Docs

Appearance

Changelog ​

New features, improvements, and fixes in the Modulos platform.

2026 ​

August 6, 2026 ​

  • added Snowflake joins the Runtime Inspection Sources — connect with an account identifier and programmatic access token to run tests on metrics from your Snowflake data warehouse
  • added Connection health for Sources — the Sources table on Project → Settings → Sources now shows whether each configured Source is Healthy, Broken, Unknown, or Not applicable, checked automatically when you open the page

August 4, 2026 ​

  • added Cyber Resilience Act framework pair (templates 1.0.28) — MFF-26 assesses one AI-enabled product with digital elements across scoping, classification and the conformity route (including the Article 12 high-risk-AI interplay), the cybersecurity risk assessment, the thirteen Annex I product-security properties with risk-based applicability, vulnerability handling and SBOM, the support period, user information, technical documentation, and CE marking; OFF-26 covers the organization's manufacturer capabilities, the Article 14 reporting ladders (applying from 11 September 2026), post-market corrective action, records, and the conditional authorized-representative, importer, distributor, and open-source software steward roles
  • added 22 new CRA Controls, including the two Article 14 reporting-ladder Controls with the 24-hour, 72-hour, and final-report deadlines; 87 further Controls reused from the existing estate, with substantial overlap into ISO 27001, NIS2, DORA, ISO 42001, and EN 18286
  • added Three new tag categories for CRA scoping and navigation — CRA Role, CRA Product Category, and CRA Phase

July 28, 2026 ​

  • changed EU AI Act content verified line by line against the published Digital Omnibus (Regulation (EU) 2026/1744, OJ L, 24.7.2026) — every Digital Omnibus reference now cites the final regulation, and one deadline that changed between the adopted and the published text is corrected: notified bodies already notified under Annex I Section A legislation must apply for AI Act designation by 28 January 2028 (Article 43(3))
  • changed Conformity assessment (Article 43) and post-market monitoring (Article 72) now state both dates that matter — the articles apply from 2 August 2026, while the duties fall due with the deferred high-risk obligations (2 December 2027 for Annex III, 2 August 2028 for Annex I)
  • changed The safety-component boundary is stated exactly as enacted — the exclusion covers the non-safety-related aspects of user assistance, performance optimization, service efficiency, automation or convenience or quality control, and components whose failure or malfunctioning endangers health and safety remain safety components (Articles 3(14), 6(1a)-(1c))
  • added Transitional coverage on the AI System Classification requirement — legacy high-risk systems are caught only if their designs change significantly after the Chapter III dates, and high-risk systems intended for use by public authorities must comply by 2 August 2030 (Article 111(2))
  • changed Precision fixes throughout the EU AI Act frameworks — the Article 25 value-chain written agreement stated as the joint duty of provider and supplier, with the provider and operator obligations under Article 25(2) and (4) added to the Article 99(4) fine tier, authorized-representative duties per Article 54(3), documentation and assessment requests pointed to national competent authorities, and notes on the new Articles 60a and 75(1e)

July 23, 2026 ​

  • changed The read-only project role is now called Viewer (previously Auditor). The rename is a UI label change; the role's permissions are unchanged.

July 6, 2026 ​

  • changed EU AI Act framework updated for the Digital Omnibus (Regulation (EU) 2026/1744, in force from 27 July 2026) — enforcement dates revised across Requirements, with high-risk Annex III obligations applying from 2 December 2027, Annex I product-safety obligations from 2 August 2028, and the new Article 5 prohibitions from 2 December 2026
  • added Two new prohibited practices under Article 5 — AI systems that generate or manipulate non-consensual intimate imagery, and AI systems that generate AI child sexual abuse material
  • added New Article 4a Requirement covering the legal basis for processing special-category personal data to detect and correct bias, at both application and organization level
  • changed Many EU AI Act Requirements renamed to article-anchored titles (for example, "Art. 5 — Prohibited AI practices") so they map more directly to their Article in the Official Journal text
  • changed Rewritten audit guidance for EU AI Act-specific Controls — each now sets out what the regulation requires, key considerations, what would fail the Control, related Controls, and the Evidence an auditor expects
  • changed EU AI Act scoping questionnaire updated for the Digital Omnibus thresholds — guidance revised throughout and the third-party conformity assessment question reworded to ask whether the assessment is required for health and safety reasons (per Article 6(1c); question set and flow unchanged)

