Release Notes - 2025-OCT-09
Early access
Multi-step approvals on tasks
The task approval feature is in early access (EA)!
This feature allows compliance managers to automate and orchestrate the review and approval of proof collected in tasks, eliminating manual and ad hoc processes required today.
Capabilities include:
Multi-step sequential or parallel approvals (up to 6 steps).
Approval completion rules: Everyone (all), minimum required (n of m).
Ability to select organization users as approvers.
Ability to select user fields from the task as approvers. This dynamically populates the approval when it's created based on the field value. For example, you might have a custom field named 'Proof Reviewer' on the task and choose it to be used by reference when the approval step is created.
Approval notifications via email to approvers, enabling direct access to the review and approval experience.
A tailored experience for the approval, including the ability to leave comments, as well as to approve or request changes.
Approval automation can be used with the task auto-close automation feature (see below) to close the task when the approvals are successfully completed.
See Approvals in the Help Center.
Known limitations for this release:
Approvers need to have at least the object-level role of contributor on the task. This is commonly the case as compliance team members reviewing and approving the task have contributor permissions on the parent control.
To test a scenario where the approvers are not contributors through inheritance, you can add them directly to the task facepile as a contributor (or manager).
The task assignee does not receive an email notification when a change is requested during an approval round. The task is returned back to them with the status of 'In progress' so they can address any feedback and resubmit. Email notifications will be generated as a part of the general access (GA) release.
Comments from approvals aren't recorded in the task's Activity Feed. In EA, approval comments can be found in the approval history.
In Grid view, canceled and closed approvals don't appear the 'Closed' column.
When a new approval round is started, the previous round's incomplete approvals aren't canceled. For this release, these obsolete approvals can be canceled manually from the approval.
Contact your Customer Success Manager and/or Account Manager for more details.
Task auto-close automation
Task auto-close automation is in early access!
Added support for a new automation feature that enables tasks to be closed automatically when submitted. This is useful in situations where, as a compliance manager, you don't want to review and manually close tasks as they are submitted, but rather review the evidence gathered as a part of an audit.
This is a per task configuration, enabling selective usage.
Global search
New entities available in the global search feature for early access users. Users can now search across: Audits, Controls, Labels, Programs, Requests, Requirements, Issues, Tasks, Evaluations, Risks, Vendors, and Policy Versions.
Index update improvements. The search index is now responsive to changes in a user's organization, with changes appearing in search in ~5 min. Previously, Hyperproof checked for changes every 4 hours.
Hierarchical scopes
Hierarchical scopes is in early access! Users can now transform flat list scopes into a flexible, multi-level structure that mirrors how their organization actually operates (e.g., Org > Region > Product). Control operations are scaled without duplication, manual work‑arounds, or loss of accountability, and managers can move effortlessly between high-level oversight and detailed reporting.
Added a 'Hierarchy' tab in Settings > Scopes. From this tab, administrators can create and edit regular scopes and hierarchical scopes.
Added a 'Custom fields tab' in Settings > Scopes. Administrators can still access custom fields via Settings > Custom fields. This new 'Custom fields' tab was created for easier access.
Functionality available:
Create a child scope (hierarchical scope)
Link and unlink a child scope to/from a control
Edit a child scope (including changing owner, assigning membership, etc)
Toggle between single select mode and select node+children
Search and filter scopes by owner/member (same as current functionality)
View scope assignment controls on a control (same as current functionality, now with hierarchical scope support)
Group scope assignments by custom fields
Select, view, and edit a scope or a hierarchical scope
New for hierarchical scopes → Users can only make changes to scope assignment controls they have access to.
Scope assignment controls can be edited to be different than the parent control as well as other scope assignments for the same parent control
See Working with hierarchical scopes in the Help Center.
Known limitations for this release:
The archiving functionality is temporarily disabled, but will be back fully before GA.
Description, ID, and Domain are editable now, but won't be soon (they're supposed to roll down from the top level parent control).
Contact your Customer Success Manager and/or Account Manager for more details.
Added
'Links' tab
Added support for a new 'Links' tab in the controls, labels, and access reviews modules to make it easier to visualize, explore, and manage compliance relationships. This change moves related links from the bottom of the Details tab, elevating them to the top level navigation for the object, making them easier to discover and navigate to.
