Changelog

What's new

The latest updates, improvements, and fixes to CA Friend.

May 28, 2026

New

CA Friend public launch — eight governance modules live

CA Friend is officially live. All eight governance modules — AI Policy & SOP Generator, Compliance Document Management, Acknowledgement Tracking, Audit-Readiness Dashboard, AI Questionnaire Autofill, Evidence Collection, Vendor & Asset Registry, and Compliance Tasks — are available on Starter, Growth and Enterprise plans.

Built-in framework catalogs ship with ISO/IEC 27001:2022, SOC 2 (TSC 2017 + 2022 supplement) and the Digital Personal Data Protection Act, 2023 (all 8 principal obligations).

May 25, 2026

New

AI Policy Generator with Anthropic Claude

Generate company-specific Information Security, Access Control, DPDP Privacy, Incident Response and Vendor Risk policies in under a minute. Streaming responses, version history, and audit-trail logging of every prompt and output.

May 20, 2026

Security

Tamper-evident hash chain for acknowledgements

Every policy acknowledgement now records a SHA-256 hash chained to the previous acknowledgement for the organisation. Auditors can verify the entire chain end-to-end and confirm no records were inserted or deleted retrospectively.

May 15, 2026

Improvement

Mumbai (ap-south-1) data residency by default

All new tenants are provisioned in Mumbai by default, in line with DPDP expectations for personal data of Indian principals. Enterprise customers can request alternate regions.

May 10, 2026

Beta

AI Questionnaire Autofill (Beta)

Upload a 100–300 question security questionnaire. CA Friend uses RAG over your published policies (pgvector embeddings) to draft answers with citations. 70%+ auto-fill rate on tenants with at least 10 published policies. Phase 2 of this feature ships full streaming UX in Q3 2026.

Want to help us shape the future of CA Friend?

CA Friend public launch — eight governance modules live

Built-in framework catalogs ship with ISO/IEC 27001:2022, SOC 2 (TSC 2017 + 2022 supplement) and the Digital Personal Data Protection Act, 2023 (all 8 principal obligations).