July 4, 2026 ​

  • changed ISO 27001, ISO 27701, and ISO 42001 framework overhaul — every Requirement now names its exact clause or Annex reference and summarizes what the clause requires in plain language, with the shared Clauses 4–10 Requirements linking to the matching Requirement in the other ISO standards
  • changed ISO 27001 and ISO 27701 application frameworks restructured to group Annex A Controls under theme and table Requirements (Organizational, People, Physical, and Technological Controls; PII controller, processor, and joint Controls)
  • added Full descriptions, assessment questions, and audit guidance for all ISO 42001 Controls, plus a new Annex A.10.4 Customers Control
  • changed Shared management-system Controls now read naturally under every standard, with a climate-change relevance Control under clause 4.1 of all three per the 2024 amendments
  • changed ISO 27701 updated to the published 2025 edition

June 11, 2026 ​

  • added Risk Quantification timeseries view
  • changed NIS2 & DORA framework templates - legal refactor with new tag scheme

June 9, 2026 ​

  • fixed Org-user role assignment when the user is already a platform user

June 3, 2026 ​

  • added Historical Risk Quantification table
  • added Risk Agent structured output

May 14, 2026 ​

  • fixed Framework project progress calculation

May 5, 2026 ​

  • added Generate Evidence PDF from EU AI Act manual settings scoping
  • added Risk Agent - Past runs historical view
  • added EU AI Act Settings - default tag assignments
  • changed On-demand validation for EU AI Act Settings
  • fixed EU AI Act manual setting - preview warnings unified

May 3, 2026 ​

  • added Manual EU AI Act scoping in Project settings with two-step preview/apply flow
  • added Risk Utilization sortable on Projects list
  • changed Scout Agent - Connector and Source metadata included in LLM context
  • changed Evidence preview - inline image zoom and Fit Width default for PDFs
  • changed Owners list - deactivated-user indicators
  • changed Policy acknowledgement user experience improvements
  • fixed EU AI Act Settings - chip labels, tooltips, and preview counts

April 22, 2026 ​

  • added Associated Controls view inside Policy archive
  • changed Invited-user modal now displays role assignments

April 21, 2026 ​

  • added Filter Controls by linked Policy
  • changed Evidence preview migrated to unified file viewer
  • changed Projects table - new columns, sorting (incl. AI Lifecycle Stage), and persisted column visibility
  • fixed Project compliance progress chart - calculations update

April 19, 2026 ​

  • changed Multiple Project Owners visible in Projects table

April 17, 2026 ​

  • added Lifecycle Stage and Risk Limit columns on Projects table

April 16, 2026 ​

  • added New Project ownership model with multiple Owners at the same time
  • fixed User selection dropdowns now limited to activated Users

April 14, 2026 ​

  • added Risk Quantification time series - "Value Over Time" visualization
  • added Attach Policies as Evidence for Controls
  • added Multi-repository selection in Scout Agent chat
  • added Scout Agent tool to query Policies linked to Controls
  • changed Control status auto-updates when linked Runtime Inspections fail
  • changed Scout Agent UI/UX improvements
  • changed Organizational User Roles UI/UX improvements

April 7, 2026 ​

  • added Possibility to link Policies to Compliance Controls
  • added Policy Acknowledgement history tab in My Tasks
  • changed Policy PDF and content indexing for Scout Agent
  • changed Clearer UX for expired GitHub Connector in Scout Agent
  • changed GitHub Connector automatic reconnection when app is already installed

April 6, 2026 ​

  • changed GitHub Connector migrated from OAuth App to GitHub App to improve performance and usability.
  • added AI Lifecycle Stage field intorduced to Project creation dialog
  • added Risk Quantification scenario analysis and Monte Carlo details
  • added Scout Agent tool to search platform documentation for how-to questions
  • added Vijil metrics search and selection in Scout Agent
  • changed Threat Vector Quantification history improvements
  • changed Shared Controls overlap highlighting on Framework Graph

