Proofroom
Book a callStart free trial
Start free trial
Menu
Try the demoBook a call

Release notes

Each release, and what to do before you update. Customers can ask hello@proofroom.com for the full notes of any release.

1.14.4 (2026-10-30)

Highlights

  • ISO 27001:2022: every clause and Annex A control in plain words, a Statement of Applicability approved and versioned like a policy (PDF and spreadsheet), the yearly ISMS work as Workflow checks, and audits for each stage of certification
  • HIPAA: the Security Rule, breach notification and business associate duties, narrowed to whether you are a business associate or a covered entity, with addressable decisions, BAAs, a breach log with the 60-day clock and a yearly compliance review
  • “Which frameworks do we need?” now recommends ISO 27001 and HIPAA where they apply, and evidence you already file for SOC 2 or PCI DSS counts towards both

This release changes the database. Before updating, copy a backup and app.env off the server (Running Proofroom).

The installer for this release is proofroom.com/install-1.14.4.sh, SHA-256 46052af19fe6664dfa57f11fcfc2c0dfdd68bebbdcf6bf8d14528b95ab98c5b9.

1.14.3 (2026-10-30)

Highlights

  • Update an assessment instead of starting over: it starts with your last answers, your connected systems propose answers for you to confirm, and you check only the few that may have changed
  • See where you stand while an assessment is under way: each area’s progress, a provisional score and the next question
  • Policies that need updating because a framework changed now reach their owner, and the changed requirements show on Readiness until the update is approved
  • Assets and Software: one inventory of your devices from the tools you already use, which app versions run where, and a dated view for auditors
  • Updates remove the old Proofroom images they leave behind, so a server’s disk no longer fills up
  • Where your policies live: connect Confluence, SharePoint, OneDrive or Google Drive, or upload PolicyTech and iManage lists, and get yearly review evidence and who can edit each policy

This release changes the database. Before updating, copy a backup and app.env off the server (Running Proofroom).

The installer for this release is proofroom.com/install-1.14.3.sh, SHA-256 46052af19fe6664dfa57f11fcfc2c0dfdd68bebbdcf6bf8d14528b95ab98c5b9.

Upgrading. A server updated many times may hold old Proofroom images. After updating, sudo proofroomctl images lists them and sudo proofroomctl images --clean removes the ones no stack needs. If an update stops with “not enough disk for the update”, run images --clean first.

1.14.2 (2026-10-29)

Highlights

  • Backups can be copied off the server: after each nightly backup, Proofroom encrypts it and uploads it to an S3-compatible bucket you own (Admin → Backups), and proofroomctl restores straight from that copy
  • Reminders in Slack and Microsoft Teams: paste a channel’s webhook in Admin → Settings → Notifications and choose what to post each morning
  • Microsoft Secure Score from your Entra ID connection: the score over time as evidence, and on Posture
  • A “Get it working” checklist on a new stack’s dashboard: email, sign-in, your first connection, frameworks and off-server backups
  • proofroomctl -s <command> shows exactly what a command would change, without changing anything; proofroomctl resize, man proofroomctl and a command reference are new too
  • Auditors see only the Workflow checks linked to the audits they are on
  • Assets: one list of your devices and equipment from the tools you connect, with what needs attention flagged
  • Software: each application once with the versions in use, and one task to update them all
  • Your consultant’s or firm’s logo on every report cover

This release changes the database. Before updating, copy a backup and app.env off the server (Running Proofroom).

The installer for this release is proofroom.com/install-1.14.2.sh, SHA-256 46052af19fe6664dfa57f11fcfc2c0dfdd68bebbdcf6bf8d14528b95ab98c5b9.

1.14.1 (2026-10-29)

Highlights

  • One progress figure for each audit, the same on the dashboard, Audits, the audit’s controls, Readiness and every report
  • Your company’s time zone in Admin → Settings: today, due and overdue follow it, and times on pages and reports say their zone
  • Every PDF and the PowerPoint share one executive-grade design, and PowerPoint opens the slides without a repair prompt
  • The Security posture PDF is now the security lead’s monthly report: the month at a glance, every area with what is missing and who is closing it
  • New policy templates: the PCI DSS compliance program charter and the information security program charter, filled in from People and your SAQ
  • Task owners attach proof from the task, roadmaps plan only real work, slow buttons show they are working, and the timeline works with mouse, keyboard and touch

This release adds one column to the database (migration 0040, additive: a key that stops a roadmap being saved twice). Before updating, copy a backup and app.env off the server (Running Proofroom). At its first start it also removes evidence decisions an earlier upgrade (1.12.1) copied into audits they were never made in, and records each one in the audit log. The Workflow library gains two checks, switched off until you set them up.

The installer for this release is proofroom.com/install-1.14.1.sh, SHA-256 46052af19fe6664dfa57f11fcfc2c0dfdd68bebbdcf6bf8d14528b95ab98c5b9.

1.14.0 (2026-10-28)

No database change on client stacks.

The installer for this release is proofroom.com/install-1.14.0.sh, SHA-256 46052af19fe6664dfa57f11fcfc2c0dfdd68bebbdcf6bf8d14528b95ab98c5b9.

