Changelog

New Features

Tasks

• Added export functionality for Tasks in HTML, PDF, Excel, and CSV formats.
• Added bulk import capability and task template support via Excel or CSV files.

Cybersecurity Management System

• Added export functionality for the Statement of Applicability (SoA) in HTML, PDF, and Excel formats.
• Introduced Controls Mapping across multiple frameworks and standards, including:
  • Visibility of the number of mapped controls
  • Detailed view of relationships between mapped controls
  • Display of Tasks linked to mapped controls
• Added Controls Mapping Matrix to visualize the mapping status between different frameworks and standards.

Security

• Updated Prisma and Next.js to their latest stable versions.

Fixes

• Fixed issues affecting Cybersecurity controls selection.
• Updated platform pricing display.
• Fixed issues in the Risk Management dashboard.

New Features

• Added localization support: The platform is now available in French, German, and Spanish alongside the default English. Check the status on the translation platform.
• Added theme toggle on login page
• Added copy action for API keys
• Added ENV variable for AI custom integration with different models and providers

Enhancements

• Improved chart labels and readability in localized views
• Improved responsiveness across key pages and forms
• Refreshed UI consistency in navigation, cards, and tables
• The minimum Risk value can be set to 0%
• Better behavior of multiselector
• Improved 404 page
• Updated features plan: AI Chatbot now available for Premium and Ultimate

Fixes

• Fixed visual issues in dark theme and legacy browser cases
• Fixed navigation and layout issues on mobile
• Fixed issues in selectors and filtering behavior
• Fixed description editor in Interactive Awareness Training module
• Fixed task comments behavior
• Library updates npm audit fix

Vulnerability fixed:

• HIGH: Unsanitized user input in HTTP response (XSS) CWE-79
• Unsanitized user input in dynamic HTML insertion (XSS) CWE-79

Security fixed and patched vulnerabilities from pentest report per severity:

Severity

• High: API accessible without authentication
• Medium: No rate limit on forgot password request
• Medium: No account lockout implementation
• Low: When an unexpected input was supplied to the API
• Low: Cookie lacks HTTP-Secure attribute
• Low: Excessive info disclosure
• Low: Clickjacking on login page
• Low: HSTS header missing from response
• Low: Check for excessive information disclosure in API response (OWASP A01-Broken Access Control)

New Features

• Added SOC 2 compliance framework
• Added C5
  compliance framework
• Introduced multiple framework support for improved flexibility

Enhancements

• Improved permission schema for better access control management
• Added Markdown shortcuts for task comments and descriptions
• Introduced “Resend verification email” button for easier user onboarding
• Added “Copy” button for invitation links
• Enhanced chart readability
• Improved mobile view layouts for better responsiveness
• Docker hub repository for Unicis Platform

Access & Security

• Audit logs are now available exclusively for Ultimate plan users
• Improve security with introducing CI/CD pipeline by adding Bearer code security scanning tool (SAST) to discover, filter and prioritize security and privacy risk in Unicis Platform

Fixes/Bugs

• Email service reliability improvements with introducing Resend intergation for email delivery

Bug Fixes & Enhancements

• Dark theme display issues
• Improved chart color schemes
• Applied multiple UI style adjustments
• Layout and interaction issues in Dashboard views
• Functionality bugs in Interactive Awareness Training module
• Issues with task attachments handling and display

Security & Vulnerability Updates

Upgraded several key dependencies to their latest major versions, including:

• react-email
• next
• next-auth

Authentication Improvements

• Fixed and enhanced SSO SAML authentication flow

Security

• Security vulnerability fix: Improper Session Management - Lack of Request Validation

Dependency libraries

• Tailwind CSS upgrade from v3 to v4
• daisyUI ugrade from v4 to v5
• react-daisyui removed
• Atlaskit library removed
• Shadcn library introduced

New features and improvements

• New controls added: EU NIS2; GDPR; CIS
• Badges and filters introduced to the task list
• Logs list redesign
• Pagination redesign
• General dashboard graphical enhancements
• Dark theme improvement

Enhancements

• Record of Processing Activities creation new behavior - Depending on specific input, an automatic triggering of Transfer Impact Assessment and Privacy Impact Assessment creation
• Add titles to modal view
• Security vulnerability fix: Next.js middleware authorization bypass fix

Bug fixes

• Strong password improvement
• Firefox styles fixes
• Permissions scheme improvements
• Emails logo image fix

This is the biggest and more enhances GRC release of Unicis.

Highlights

Billing and Payment

• Easy payment with Wise and Credit Card

Supply chain

• Generate SBOM - regulatory requirements

AI Assistance

We introduced new AI Assistance chat bot module

• AI Assistance module

New modules

• Privacy Impact Assessment module
• Risk Management module
• Interactive Awareness Program module
• Added steps on modal

Bug fixes

• Responsive dashboard
• Dark mode
• Library updates npm audit fix
• Permission fix
• Prisma latest

We’re excited to announce Unicis Platform Beta 2, our biggest release yet. This major update brings a completely redesigned compliance hub, new cybersecurity modules, and an open-core community edition that’s free forever.

Highlights

Tasks

• Add Breadcrumbs for better navigatio

Dashboard

Tasks

- Total number of tasks
- Pie chart per status

Record of processing activities:

- Total number of records
- Total number of enabled data transfer
- Total number per Country

Transfer Impact Assessment

- Total number of assessment
- Total number of assessments per country (only the listed countries)
- Number per authorizations: PERMITTED and NOT PERMITTED

Cybersecurity Controls (only for selected control)

- Total number of controls
- Pie chart
- Spider chart

Billing

• Add billing feature

Bug fix

npm audit fix

This release introduces first BETA 1 release of Unicis Platform

New Features

Task Management

• Comments
• Audit
• Attachment

Record of Processing Activities

• Bug fix and UI fix

Transfer Impact Assessment

• Bug fix and UI fix

Cybersecurity Controls

• ISO 27001
  and 27001
• NIST CSF 2.0

Enhancement and Bug fixes

• Bug fix
• Documentation link
• Feedback link
• Dark mode

Unicis Platform Alfa release.

Features

• Task Management — Create, Delete, Update
• Record of Processing Activitiess — Import Atlassian RoPA App into Unicis Platform
• Transfer Impact Assessment - Import Atlassian TIA App into Unicis Platform
• Cybersecurity Controls - Import Atlassian CSC App into Unicis Platform, and add MVSP framework
• API

Documentation

• Website documentation