March 31, 2026 ​

  • added NIS2 Framework (Network and Information Security Directive 2)
  • added DORA Framework (Digital Operational Resilience Act)
  • added Risk and Threat Vector Quantification history view
  • added Export Policy to PDF
  • changed Policy content file management
  • changed Users notification when a new Policy acknowledgment is required
  • changed Risk Quantification results page with full details
  • added Vijil interactive metric endpoint for Runtime Inspection module

March 24, 2026 ​

  • added Upload PDF as Policy
  • changed Policy Owner notification when a Policy renewal is approaching

March 19, 2026 ​

  • added Policy Templates - create Policies from reusable templates with framework mapping
  • added Policy archive
  • changed Custom titles for Scout Agent conversations

March 10, 2026 ​

  • added Policy Center - create, manage, and track compliance Policies
  • added Policy workflow: draft → review → approval → active → archived
  • added Policy comments and activity log
  • added Policy renewal periods and acknowledgements
  • added Policy acknowledgement dashboard
  • added Policy Manager role in organization user management
  • added Scout Agent tools for Policy Center
  • added Risk Agent quantification method
  • changed ISO 27001 and ISO 27701 Control content updates
  • changed GDPR framework Controls updated with tailored guidance

February 13, 2026 ​

  • added Vijil integration as a Source for Scout Agent
  • added Organization-level Controls to enable/disable Sources per organization (today's Organization → Source Connectors page)
  • added Organization-level Controls to enable/disable Connectors per organization (today's Organization → Source Connectors page)
  • changed Scout conversation status and loading improvements
  • changed Scout chat retry mechanism for improved reliability

January 29, 2026 ​

  • added Scout can now use multiple Sources and Connectors simultaneously
  • added User mentions in Scout conversations
  • added AWS Infrastructure Runtime Inspection Source
  • changed Graph visualization enabled in production

January 21, 2026 ​

January 20, 2026 ​

  • added Langfuse Connector as a Tool for Scout Agent

January 14, 2026 ​

  • changed New left side navigation for Platform UI
  • added Copy answer functionality for Scout Agent
  • added Scout Agent can now create Evidence from chat answers
  • added Scout Agent mentions for Runtime Inspection concept
  • added Langfuse Connector as a Source for Runtime Inspection module
  • added Azure Connector as a Source for Runtime Inspection module

January 6, 2026 ​

  • changed Organization Currency added to Scout Agent context

January 5, 2026 ​

  • added Risk Quantification introduced to Scout Agent
  • added Scout Agent context-aware greetings

2025 ​

December 31, 2025 ​

  • added BitBucket Connector as a Tool for Scout Agent
  • changed Google Drive Connector allows for specififc Files selection.
  • changed Risks, Project and Organization descriptions added to Scout Agent context

December 18, 2025 ​

  • added Google Drive Connector as a Tool for Scout Agent
  • changed Scout Agent context enriched with Risk data
  • changed Upgrade of Rich Text Editor

December 12, 2025 ​

  • added GitHub Connector as a Tool for Scout Agent
  • changed Evidence Recommendation Agents quality and performance improvements

December 2, 2025 ​

  • added Connectors and API tokens introduced to new User Settings menu

November 13, 2025 ​

  • added Risk Quantification in Public Preview
  • added Scout Agent in Public Preview
  • changed Clarity consent V2 implementation

October 30, 2025 ​

  • added Support for different Currencies on Organization level
  • added Spanish now available as language for platform UI

October 13, 2025 ​

  • added Risk Quantification in Private Preview
  • changed Scout Agent preserves historical chats

September 15, 2025 ​

  • added Scout Agent in Private Preview

September 10, 2025 ​

  • added French now available as language for platform UI

September 5, 2025 ​

  • added New GDPR Framework

August 27, 2025 ​

  • added German now available as language for platform UI
  • added New ISO 27701 Framework
  • added Tags added to Controls to reflect Controller and Processor roles and scopes

