Openlane now includes a unified Registry for tracking vendors, assets, and personnel.

The Registry provides a centralized source of truth for the entities that power your compliance program. Teams can document vendor relationships, associate assets with controls and frameworks, and manage personnel records, all directly connected to evidence and assessments within Openlane.

By linking vendors, systems, and people to your controls and workflows, the registry reduces duplication, improves visibility, and ensures your compliance program reflects how your organization actually operates.

Openlane now supports additional compliance frameworks: FedRAMP Moderate and ISO 42001.

Organizations operating in regulated or AI-governed environments can now map controls, track evidence, and structure programs aligned to these standards directly within Openlane.

Framework support remains modular — teams can enable only what they need and manage multiple frameworks in parallel without duplicating work.

Assessments are now available in Openlane.

Teams can create structured assessments tied to controls and frameworks, assign ownership, collect responses, and track progress over time.

Assessments help operationalize compliance work - whether you’re preparing for an audit, reviewing vendor risk, or validating internal controls. Responses are connected directly to your program, reducing duplicate work and improving visibility across stakeholders.

Today we’re launching the Openlane Trust Center.

The Trust Center gives organizations a structured, customer-facing view of their security and compliance posture. Teams can publish policies and supporting documentation, display framework attestations, and share materials with confidence.

This release includes:

• NDA-gated document access flows
• Customizable branding to match your organization
• Framework attestation displays for supported standards

The Trust Center is modular by design. Use it on its own, pair it with the Compliance Module, or integrate it into your existing workflows.

Trust should reflect real work — not static PDFs.

We’re launching Openlane’s first AI-powered workflows.

Teams can now generate draft policies and get information about controls directly within their compliance program. The goal isn’t to replace expertise and customization, it’s to remove the friction of starting from a blank page and help first-time users with a good starting point.

AI-generated content is contextual to your organization’s structure and always editable, giving you a strong starting point without sacrificing control.

Organizations can now define custom enum values across supported fields in Openlane.

This allows teams to configure status values, categories, and other structured fields to match how they already operate — without reshaping internal processes to fit predefined options.

Openlane is built to adapt to your program, not the other way around.

We’ve redesigned the Openlane homepage to give users immediate clarity when they log in.

The new experience surfaces relevant activity, open tasks, and key compliance metrics so teams can quickly see what needs attention.

The goal is simple: reduce friction and make compliance work easier to navigate.

We’re introducing the Openlane Policy Hub — a curated collection of vetted policy templates designed to help teams move faster.

Instead of starting from a blank page, organizations can now begin with practical, real-world policy foundations and adapt them to their environment.

The templates are maintained openly at https://github.com/theopenlane/policy-hub and are built to be improved collaboratively over time.

We’ve expanded Single Sign-On (SSO) support in Openlane.

In addition to existing providers — GitHub, Google Workspace, Okta, OneLogin, and Slack — organizations can now connect Microsoft Entra ID or any Generic OIDC provider.

This gives teams more flexibility to integrate Openlane with their existing identity infrastructure while maintaining centralized authentication and access controls.

Today we’re launching the Openlane Compliance Module — the foundation for building and managing a structured, sustainable compliance program.

This release introduces controls, programs, evidence tracking, framework mapping, and organizational scoping. Openlane now supports SOC 2, HIPAA, PCI DSS, ISO 27001, NIST CSF, NIST 800-53, and GDPR, allowing teams to manage one or multiple frameworks in a single, connected system without duplicating work.

The Compliance Module is built on top of Openlane’s core security and identity architecture, including:

• Authentication via SSO, social login, passkeys, and traditional credentials
• Support for SSO integrations and MFA enforcement
• Fine-grained permissions
• Group-based access controls
• and more

Compliance is ongoing work, not a point-in-time report, and this module is designed to support the real structure behind your program.