iCompaas Inc changelog www.icompaas.com

New

Launch a secure, centralized Trust Center on your custom domain to share your security and compliance posture, manage compliance documents, and control access for prospective buyers and delegated administrators.

What you can see:

• Custom Domain & Portal Branding — Host your Trust Center on a custom domain with branded logos, favicons, headers, and authentication configuration.
• Granular Document Visibility Controls— Set documents as Public for immediate access or Restricted/Gated to require an access request and administrator approval. Documents can also be enabled or disabled from the portal.
• Delegated Admin Workspace — Allow assigned GRC-OPS delegates to review pending access requests, approve or reject submissions, and revoke previously granted document access.
• Comprehensive Audit Trail & View History — Track access request lifecycles from Pending → Approved / Rejected / Revoked, with date and time records for each action.

Key Benefits:

• Accelerate sales & procurement cycles by enabling enterprise buyers to self-serve public compliance documentation without manual email exchanges.
• Secure Access with Authlee SSO — Authenticate prospective buyers and requesters through Authlee, verify business-domain identities, and provide secure, controlled access to gated compliance documents.
• Protect sensitive compliance documents by keeping high-value reports behind formal access requests and administrator approval.
• Reduce compliance workload through Delegated Admin capabilities, automated email notifications for invitations and approvals, and streamlined access revocation.
• Maintain audit-ready access records with a centralized history of document requests, approvals, rejections, revocations, and access activity.

New

Connect your DigitalOcean account directly to iCompaas to automate asset discovery, security compliance scanning, and evidence collection across your DigitalOcean teams and projects.

What you can see:

• DigitalOcean Provider Card in the Cloud Onboarding dashboard alongside AWS, Azure, GCP, and Utho.
• Automated Personal Access Token Validation to verify authentication and required team permissions during onboarding.
• Team & Project Inventory providing visibility into available projects within your connected DigitalOcean team.
• Dedicated Cloud Accounts Filter to monitor DigitalOcean infrastructure alongside your other cloud environments.

Key benefits:

• Automated Cloud Security Monitoring for supported DigitalOcean resources, including Droplets, Spaces, and Managed Databases.
• Scoped Read-Only Access using DigitalOcean Personal Access Tokens with the required account:read and project:read permissions.
• Unified Multi-Cloud Governance bringing DigitalOcean infrastructure into the same compliance and security workflows as your other cloud environments.
• Centralized Compliance Evidence helping teams maintain consistent visibility and audit-ready evidence across their multi-cloud infrastructure.

DigitalOcean integration brings your cloud projects into iCompaas, providing centralized visibility into security posture, compliance findings, and evidence across your multi-cloud environment.

New

Expand your multi-cloud security coverage with native Utho Cloud support for infrastructure scanning, asset discovery, and automated compliance monitoring.

What you can see:

• Utho Cloud Onboarding Card alongside AWS, Azure, and GCP in the cloud configuration portal for streamlined integration setup.
• Asset Discovery & Inventory providing visibility into compute instances, storage volumes, and network resources hosted on Utho.
• Automated Misconfiguration Detection evaluating Utho cloud resources against configured security and compliance benchmarks.
• Cloud Risk Breakdown highlighting identified issues by severity with actionable remediation guidance.

Key benefits:

• Centralized visibility across cloud environments without requiring custom scripts for Utho Cloud.
• Unified multi-cloud compliance dashboard bringing AWS, Azure, GCP, and Utho Cloud security findings into a single view.
• Continuous security posture monitoring helping identify cloud misconfigurations and security risks as your infrastructure changes.
• Simplified compliance management by bringing Utho Cloud infrastructure into your existing security and compliance workflows.

Utho Cloud support extends iCompaas multi-cloud visibility to regional infrastructure, helping teams continuously monitor security posture and maintain audit-ready compliance evidence.

New

Connect your Okta identity directory directly to iCompaas to automate personnel onboarding tracking, access reviews, and compliance evidence collection.

What you can see:

• Okta Integration Card in the Personnel Onboarding Center for seamless, one-click API setup.
• Unified Personnel Roster that pulls active users, groups, assigned roles, and identity security metrics from Okta.
• Identity & Access Compliance Status showing MFA enforcement, account status, and access permissions for onboarded personnel.
• Secure API Credential Storage to protect Okta integration credentials and support compliant API communication.

Key benefits:

• Eliminate manual employee access audits by syncing personnel data directly from Okta.
• Verify MFA compliance across onboarded team members to support SOC 2 and ISO 27001 compliance requirements.
• Maintain continuously updated personnel and access data as team members join, leave, or change roles.

Okta Integration closes the gap between Identity Management and Compliance, ensuring every user account and credential is continuously audited and compliance-ready.

New

ISO/IEC 27701 is an international standard that introduces a framework for building a Privacy Information Management System (PIMS). It provides clear guidelines and controls to manage Personally Identifiable Information (PII), reduce privacy risks, and demonstrate alignment with global regulations such as GDPR—enabling organizations to build trust, improve compliance readiness, and enhance overall data privacy maturity.