August 26, 2025 ​

  • changed Improved Italian translations

August 18, 2025 ​

  • added Integrations with External Sources (Datadog and Prometheus)

August 11, 2025 ​

  • added Multilanguage support, Italian now available as language for platform UI

May 28, 2025 ​

  • added New Framework OWASP Top10 for LLM released in Private Preview

May 26, 2025 ​

  • added Export of Control to PDF
  • added Export of Project to PDF

May 14, 2025 ​

  • added Framework Management (update of Frameworks in Projects when new version is released)

May 9, 2025 ​

  • added New Framework ISO 27001 released in Private Preview

April 9, 2025 ​

  • added Request of deletion according to GDPR

March 13, 2025 ​

  • added Control Assessment Agent released to Public Preview

March 6, 2025 ​

  • added AI Agents disclaimers added to the platform
  • changed Improved the UX of Tables and Lists

February 7, 2025 ​

  • added EU AI Act Scoping Questionnaire released in Private Preview

January 15, 2025 ​

  • added Free Starter plan introduced to the platform
  • added AI Agents monitoring available via Langfuse

January 3, 2025 ​

  • changed Improved the performance of endpoints in Modulos Client
  • changed AI Agents stability and performance improvements
2024

December 20, 2024 ​

  • changed User invitation flow simplified
  • changed Extended the expiration time of User invitation

December 17, 2024 ​

  • fixed Fixed issue with large PDF processing by AI Agents
  • changed Simplified the UX of Project creation

December 2, 2024 ​

  • changed AI Agents performance and quality improvements
  • added New UI indicators to differentiate User roles

November 27, 2024 ​

  • changed Control Report added to the context of "Evidence Scoring" to improve results
  • added "Control Agent" released in Private Preview

November 13, 2024 ​

  • changed Control Guidance improvements
  • added Role Based Access Control (RBAC) new screen introduced:
    • Overview of User own roles
    • Overview of all User roles across all Projects for Organization Admins

October 30, 2024 ​

  • changed "Evidence Scoring" AI Agent performance improvements
  • added AI Agents documentation

October 23, 2024 ​

  • added "Evidence Scoring" AI Agent released in Private Preview

October 14, 2024 ​

  • fixed Fixed the issue with deleting Projects from the platform
  • changed UI Performance improvements

September 30, 2024 ​

  • changed Performance improvements for the Notifications event stream
  • fixed "Project Not Found" errors resolved

September 26, 2024 ​

  • fixed CSV issues for Evidence upload resolved

September 19, 2024 ​

  • added Introduced Rich Text Editor for Evidence module
  • added Allow to remove relationship between Control and Evidence

September 16, 2024 ​

  • added Evidence manipulation actions are now logged in the audit log
  • changed SEO optimization for the documentation portal

September 4, 2024 ​

  • added Introduced on-the-fly platform version change notification
  • added Introduced unique identifiers for all the Governance concepts

August 27, 2024 ​

  • changed Adjusted default Editor privileges to be able edit Assets
  • added Developer Guide published. Modulos Client is a Python-based library that offers a programmatic interface to interact with the Modulos platform.

August 22, 2024 ​

  • added Capability to export Projects summary to PDF
  • added Introduced expiration times to API Tokens (one hour/day/week/month/year)

August 14, 2024 ​

  • changed Token expiration time for newly invited users reduced to 24 hours
  • added Introduced unique identifiers for all Risks

August 8, 2024 ​

  • added New simplified User Invitation and Management process
  • added Pending User Invitations expire after 7 days
  • added Cancel or Resend any pending User invitation

July 25, 2024 ​

  • added User Deactivation functionality added in User Management

July 18, 2024 ​

  • added Introduced new Rich Text Editor (TipTap) to provide better user experience
  • changed Permission system updated to better reflect governance workflow
  • changed Documentation portal rebranded

July 8, 2024 ​

  • changed Allow Editor role to upload / edit Evidence
  • changed Significant performance improvements