> For the complete documentation index, see [llms.txt](https://docs.controlbee.nl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.controlbee.nl/controlbee-docs/en/releasenotes.md). # Release notes Overview of changes per ControlBee release, newest first ## 3.15 **New or modified** * Integration with SecureBee, configurable per company via Company Settings > General: * When linking, you choose what is synchronized * Roles can be managed in ControlBee, in SecureBee, or in both * Assets and suppliers from SecureBee can be linked to risks * A role that still has access rights attached in SecureBee cannot be deleted * From the integration you go directly to the linked organization in SecureBee * A draft can be withdrawn, after which the latest approved version applies again * A draft can be exported to Word and PDF * When marking a deviation as done with a linked Control, you are asked whether a Control audit should be started * Maya answers help questions based on the manual, with a link to the correct page * MCP tokens can be restricted to specific companies; existing tokens retain access to all companies * The company administrator can create an MCP token for their own company in the company settings * The MCP server URL is shown with the MCP tokens * Via MCP, the description, cause and scope, solution and assessment of actions can also be retrieved * Via MCP, process audits, Control audits, and the audit planning can be retrieved * The link to the manual in the top-right menu points to docs.controlbee.nl in the selected language **Bug fixes** * Date was not saved in a risk evaluation * Risk evaluation was no longer automatically saved every 5 minutes * Colors and merged cells were incorrect in the export of a risk evaluation * Control name and actions were not shown, or were shown twice, in the export of risks * Help text for actions was not saved * Error message when duplicating an action * PDF export of a published audit produced a Word file * The name of a new process audit was 'Audit: undefined' * The 'Add Controls' button did not work when creating a Control audit * Validity date was missing in the export of the audit planning * 'Page not found' when creating a new version of a process or policy * Version history of policies and processes did not open if a reviewer no longer existed * Images in the PDF and Word export of a process were small and blurry * Images were cut off when printing a process from Word * Process could not be linked directly from the detail screen of a Control * Information icon next to KPI results in monitoring showed an incorrect name and date * Filtering on the latest result of KPIs did not work after clicking through from the dashboard * Company administrator could not upload a logo * API key was not shown when creating * Error message when adding a partner user * External users were incorrectly marked as 'partner' * Not all user roles saw the message about outstanding invoices * During an upgrade with SEPA payment, an overdue license was created immediately * Invoice details on the License tab were not retrieved correctly ## 3.14 **New or modified** * ControlBee MCP server is now available (free to request via ) * Maya AI assistant is now available (free to request via ) * Risks are split into a name and a longer description * Risks can be linked in bulk to an owner from the list * The current revision of an action is now also visible in the version history * The API integration and documentation have been extended with various features * The latest audit finding is visible on the detail screen of a Control * Notifications are sent when a document is approved or rejected * The audit planning is sorted by name by default * The review status of a policy is visible on the overview page * The 2FA code can be confirmed with the Enter key * Audit periodicity is included in the export of the audit planning * Screenshot option added in the feedback form **Bug fixes** * Error message when adding user add-ons * No existing process to link from the detail screen of a Control * Error message when exporting an annual program * Not all KPIs in the annual program could be filled in * Code visible when unlinking a follower for actions * Editing and unlinking competencies not possible for a role * Sorting of the action list not possible in combination with the OR filter on labels * With large payloads, Controls were sometimes not retrieved correctly * Action assignee sometimes not visible in the multiselect filter of the action list * Imported Controls were set to 'not applicable' by default * KPI change could not be saved correctly * Process audit frequency could not be changed back to an empty value ## 3.13 **New or modified** * Periodicity for process audits added in the audit planning * In the final step of a process audit, a proposed date is automatically generated based on the set periodicity * The most recent KPI scores are shown on the dashboard * Annual programs for KPI monitoring now always run for a full year * It is tracked whether KPI scores are scored in the first month after the period ends * Alert added for KPIs that were not scored on time * KPIs can be filtered and searched * Inactive environments are automatically archived after 6 months * Archived environments are automatically deleted after 3 years **Bug fixes** * Error when deleting users that appear in version tables * Width in tables of PDF exports corrected * Auditor name was sometimes missing in the export of the audit program * Error message when publishing an annual program * Error message when exporting policy with too many characters * Owner was not saved when creating a new risk * Guest user got an error message when opening KPIs * Technical label visible in the audit planning * In some cases a Control audit could not be saved * Error message when changing the role of a partner user **Patches** * 3.13.1 — assigning a process owner sometimes did not work * 3.13.2 — error message when deleting a user * 3.13.3 — error message when displaying the Controls in a process audit ## 3.12 **New or modified** * Version control applied to the editor fields of context, policy, and processes: * Changes lead to a draft version * Changes can be made transparent * A publication can be started to release changes * Major releases must be approved by one or more reviewers * Reviewers receive an email about the approval request * After approval, the publication can be completed * The version table is automatically updated after the release * The release history is visible * Existing manual version tables have been converted to automated version tables * Exports have been updated with the new version tables * The latest published versions of context, policy, and processes are available via the API for external publication * An owner can be set for policy * Maintenance mode for releases added **Bug fixes** * Processes could no longer be unlinked on the detail screen of a Control * Error message when creating internal evidence 'context' * Unlinked evidence was hidden by default on the process page * Some action assignees could not be filtered on * Incorrect status when hovering over the pie chart of actions **Patches** * 3.12.1 — versions can now be adjusted by company and environment administrators * 3.12.2 — the pop-up for the review status was not displayed correctly * 3.12.3 — a v1.0 was created immediately when creating a new item * 3.12.4 — error when publishing items with a lot of text * 3.12.5 — revisions can be added, edited, and deleted * 3.12.6 — changes could still be made after a review * 3.12.7 — the reviewer was not properly included in the export * 3.12.8 — pagination for process audits added * 3.12.9 — the text editor sometimes switched between views unintentionally * 3.12.10 — more information added to revision overviews * 3.12.11 — error message for a guest user when opening KPI scores ## 3.11 **New or modified** * Improvements in creating evidence items * Alphabetical sorting in the policy overview * Column display settings in the editor moved to the toolbar * Linked processes are included in the import of Controls * Verification step built in when setting the 2FA code * Improvement in the scrolling behavior of audits * Display of goals, requirements, and risks improved in process exports **Bug fixes** * Error when linking existing users to a company * Adjustments to PDF export scaling * When creating an environment from a template, all companies were included * Partner users could not be unlinked from an environment **Patches** * 3.11.1 through 3.11.9 — minor fixes for the 3.11 release ## 3.10 **New or modified** * Templates are available for partners * Wherever Word exports are available, PDF exports are now also available **Bug fixes** * Throttling implemented on web requests * Partner user could not assign a role * Updates to the list of unsafe passwords * Missing translations * Empty results of KPI assessments were not shown for objectives * Error message when creating an action without an assignee * Error message with special characters in the username * Error when deactivating an environment ## 3.9 **New or modified** * Audit planning added to make it possible to schedule process audits * Process audits can now only be started from the planning * Process status on the dashboard adjusted: the expiry date is overridden if there is a planned date * Action status on the dashboard adjusted: target dates of the actions are now taken into account * Overdue actions are marked in the list view of actions * Date fields for searching by creation and target date of actions adjusted * The name of actions is included in emails about actions * Integration links on detail screens are only shown if there is already at least one link * Risks can be linked to objectives via the yellow plus button * On the detail page of a policy, requirements, objectives, and risks can be linked * Automatic switching of context when clicking an entity from another context **Bug fixes** * Column width in Word exports could not be adjusted * URL to evidence in process audits did not work * A p character appeared in the action export * Message about unpaid invoices after a license upgrade * Sorting was not remembered after a refresh * Periodicity of a recurring action was not included when duplicating * Error when updating company information * Date field did not function correctly * Performance improvements **Patches** * 3.9.1 — process owner is the default assignee in process audits; various fixes * 3.9.2 — security vulnerability in process revisions fixed * 3.9.3 — expanded environment overview for partners; export of login attempts * 3.9.4 — security vulnerability in assigning user roles ## 3.8 **New or modified** * Successful and failed login attempts are visible to the environment administrator * Permissions of partner users can be adjusted * Partner users get the role 'user' by default, partner managers the role 'environment administrator' * Text with inline images can be pasted into text editor fields **Bug fixes** * Error message when exporting policy * Error when creating a risk evaluation with a filter on labels * No readable error message when entering an incorrect 2FA code * Not all linked roles were shown for evidence and KPIs due to a context filter * Message about outstanding invoices was not always shown * Block on an environment due to outstanding invoices after changing a license * Created action in a process audit was not linked immediately * Context selection in process audits worked incorrectly * Error when uploading an image in the policy text editor * Linked actions were no longer shown after publishing a monitoring program * Error message when opening a risk in an evaluation without name and date **Patches** * 3.8.1 — various fixes around processes, filters, process audits, and partner users * 3.8.2 — new actions could not be saved ## 3.7 **New or modified** * Set fixed frequencies for recurring actions * Trial period can be set by partners * Invoice payment can be set on request * Evidence and roles overview can be filtered by active context * German language pack added * Maximum number of rows for the risk matrix increased to 7 * Process overview is filtered by default on 'applicable' * Control and evidence filters on the process detail page are on by default * Action fields support formatting and images * Controls can be copied along when copying an action **Bug fixes** * Users were deleted along with the company * Tenant was not included in the URLs of action emails * Comments field in actions was too wide * Open actions were not shown in the risk evaluation * Header rows in some tables had no formatting * Archived Controls were shown in the risk evaluation * Actions were not merged correctly when grouping * Existing