These three releases make Harold more accurate and easier to trust, give you more control over Auto Import, and smooth out everyday work across the SOA, registers and the Starter plan. AI features remain optional: where you switch them on, they take care of repetitive, time-consuming tasks so your team can focus on the decisions that need people.
5.9 — Smarter, more reliable Harold. A new Suggestion Logs page, a review step after Auto Import, Auto Import for the Risk Register, and big accuracy gains in task suggestions, control linking and gap assessments.
5.10.1 — Better auditor packs. Cleaner, more complete auditor packs and clearer evidence linking.
5.10.2 — A polished Starter and SMB1001 experience. Smoother sign-up and onboarding, sequential checklist IDs, and many fixes across the SOA, Risk Register, Supplier Register, Data Register and policies.
Release 5.9 focuses on Harold, the assistant that speeds up the repetitive parts of compliance work: more accurate suggestions, more visibility into what it suggested, and more control over what it creates.
Suggestion Logs. A new read-only page under Admin Tools shows all of Harold's suggestions in one place — from the Task Suggester, MCM Link Suggester and Gap Assessment — with their source, subject, status and date.
Review your imports. After Auto Import finishes, you now see a summary of every record created and link applied. Keep what's right, and remove or unlink anything you don't want, before finishing the import.
Auto Import for the Risk Register. The Risk Register's Import button now offers both Import manually and Auto Import (Auto Import is available when AI features are switched on for your organisation).
Control Design now informs Harold. The Control Design details you record in the SOA (intent, activity, testing and evidence) are now used by the MCM Link Suggester and Gap Assessment for more relevant results.
Auto-create records is now off by default in Auto Import, so Harold only creates register entries when you choose to turn it on.
Smarter task suggestions. Where one obligation applies to several controls, Harold now suggests a single task tagged with all relevant controls instead of one duplicate per control.
Clearer progress for background jobs. You're notified when task suggestions are ready, results appear in System Updates without a page refresh, and jobs keep running when you choose Run in Background.
Release 5.10.1 makes auditor packs clearer and more complete, and tidies up evidence linking.
The pack's main page now shows the date range you chose when generating it.
Evidence and documents are combined into a single folder, and evidence file names now match their names in the Document Library.
The Evidence tab has a search box, and long file names are easier to read with a Show more option.
The SOA Linked Items tab now includes linked risks, full assurance task details, and control-to-control links in the right place.
Document statuses in the pack now match what you see in the app.
Control Design pages are cleaner, with stray characters and an internal note removed.
Evidence uploaded through tasks and checklists is now set to Published by default.
The control mapping windows now show the links between tasks or checklists and their evidence, including inherited control mappings.
Linking a control to a checklist item now uses the same mapping window as the rest of the platform.
Data classification labels applied while performing a task now show on the document.
Harold: fixed sign-in errors that could stop the Task Suggester and MCM Link Suggester from running.
SMB1001 SOA: the SOA table and API now update straight away after you edit a control.
SOA: history is now clearly clickable, and custom framework control IDs display consistently.
Checklists: the menu button no longer overlaps the close button in the perform window.
General stability improvements.
Release 5.10.2 polishes the Starter plan and SMB1001 experience from sign-up onwards, and fixes a wide range of issues across registers, the SOA and policies.
New to SMB1001? It's a tiered cybersecurity certification standard for small and medium-sized businesses, published by the not-for-profit Dynamic Standards International. Learn more about SMB1001.
Checklist IDs. Every new checklist now gets a sequential ID (CHK-1, CHK-2 and so on), shown in the Checklist Register, SOA and Auditor Pack.
Control linking on the Starter plan. Starter customers can now use the control mapping windows, including linking suppliers, processes and controls from the Data Register.
Simpler Starter navigation. The Starter plan menu has been simplified so you only see what's included in your plan.
Starter user limits. The 5-user limit is applied correctly, and you can choose a role when adding a user.
Assurance Tasks. History has moved into the menu, and the framework filter no longer shows duplicates.
Sign-up and onboarding errors that could block new accounts are fixed.
Your ABN now carries over to your company settings automatically.
New SMB1001 accounts see the correct framework and controls in the SOA from day one, without a Migrate now prompt.
Onboarding only shows the steps that apply to your plan and modules — for example, privacy steps only appear when the Privacy Act module is on.
The dashboard opens in the Starter layout after onboarding.
Changes to implementation status and owner now show in the main table straight away.
Changing a control from Not applicable to Applicable now updates its status correctly, and the progress bar counts partially and not-implemented controls correctly.
Line breaks in SOA text fields are now kept after saving.
Adding a custom control with a duplicate ID no longer overwrites an existing control.
The delete-control confirmation is readable again, and Gap Assessment re-runs complete reliably.
SMB1001 assurance tasks now come pre-linked to their controls, and the Auditor Pack control count matches the SOA.
Risk Register: sub-risks show correctly in the risk tree and control mapping window, collapse works for single sub-risks, and rating changes update without a refresh.
Supplier Register: supplier pages now use supplier labels throughout, history shows data type names, and changing a supplier's type no longer makes it inaccessible.
Data Register: long supplier and process names display in full, and linked suppliers open the supplier page.
Privacy Request Tracker: new requests save correctly and appear in the register.
Saved changes and review dates on policies and processes now display straight away.
The Process Register shows the correct column headings, and Back returns you to the right place.
Related Controls on a document are clickable again.
Verbal processes show a clear message when there is no file to download.
In the Compliance Calendar, the Complete Review button is always visible.
Checklists accept today's date without needing to re-select it.
Evidence uploads now include a Not applicable date option, and checklist evidence no longer picks up controls from other checklists.
Control links can now be removed reliably.
New users appear in User Management without a refresh, and the integration status no longer shows before an integration is set up.
Confluence import no longer shows Refresh for pages that were never imported.
SOCI register control links no longer duplicate into the Related Controls field.
If you have questions about any of these changes, or would like a walkthrough of the new features, please contact the de.iterate support team. We'd love to hear your feedback.