2023 · release notes

      TrustCloud v9.5 adds an automated test for the Okta System on the User access review control

    52. An enhancement for Heroku integration Nov 29, 2023 · release notes

      TrustCloud 97 adds execution steps, logs, and error handling to Heroku integration testing

      • Adds execution steps for Heroku system-related tests in the integration workflow
      • Adds execution logs visibility for Heroku integration test runs
      • Adds population data to Heroku integration test results
      • Adds explicit error handling mechanisms for Heroku systems related tests

      4 details in Everything

    53. An enhancement for Google Workspace integration Nov 29, 2023 · release notes

      Enhanced Google Workspace integration with execution steps, logs, population data, and improved error handling.

      • Includes populations in test results for Google Workspace checks
      • Improves error handling for system-related tests in Google Workspace integration

      2 details in Everything

    54. An enhancement on the hacks page Nov 27, 2023 · release notes

      Adds a searchable table view to the Hacks page for teams.

    55. Added lazy loading to the standards tab Oct 27, 2023 · release notes

      Adds lazy loading to the TrustCloud standards tab for faster page performance

      • Added lazy loading to the standards tab in an attempt to speed up the page

      1 detail in Everything

    56. Added hover effect to Customers Impacted card Oct 27, 2023 · release notes

      TrustCloud v8.0 adds a hover interaction on the Customers Impacted card to navigate directly to the Risks tab.

    57. Improved navigation between applications and teams is GA now. Oct 27, 2023 · release notes

      App switcher for navigating between applications and teams reaches GA.

    58. An ability to edit a programmatic template is added Oct 14, 2023 · release notes

      Adds the ability to edit programmatic templates in TrustCloud

    59. The ability to track and assess risk in TrustCloud Oct 5, 2023 · release notes

      TrustCloud v49 introduces vendor tiering, programmatic assessment template management, and in-app risk assessment workflows.

      • Users can categorize vendors into custom tiers.
      • Upload or create assessment templates programmatically.
      • Send assessment requests and complete risk assessments within TrustCloud.

      3 details in Everything

    60. An issue with password validation on "Reset Password" form is fixed Oct 5, 2023 · release notes

      This release includes a bug fix for password validation. No new cyber tooling capabilities are documented.

    61. Two new API related to risks are released Sep 29, 2023 · release notes

      TrustCloud adds /risk-treatment-types and /reporting-group APIs for risk management

      • Adds the /risk-treatment-types API endpoint for interacting with risk treatment types.
      • Adds the /reporting-group API endpoint for managing reporting groups.

      2 details in Everything

    62. API was missing pagination Sep 26, 2023 · release notes

      TrustCloud 4.2 adds pagination to the previously unpaginated API endpoints.

      • /test API endpoint now supports pagination parameters to manage large result sets.

      1 detail in Everything

    63. An API to support downloading an uploaded policy or policies Sep 22, 2023 · release notes

      Adds API to download uploaded policies as PDF

    64. "Evidence Description" Now Visible via Slack Sep 12, 2023 · release notes

      TrustCloud now surfaces the Evidence Description in Slack notifications and tasks for Evidence Refresh.

    65. Enhanced integrations MalwareBytes systems Jul 28, 2023 · release notes

      TrustCloud 16 adds detailed visibility into business logic, API methodology, and endpoints for integrations.

    66. Partner Branding now available Jul 20, 2023 · release notes

      TrustCloud adds Partner Branding so partners see their own branding for client use.

      • TrustCloud partners can now see their own branding when using TrustCloud products for their clients

      1 detail in Everything

    67. TrustCloud API is now GA Jul 20, 2023 · release notes

      TrustCloud API reaches general availability for programmatic ecosystem access.

      • The TrustCloud API is now generally available for use.

      1 detail in Everything

    68. A new central TrustCloud application has been launched. Jul 17, 2023 · release notes

      Launch of the central TrustCloud application featuring people workflows, account setup, notifications, and vendor info.

    69. Enterprise Single Sign-on support for 18 identity providers May 4, 2023 · release notes

      TrustCloud introduces Enterprise Single Sign-on, allowing customers to connect with their identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. using SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. or OpenID ConnectOpenID ConnectOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. and login using SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. credentials.

      • Adds Enterprise Single Sign-on integration capability for the following identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.: ADP OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user., Allthenticate, Classlink, Cloudflare, Cyberark, Google SAML, Keycloak, Microsoft ADFS, miniOrange, NetIQ, Okta, OneLogin, Oracle Cloud, Ping Federate, Salesforce SSO, SimpleSAMLphp, StrongDM and VMWare Workspace One SSO

      1 detail in Everything

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    compare.md

      Free the public facts, no sign-in Any paid plan all other sections Researcher & Business pricing history and category rank

      my-toolchain — 0 tools

        Betas, release candidates and previews. Turn it off to see final releases only. It also applies to changes you ask for over MCP when you're signed in.
        browse all tools → score card for your toolchain →
        cyber-toolchain / feedback

        Send us feedback