environment user could not be added to a company by the company administrator * High loading time of the KPI monitoring overview * License statistics were not always shown ## 3.6 **New or modified** * Partner portal introduced, with: * Creating environments by the partner * Setting a trial period by the partner * Central user management with synchronization of authentication data * Exporting active users in partner environments * Evidence URLs now also accept links to M-Files DMS * Session management introduced (see 'My data' in the top-right menu) * Default action types are created when adding a company **Bug fixes** * Roles could not be unlinked if a process audit had not yet been saved * Previously edited action was prefilled when creating a new action in a process audit * Default company logo was not loaded in the company settings * Improvements in license management * The & character was shown as HTML for stakeholders * Controls with the status 'not applicable' were shown when linking on the process page * Session timeout with Single Sign-On improved * Security improvements following the annual pentest: cross-origin headers and the HttpOnly flag in cookie settings * Display of tables in MS Word exports improved * User received notifications while the action was unfollowed * Evidence 'within ControlBee' was not selected correctly **Patches** * 3.6.1 and 3.6.3 — minor fixes for the partner portal release * 3.6.2 — fixes for license management, labels on actions via audits, and linking stakeholders * 3.6.4 — searching with only a 'to' date, references to the terms on the login page, labels when searching for actions ## 3.5 **New or modified** * Subscriptions and billing details can be set by the environment administrator under Environment Management * Use of color in the text editor: text color, text highlighting, and color in tables * Pages with filters show how many results are displayed **Bug fixes** * Fix for table widths in exports ## 3.4 **New or modified** * The Policy page allows creating and managing both company policy and topic-specific policy * For evidence, you can choose between evidence within ControlBee and outside it * Actions can be linked to processes; actions from the process audit are also shown there * Actions can be given the status 'closed' * When actions are deleted, an email follows to the followers * Deleted actions remain stored in the database for 30 days * Controls can be archived and restored from the archive or permanently deleted * Stakeholders can be sorted by name **Bug fixes** * Scaling of pie charts on the dashboard improved * Incorrect URL in emails from the admin environment fixed * Error message when creating a company fixed * Bugs when saving and linking in the process audit fixed * Display of roles in the process audit improved * Collapsing and shifting of screens during autosave fixed * Interface improvements when switching between contexts **Patches** * 3.4.1 through 3.4.4 — minor bug fixes for the 3.4 release * 3.4.5 — session timeout adjusted to 60 minutes; modals no longer close when clicking beside them ## 3.3 **New or modified** * Actions can be copied * Actions can be made recurring; when the status is 'done', a copy is started * From an action, a risk evaluation can be created from the linked risks * From an action, a Control audit can be created from the linked Controls **Bug fixes** * Moving findings in the process audit * Risks could be linked to an evaluation twice * Findings disappeared in a risk evaluation when unlinking or adding risks * Error message when saving a monitoring program * Custom column width in the text editor was not saved * Role types not correctly applied for multiple roles ## 3.2 **New or modified** * Replacement of the text editor for policy, context, processes, roles, and evidence items **Bug fixes** * Various bug fixes following the front-end upgrade ## 3.1 **New or modified** * Two-factor authentication can be set by the environment administrator under Environment Management * Single Sign-On for Microsoft and Google can be set by the environment administrator under Environment Management **Bug fixes** * Various bug fixes following the front-end upgrade **Patches** * 3.1.1 and 3.1.2 — various bug fixes following the front-end upgrade ## 3.0 **New or modified** * Completely revamped front end (Vue.js 3) * New filters for action data * Mentions in action comments are displayed in a different color **Bug fixes** * Various bug fixes and performance improvements compared to the previous front-end version * Error message when saving a process audit with grouped Controls fixed **Patches** * 3.0.1 and 3.0.2 — minor bug fixes for the 3.0 upgrade * 3.0.3 — optional fields per action type (cause and scope analysis, solution, assessment), manageable in the company settings including sample text; security controls following the annual pentest * 3.0.4 — various bug fixes following the front-end upgrade ## 2.3 **New or modified** * Labels are included when importing Controls; non-existing labels are created * Control status is included in the export of Controls * Single Sign-On for Google available * Linked KPIs are shown on the detail screen of actions * A hyphen is supported in environment URLs * The multiselect filter for labels works with an AND instead of an OR statement * Searching for action assignees * Open actions visible with Controls under a risk evaluation * Release notes visible under the version information * Stricter password policy and session timeout * The action type field appears in exports and overview screens, and it can be filtered on **Bug fixes** * Not all action assignees visible in the multiselect filter for actions * Action no longer visible with a target date after 01-01-2099 * Translation error in the impact field in the risk evaluation * Action status jumped to 'new' when editing from a risk evaluation * Display of Controls in the process audit shifts * Linked actions in audits were shown multiple times * Error in filtering risks * Linking stakeholders to requirements and objectives not filtered by context ## 2.2 **New or modified** * Link to the manual added in the user menu top right **Bug fixes** * When deleting a user, the KPI results are also deleted --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.controlbee.nl/controlbee-docs/en/releasenotes.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.