What you can see:

• ISO/IEC 27701 standard now available directly in the platform.
• Automated mapping of existing cloud checks to privacy controls.
• Compliance reports highlighting data processing status and configuration gaps.
• Privacy checklists covering consent, retention, and data handling requirements.
• Step-by-step remediation guidance to resolve privacy control violations.

Key benefits:

• Generate audit-ready compliance reports instantly.
• Eliminate duplicate effort through automated control mapping.
• Strengthen enterprise credibility with recognized privacy standards.
• Accelerate readiness for third-party and regulatory audits.
• Support vendor security assessments with clear compliance evidence
• Simplify management of cross-border data protection requirements.

ISO/IEC 27701 compliance capabilities help organizations streamline data privacy management, ensuring continuous trust with customers and auditors alike.

New

Ensure your databases and infrastructure comply with India's personal data regulations using our new DPDP compliance framework mapping.

What you can see:

• India’s Digital Personal Data Protection (DPDP) Act framework integrated into the dashboard.
• Cloud check mappings aligned with DPDP-specific privacy controls.
• Detailed pass/fail compliance logs highlighting data security gaps.
• Clause-level mapping of the DPDP Act to system checks.
• Dynamic dashboard cards tracking overall DPDP compliance health.

Key benefits:

• Run automated on-demand scans to assess systems against DPDP requirements.
• Quickly remediate privacy gaps with step-by-step guidance.
• Strengthen regional trust by demonstrating adherence to India’s data protection standards.
• Simplify global compliance expansion with pre-built regulatory mappings.

The DPDP compliance module empowers organizations to protect personal data and align confidently with India's privacy regulations with minimal effort.

New

Connect your GitHub, GitLab, and Bitbucket accounts directly in the application to automate security scans and evidence collection for your code repositories.

What you can see:

• A clean onboarding dashboard showing all connected VCS accounts and their latest synchronization times.
• Simple repository selection lists grouped by development organization.
• On-demand scan controls to check repository files for security issues.
• Individual repository cards with compliance passes, failures, and warning counts.
• Easy disconnect actions that instantly clean up synced repository lists.

Key benefits:

• Automate source code audits without manual configuration.
• One portal to manage GitHub, GitLab, and Bitbucket security.
• Retrieve audit-ready reports mapped directly to compliance controls.
• Strengthens code security with credential-free read-only permissions.

VCS Integrations bridge the gap between development and compliance, giving teams continuous audit readiness and automated visibility into code changes without breaking their workflow.

New

Automatically identify and fix compliance issues across your cloud environment.

iCompaas introduces an AI-powered Remediation Assistant that helps you quickly understand and resolve failed compliance controls across AWS, Azure, and GCP. It provides clear, step-by-step guidance so your team can remediate issues without manual research or guesswork.

What you can see:

• Real-time detection of failed compliance controls
• Clear visibility into which checks triggered the failure
• Step-by-step remediation guidance (console, CLI, and policy updates)
• Pre-requisites required before making changes
• Impact insights covering security, cost, and availability
• Built-in rollback instructions for safe changes
• Guidance aligned with iCompaas knowledge and official cloud documentation

Key benefits:

• Fix compliance issues faster with guided actions
• Reduce manual effort and dependency on cloud experts
• Avoid risks with clear impact and rollback visibility
• Stay continuously compliant across AWS, Azure, and GCP
• Prioritize high-risk issues with smarter recommendations

The AI Remediation Assistant helps teams move from detection to resolution quickly and confidently, turning complex compliance tasks into simple, actionable steps.

New

Easily manage and achieve ISO/IEC 42001 compliance for your AI systems.

iCompaas now supports ISO/IEC 42001, the global standard for responsible AI. You can manage your AI systems, track risks, and prepare for certification - "All in one place".

What you can see:

• ISO/IEC 42001 framework available directly in the platform
• Simple mapping of AI systems to required controls
• Ready-to-use controls for AI governance and risk management
• Step-by-step guidance to implement AI compliance
• Pre-built policy templates for responsible AI usage
• Clear view of compliance status and progress
• Fully aligned for audit and certification readiness

Key benefits:

• Reduce manual effort and complexity
• Get audit-ready faster
• Improve trust in your AI systems
• Ensure proper governance and risk management
• Move smoothly towards ISO/IEC 42001 certification

ISO/IEC 42001 helps organizations build secure, reliable, and well-governed AI systems. With iCompaas, you can go from setup to certification in a structured and efficient way.

New

Seamless integration of your workforce for compliance management.

Personnel Integration connects your organization’s user directories from platforms like Office 365, Google Workspace, and Zoho, bringing all employee data into iCompaas for streamlined compliance tracking and accountability.

What you can see:

• Integration with Office 365, Google Workspace, and Zoho
• Centralized view of all employee details in one place
• Visibility into MFA status, including whether it is enforced and enabled
• Automatic syncing of employee data and user updates
• Mapping of users to compliance controls and responsibilities

Personnel Integration replaces manual user tracking with automated visibility and control, helping ensure accurate records, improved security posture, and audit readiness.

Personnel Onboarding dashboard:

User details with MFA status visibility: