Skip to content
fullCircle GRC

Product update

New in fullCircle: September 2026

Risk programs that keep themselves current

September puts your risk register on a schedule: workflows that match how each team works, reviews that come back on time, and a visual history of every risk. Plus faster Trust Center approvals and samples that trace back to their populations.

Share

This month you can:

  1. 01Risk workflows that run on your schedule
  2. 02See the story behind every risk score
  3. 03Get customers the documents they need, faster
  4. 04Samples that trace back to their populations
  5. 05Bring fullCircle to your terminal
+ 8 more improvements
RiskTrust CenterAuditsMCP Server
01Risk

Risk workflows that run on your schedule

One status list rarely fits every register, and risk reviews slip when they live in someone's calendar. Now each register has its own workflow, with statuses you can rename, recolor, reorder, add or retire. Set a Review Frequency on any risk, and when its Next Review Date passes, fullCircle moves it to Needs Review and lets the owner know.

Custom statuses for each register, with guided reassignment when you retire one
Review Frequency and Next Review Date on every risk, in bulk or by CSV
Automatic move to Needs Review, with owner notifications
Register-specific statuses in PDF reports, fullCircle AI and the MCP Server
Explore Risk Management
02Risk

See the story behind every risk score

A score tells you where a risk stands today. The new Risk Journey shows how it got there. Each risk plots its residual score over time against your score bands, with the impact and likelihood behind every change, so you can show leadership and auditors real progress instead of a single number.

Residual risk plotted across your Extreme, High, Medium and Low bands
Hover any change to see Impact × Likelihood = Residual Risk
How long a risk spent at each score, and at your top band
A complete score history, kept for every risk
Explore Risk Management
03Trust Center

Get customers the documents they need, faster

Customers shouldn't wait days for your SOC 2 report, and your team shouldn't wonder whether an approval email ever arrived. Access Requests now show each requester's NDA status, when their access expires and a full email deliverability log. If a customer has already signed your NDA, record it on file for their domain and they skip the click-through.

NDA status on every request: Signed, NDA on file, Awaiting NDA or No NDA
An Expires column for every approved grant
Email deliverability log for verification and approval notices
Approved domains and emails you can edit, with NDA on file
Explore Trust Center

Included with fullCircle.

04Audits

Samples that trace back to their populations

Sampling is where audit evidence gets messy: populations in one place, samples in another, and nobody sure which belongs to which. Evidence Type and Linked Populations & Samples now appear on control evidence as well as audit requests, so every sample traces back to its population across modules, even when you bulk upload.

Evidence Type on requests and evidence objects
Linked Populations & Samples, visible from both sides
Bulk upload with validation for populations and samples
A new Assessments tab links control evidence to audit requests
Explore Audit Management
05MCP Server

Bring fullCircle to your terminal

Your AI assistant is only as useful as the program data it can reach. Terminal-based MCP clients such as Claude Code can now sign in to fullCircle with OAuth. A new tool puts your saved filtered views within reach, and each register's own risk statuses flow through to every answer.

OAuth sign-in for terminal MCP clients such as Claude Code
New get_filtered_views tool for your saved views
Per-register risk statuses in MCP tools and fullCircle AI
Explore the MCP Server

Included with Optimize.

Also in this release

Smaller changes that make everyday work smoother.

ProjectsThe Subtasks tab gains sort, search and filters
RiskRisk and task list views remember your column sort
RiskThe risk register keeps your active tab as you move between records
EvidenceUpload meeting transcripts (.vtt) and fullCircle reads them like any other document
AuditsFaster assessment lists and evidence loading for large programs
PoliciesDocuments CSV exports match exactly what each person can see in the grid
EvidenceEvidence Request Summaries now count only in-scope requests
AuditsISO 42001 gap types for every organization: No Gap, Minor, Moderate and Serious Gap, N/A and OFI

See September's release in action.

Book a demo and we'll show you what's new, using the frameworks and workflows your team runs today.

Or see how audit-ready you are