This new place will have a dropdown style selector to choose the object that you want to focus on as well as a new grid layout with enhanced capabilities, including: the ability to filter and take bulk actions like Unlink and manage Membership.
Permissions and facepiles on questionnaires
Added facepiles to questionnaires so each questionnaire has its own permissions.
Vendor register members receive inheritance on questionnaires:
Members of the Vendor register who are managers inherit manager permissions on questionnaires.
Members of the Vendor register who are contributors inherit contributor permissions on questionnaires.
Members of the Vendor register who are limited access users (viewers) inherit viewer permissions on questionnaires.
Users do not need to be added to the Vendor register to be added to a questionnaire.
To send a questionnaire, a user must be both a member of the Vendor register and of the questionnaire.
See Adding a user to a questionnaire in the Help Center.
Improved
Hypersyncs and integrations
New! Hypersync for Coupa. Proof types include:
List of Users
List of Suppliers
List of Entities
See Coupa proof types in the Help Center.
Updated! Hypersync for Palo Alto Prisma Cloud.
Added a new field to the List of Policies proof type: Multi-select Filtering
Updated! Hypersync for ServiceNow.
Added a new proof type: List of Assets
Updated! Hypersync for Entra ID.
Added a new proof type: List of Subscriptions
Added a new field to the List of Groups proof type: Permissions.
Updated! Hypersync for Crowdstrike.
Added a new field to the Prevention Policies proof type: Details
Note for AWS administrators who use a policy - Added
s3:GetBucketLocationto the permissions JSON. This new S3 permission is required for all users to run S3 related syncs.
Addressed issues
Fixed an issue where clicking outside of a text widget resulted in a loss of changes. (No case number)
Fixed an issue where multi-select custom field values were not listed alphabetically. (Case # 00010481)
Fixed an issue that caused duplicate events in request Activity Feeds. (Case # 00010413)
Fixed an issue that, when sorting labels by freshness, the sort function did not work correctly. (Case # 00010670, 00010617, 00010556)
Fixed an issue that prevented Hypersyncs from being paused. (Case # 00010577)
Fixed a load time error with Confluence proof uploads. (Case # 00010602)
Fixed an issue that caused orphan controls not to display when the user clicked the 'Orphaned' link. (Case 3 00010654)
Fixed an issue with Automated Control Testing where the version of proof tested sometimes didn't match the version displayed in the test results if a new version of proof had been collected. The data was evaluated correctly but displayed incorrectly in the test results. (Case # 00010669)
Fixed an issue in the Labels module that caused the program ID to be displayed rather than the program name. (Case # 00010671)
Fixed an issue where filtering on a user picker custom field in the Labels module did not work correctly. (Case # 00010821, 00010671)
Fixed an issue where the 'next repeat date' for a repeated task was incorrectly displayed. (Case # 00010690)
Fixed an issue where controls with linked proof showed incorrect proof count when exported to an Excel file. (Case # 00010687)
Fixed an issue that caused an incorrect tooltip to appear when hovering over the 'Link controls' and 'Create new controls' buttons in the requirements tree view. (Case # 00010749)
Fixed an issue where a repeating task created a new task, triggering a notification to the assignee, but the notification incorrectly identified the person assigning the task. (Case # 00010724)
Fixed an issue where incorrect task activity was generated. (Case # 00010724)
Fixed an issue that caused the incorrect number of labels in a program to show in the program overview card. (Case # 00010764)
Fixed a latency issue. (Case # 00010786)
Fixed a latency issue in the request details area. (Case # 00010786)
Fixed a latency issue in the Work items > Tasks area. (Case # 00010800)
Fixed an issue in Work items > Task filter by domain that caused an unexpected error which prevented users from viewing tasks. (Case # 00010813, 00010812)
Fixed an issue that caused task integration syncing to run once a day instead of every 5 minutes. (Case # 00010810)
Fixed an issue that caused task notifications to be sent after the task due date. (Case # 00010704)
Fixed a latency issue dealing with proof in the Requests and Tasks areas. (Case # 00010786)