Was wir ändern
und wann.

We have redesigned every email devguard sends, from account notifications to product updates, for a cleaner and more consistent experience. The new layout is refreshed and consistent across account and product emails, so every message feels like it comes from the same place.

Emails now render correctly in dark mode, and we have improved their width and spacing for better readability on any device.

You can now collect, organize, and reuse all your compliance evidence directly in devguard. Upload files by drag-and-drop into a central library, organize them by category, and find everything from global search. Each piece of evidence can be mapped to controls and policy sections and linked to the risks, assets, vendors, and actions it supports.

An approval workflow with review cadences keeps your evidence current, and certificates are reassessed automatically before they expire. Evidence also shows up where you already work, from your dashboard and reports to deadlines and the AI assistant.

Vendor documents count as evidence too, so your existing uploads come along for the ride. Evidence is available on every plan, with up to 4 items on Free and unlimited on Business.

This release introduces evidence management and an organization chart, adds more filtering to coverage, and brings a broad round of polish.

• Evidence management: a new library to upload, organize, map, and approve compliance evidence across the app.
• Organization chart: visualize your organization's structure and reporting lines.
• More coverage filtering: focus the coverage view on what matters.
• Friendlier empty states: cleaner, more helpful empty states across lists.
• List view polish: fixed rounded borders and text truncation in the new list views.
• AI Assistant access: the AI Assistant now sits with the main action buttons.
• Dashboard links: dashboard items open the detail view instead of the edit form.
• Reliable dates: dates render consistently, and invalid dates no longer crash date views.
• More searchable: vendor assessments, questionnaires, entitlement reviews, and evidence now appear in global search.
• Organization switching: data now refreshes correctly when you switch organizations.
• Polish: color fields show as swatches, the offline status indicator is hidden, clearer usage settings, better German headings, and a clearer calendar subscription.

This release fixes an edge case during account activation.

• Fixed activation: you no longer see a spurious error when activating an account before joining an organization.

Refreshed login, registration, and error screens, plus tighter account lifecycle control.

• Login & registration refresh: updated login, registration, and error screens.
• User deactivation: deactivate users to keep their records intact while preventing them from logging in.
• User presence: see each user's last-active time and a live online indicator when they're active.

A broad platform update: a redesigned, user-focused dashboard, labels across your records, inline editing, full user lifecycle management, and archival everywhere.

• Dashboard redesign: reworked to focus on what impacts you most, with Recent Activity, My Assignments, quick actions, and surfaced policies and findings.
• Asset assessment matrix: new CIA-triad triangle view to visualise how your assets are assessed.
• Inline editing: edit simple fields straight from the detail view, without opening a separate form.
• Labels: bind labels to risks, assets, and vendors to organise and filter your records.
• Archival: archive policies, assets, risks, vendors, collections, and business roles instead of deleting them.
• On- and off-boarding: start onboarding or offboarding a person straight from the People view.
• Role assignment: assign roles to people directly from the People view.
• Usage in Settings: new "Usage" section showing AI and plan-limit usage across the platform.
• Frameworks table view: new table view for frameworks, plus dedicated framework detail pages.
• CAIQ templates: added CAIQ questionnaires as ready-to-use questionnaire templates.
• Questionnaire import & export: reuse, version, and share question sets across vendors.

Ten new compliance frameworks, cross-mapped to ISO 27001.

• SOC 1 and SOC 2.
• HIPAA.
• Cloud Controls Matrix (CCM 4.1).
• NIST CSF 2.0.
• ISO 27017 and ISO 27018, complementary to ISO 27001.
• Swiss nFADP (revised Federal Act on Data Protection).
• CIS Controls v8.1.
• EU AI Act.
• NIS2 Directive.
• PCI DSS 4.0.1.
• OWASP Top 10 (2025).
• Cross-framework mappings: the new frameworks are linked to ISO 27001, so mapped controls carry across.
• Related controls for unadopted frameworks: related controls now show up even for frameworks you haven't adopted yet.

Build your own assessment questionnaires with the new builder, or import and export them to reuse and version a set of questions across vendors.

Best of all, questionnaires no longer have to be filled out in-house. Send one to a vendor as an external form: no account needed: and their answers flow straight back into the assessment.

The new vendor review then ties it together: review answers, score the assessment, and track outcomes per vendor, all in one place.

Build your own vendor questionnaires from scratch, send them as external forms, and review, score, and risk-rate vendor responses end to end.

• Questionnaire builder: create your own vendor assessment questionnaires from scratch, with support for nested/conditional questions and completeness validation.
• Import & export questionnaires: reuse, version, and share question sets across vendors instead of recreating them each time.
• External form submissions: send a questionnaire to a vendor as an external form they can fill out without a devguard account; answers flow straight back into the assessment.
• Questionnaire invites: generate, send, and manage tokenized invites for external respondents, with expiring invite sessions and rate limiting.
• Vendor reviews: review submitted answers, score an assessment, and track outcomes per vendor, with per-item review tracking.
• Vendor reports: new "Vendors" and "Vendor reviews" report pages with data transforms and export utilities.
• Vendor risk scoring: derive and display per-vendor risk from assessment outcomes.
• Questionnaire templates: refreshed template scaffolding to seed new questionnaires.
• Vendor detail redesign: reorganized into Assessment / Evidence tabs; updated detail, evidence, and dashboard cards.
• Assessment list & creation: new create flow, updated columns, and a dedicated list page.
• Vendor model extended: new vendor fields/types and seed data to support questionnaires, reviews, and review scheduling.