Highlights

  • Buy Proofroom through a vendor: your managed service provider, consultant or audit firm licenses you from its own pool
  • Your vendor’s staff can help you set up: up to 5 of their accounts are free
  • Move an existing licence to a vendor, only when your admin approves

1.13.0 (2026-10-28)

This release changes the database (migration 0039, additive). Before updating, copy a backup and app.env off the server (Running Proofroom). The migration only adds tables: existing stacks get no roadmaps and no tasks until someone makes them, and nobody loses access.

Highlights

  • Roadmaps: a plan built from your assessment, risks and connected systems, or from a framework’s readiness plan, with programs, priorities and dates that fit the time you have
  • Tasks: one list of work from every source, Assign all to owners, and tasks that close on their own when the evidence proves them
  • Step-by-step guidance for 78 topics, with steps for the tools you use, and daily reminder emails
  • Policies filled in from what Proofroom already knows, with the source of every answer
  • An executive summary for the board as PDF or editable PowerPoint, and one-click company reports
  • Coverage views, your own branding, and a menu that folds away on phones

1.12.1 (2026-10-28)

This release changes the database (migrations 0037 and 0038, both additive). Before updating, copy a backup and app.env off the server (Running Proofroom). Every existing auditor is put on every existing audit, and every earlier accept or reject is kept in every audit it applied to, so nothing changes at the update.

It also carries fixes from a full mock SOC 2 Type II and PCI DSS audit run in Proofroom.

Highlights

  • Auditors see only the audits they are on; up to 3 free auditors per open audit
  • Buy, Add users and Renew in Admin → Licence
  • Record policy approvals made before Proofroom; edit people’s names; SOC 1 reports for vendors
  • Fixes from a full mock SOC 2 and PCI DSS audit

1.12.0 (2026-10-27)

This release changes the database. Before updating, copy a backup and app.env off the server (Running Proofroom).

Highlights

  • MFA enforcement checks for Microsoft Entra ID, Okta and Google Workspace
  • Inactive accounts that can still sign in, across five identity providers
  • Endpoint security and vulnerability scanner connectors

1.11.1 (2026-10-27)

Highlights

  • Clearer Admin → Updates, and steadier background jobs

1.11.0 (2026-10-26)

This release changes the database. Before updating, copy a backup and app.env off the server (Running Proofroom).

Highlights

  • Risk register with your own risk matrix, a library of 32 common risks and heatmaps
  • Risks raised automatically from overdue checks, late patches and failing systems
  • Import and export the register; vendors list their risks

1.10.1 (2026-10-26)

Highlights

  • AI Use Policy in the library; card-number rules in the Acceptable Use Policy

1.10.0 (2026-10-26)

This release changes the database. Before updating, copy a backup and app.env off the server (Running Proofroom).

Highlights

  • The PCI DSS assessor’s workspace, with a ROC and AOC filling-in guide
  • Auditor request lists mapped to your evidence, packaged per request
  • Firm licences for audit firms running Proofroom for clients; up to 3 free auditors

1.9.0 (2026-10-26)

This release changes the database. Before updating, copy a backup and app.env off the server (Running Proofroom).

Highlights

  • PCI DSS Self-Assessment Questionnaires: pick the type, answer, export, yearly reminders
  • Narrow a PCI DSS audit to its SAQ
  • Workflow checks on each control page, and set-up per audit
  • Your AI model key entered in the app

1.8.0 (2026-10-26)

Highlights

  • A second opinion on linked evidence from the AI model (off until an admin turns it on)
  • Failed collector runs retry on their own, and admins are emailed when one keeps failing

1.7.1 (2026-10-25)

Highlights

  • Scan findings explained in plain English on Admin → About

1.7.0 (2026-10-25)

This release changes the database (migration 0029, which only adds). Before updating, copy a backup and app.env off the server (Running Proofroom).

Highlights

  • “Which frameworks do we need?”: ten questions, in the app and on proofroom.com
  • Policy acknowledgements by staff, filed as evidence

1.6.1 (2026-10-25)

Highlights

  • Skipping releases is tested before each release; plainer Updates and About pages

1.6.0 (2026-10-25)

This release changes the database. Before updating, copy a backup and app.env off the server (Running Proofroom).

Highlights

  • Policy library: 24 templates to adopt, edit, approve and version
  • Approved versions filed as evidence; yearly reviews tracked

1.5.0 (2026-10-24)

Highlights

  • Update notice and Update now in Admin → Updates
  • The SBOM and its scan in Admin → About

1.4.0 (2026-10-24)

Highlights

  • Email set up in the app, through your own provider

1.3.1 (2026-10-24)

Highlights

  • Check now on Server health; sign-in setup for AI assistants made simpler

1.3.0 (2026-10-24)

Highlights

  • The patch report: each server’s security updates, filed monthly as evidence

1.2.0 (2026-10-23)

This release changes the database. Before updating, copy a backup and app.env off the server (Running Proofroom).

Highlights

  • AI assistants (MCP) can read your Proofroom, with your consent
  • Safer updates, corrected framework wording reaching existing stacks, and an SBOM with every release

1.1.0 (2026-10-23)

Highlights

  • Self-service 14-day trials and a one-command install

1.0.3 (2026-10-23)

Highlights

  • Security updates, and the move to proofroom.com

1.0.2 (2026-10-21)

Highlights

  • The Proofroom icon in your browser tab

1.0.1 (2026-10-21)

Highlights

  • Licences in blocks of 50 users; small fixes

1.0.0 (2026-10-21)

The first version offered to clients.

Highlights

  • Client stacks you run yourself with proofroomctl, signed licences, and the public demo