What's new in Aegis SA — major and minor releases, with the fixes and improvements in each. Every release links to its pull requests and commit range on GitHub.
Two provider-experience features on top of 6.0: self-service account recovery, and the ability to reopen a submitted assessment — whole or by specific controls — for re-submission.
password_resets (table), assessment_controls.resubmit_note / resubmit_requested_at, and users.language are applied automatically by the startup migration — no manual step.A major release focused on how Aegis SA communicates: modern-auth email delivery through Microsoft 365, notifications and the end-to-end tutorial fully localized into all 8 languages, organization-branded reports (no country-specific chrome), and clearer AI error handling.
Mail.Send, with no SMTP AUTH, no user sign-in, no refresh token, and no mailbox licence. Configured with GRAPH_TENANT_ID / GRAPH_CLIENT_ID / GRAPH_CLIENT_SECRET / GRAPH_SENDER; startup verification and a one-click "Send Graph test" button in Organization settings. SMTP (basic + OAuth2) remains supported as a fallback.GRAPH_*, SMTP_OAUTH_*) to Azure App Settings from the environment file.users.language is added automatically by the startup migration — no manual step.GRAPH_* variables in each environment's .env and redeploy; the sender mailbox must be scoped to the app via an Exchange Application Access Policy.GRAPH_* is configured.A safer, clearer assessor record — evidence always visible read-only, editing gated behind assignment, a filter/search/CSV toolbar over the control list — plus a comprehensive click-by-click tutorial and polished toolbars.
[[VALUE]]/[[ATTACH]] placeholders, in both the provider flow and the assessor view&AI-drafted evidence with fill-in placeholders, a background bulk drafter, an ownership + Ready/history model for providers, and a full assessor review workflow with evidence-strength scoring — plus the in-app release notes page.
Draft evidence with placeholders, generated per-control, in bulk, or by the assistant — plus assignment that activates in one step.
[[VALUE]]/[[ATTACH]] placeholders and a soft submit-time warningA clear owner for each assessment's evidence, and one link that redeems any invite code.
Every workspace now sees only its own data, and pricing moves to a simple per-user model.
A unified multi-format reporting engine and a compact, dockable navigation system.
The authorization workflow: business-process flow, immutable decision packages, and POA&M as conditions.
Custom-domain readiness, real integration validation, and assessment history you can revert.
The platform becomes Aegis SA: an AI assistant embedded across the assessment lifecycle, fully localized in 8 languages, and mobile-responsive.
Connect your own AI provider or MCP, or use the built-in AI with transparent metering.
The first production platform release: self-serve billing, role-based access, licensing, and passwordless sign-in.
The first tracked release — project lifecycle basics.