Sept 2026
This release welcomes Oracle as a newly supported data source for access policies, brings Microsoft 365 content under sensitivity-aware governance, and makes it far easier to secure AI agents across Salesforce, Slack, Atlassian, Confluence, and GitHub. It also introduces bulk policy import, richer audit visibility, and faster, more responsive policy enforcement across the platform.
Feature List
Oracle RBAC Support
Microsoft 365 Governance with Purview Sensitivity Labels
Expanded MCP Integrations: Salesforce, Slack, Atlassian, Confluence & GitHub
CSV Bulk Import for Row Access & Masking Policies
Console Design Modernization
Power BI Import Mode Support
Detailed Policy Evaluation History
Reference User Attributes
New Features & Enhancements
Oracle Support
RBAC Policies for Oracle: Discover Oracle databases, schemas, tables, users, and roles, then author role-based access policies at the database–multi-schema or schema–multi-object level. Oracle policies support the full lifecycle — create, review, publish, deploy, enable, and disable — with deployment directly to your Oracle environment.
Microsoft 365 Governance
Sensitivity-Aware Policies for Microsoft 365: Register SharePoint as a data source and create access policies driven by Microsoft Purview sensitivity labels. The policy condition builder now supports Purview metadata directly, so you can target SharePoint and OneDrive content by classification.
Coverage Across Microsoft 365 Apps: Sensitivity-label-based enforcement now extends to AI agent access across Word, Excel, PowerPoint, and OneDrive — including tools that retrieve content through search queries — so agents only reach content they're entitled to see.
Intent-Based Access Control for Microsoft 365: Intent-Based Access Control (IBAC) now covers SharePoint and Purview-managed content, and MCP server policies and Microsoft 365 data policies can be managed together in a single, unified flow.
Expanded MCP Integrations
Salesforce, Slack & Atlassian as Built-In Server Types: Salesforce, Slack, and Atlassian are now first-class MCP server types. Select one during registration and TrustLogix configures the server URL and authentication endpoints for you — no manual setup required.
Confluence & GitHub Integrations: Register Confluence and GitHub MCP servers through dedicated setup flows. Atlassian and Confluence support automatic client registration for faster onboarding, and GitHub supports passthrough authentication.
Policy & Attribute Management
CSV Bulk Import for Row Access & Masking Policies: Upload a CSV to create row access and masking policies in bulk — with automated validation, conflict detection, per-row status tracking, and a full history of past imports. Rolling out hundreds of policies now takes a single upload instead of hours of manual setup.
Reference User Attributes: In Attribute Management, create reference attributes that pull values directly from a configured table in your connected data source, link them to parent attributes, and filter by them on the attribute values page — enabling richer entitlement modeling with less manual upkeep.
Detailed Policy Evaluation History: Policy Evaluation History for TrustApp now shows the exact input values, policy definition, and outcome behind every decision, giving you a clear, auditable record of why access was granted or denied.
Expanded Snowflake Policy Conditions: Snowflake policies now support ARRAY_OVERLAPS and ARRAY_CONSTRUCT functions, and role session attributes support multi-value IN conditions.
Schema-Level Policy Sync Filtering: Policy Sync now supports schema-level filtering for Snowflake, Databricks, and Dremio, so you can scope synchronization to exactly the objects you care about.
Tag Reference APIs: New APIs let you manage Snowflake tag references externally for near-real-time policy synchronization.
MCP Servers in Template Policies: Template Access Policies now support MCP server object types and privileges.
Power BI
Import Mode Support: Power BI data access policies now support Import mode alongside Direct Query for user attribute tables, configurable per account. Power BI support has also been expanded with workspace-level entitlement mapping.
Console Design Modernization
A Cleaner, More Consistent Console: The Data Sources, Applications, Data Domains, and AI Agents pages have been redesigned with standardized tables, clickable primary columns that take you straight to the details, clear status badges, and timestamps shown in your local time zone — making it faster to scan, find, and act on what you need.
Improvements
Performance & Enforcement
Faster AI Agent Authorization: Agents now receive authorization for all their MCP tools in a single request at startup, and server-level policies are applied automatically to tools without their own policy — reducing latency and redundant checks.
Near-Real-Time Policy Updates: Policy and attribute changes now reach enforcement in near real time, including for Azure-hosted deployments.
Faster Guardian Agent Queries: Guardian Agent query performance has been significantly improved, with noticeably lower response times.
Faster Snowflake Policy Reviews: Tag-based row-level security and masking policy reviews now load faster, with tag changes reflected in near real time.
Faster Dashboard Loading: The Overview dashboard now loads significantly faster.
Usability
Role Search: Search for roles while creating policies — especially helpful for accounts with large numbers of roles.
Streamlined Microsoft 365 Registration: A new tile-based selector makes it easy to choose which Microsoft 365 services to connect.
Clearer MCP Registration: Token and authorization endpoints are now separate fields, improving compatibility with a wider range of OAuth providers.
Standardized Policy Details: Policy details and side panels now look and behave consistently across all application policy modules.
Improved Deploy Screens: The Grant/Deploy preview selector is now more prominent and easier to find.
Sync Results Context: On-demand sync results now show each policy's owner and creator.
Alerts Page Enhancements: Risk details are now visible on the Alerts page, with searchable IP addresses.
Audit, Compliance & Safeguards
Richer AI Agent Audit Logs: Evaluation audit logs now include resource type details, support filtering by user, permission, audit type, and resource, and clearly distinguish "no policy" from "deny" outcomes.
Improved Compliance Reports: Compliance reports now feature bullet-point summaries, accurate severity tagging, detailed findings for medium and low violations, and multi-framework scheduling.
Compliance in Risk Summaries: Guardian Agent risk summaries now include compliance violation details directly in the executive summary table.
Snowflake Policy Safeguards: You're now warned proactively when a Snowflake policy uses UDF sub-query patterns known to cause runtime issues.
Dremio Hierarchical Policies: Dremio hierarchical policies now resolve default schemas correctly for row-level security and masking.
Last updated
Was this helpful?