What's new

Transport auto-sync — transports move between SAP and the change record without a manual pull, completing the Transport-as-Change loop.

Connector agent collectors: system inventory, authentication, USMM license measurement, CCMS alerts, and HANA status — each independently scheduled.

CVE correlation via CPE mapping, fed from an EU-mirrored NVD feed, so vulnerabilities land against the configuration items they actually affect.

End-of-life and end-of-support enrichment from an EU-mirrored endoflife.date feed, driving the daily risk register.

Discovery pipeline: a source-to-record adapter contract, software normalization with a human review loop, and a staging-to-reconciliation bridge that blocks on identifier collisions rather than guessing.

An employee-facing portal — editorial home, news and events, service destinations, an employee directory search over a separate employee-safe projection, and a projects portfolio.

Company branding manager with safe published revisions — edit the draft, publish when you mean it.

OAuth refresh-token rotation, revocation, and device binding.

Dedicated permissions for change freeze-window declaration, SAP transport import, and AI-governance review.

Pagination summaries on every spine list, normalized row density, and enforced type-class and button-colour lint gates across the UI.

Customer-deployed connector agent: enrollment with a one-time token, signed ingest, heartbeat, and a distributable core with the transport collector. SAP credentials never leave your host.

EarlyWatch Alert ingestion with an evidence archive.

Read-only Cloud ALM bridge, CCMS alerts that open real incidents, and HANA status persisted onto the CI.

Segregation-of-duties risk catalog expanded past 50 patterns, plus a maintenance-window coverage check.

Soft-delete with Trash, RBAC, and an audit row on incidents, problems, changes, and service requests — deletion is recoverable and accounted for.

Directory Sync over SCIM, and a real object-storage backend with backend-delegated presigned uploads.

List and board rework: anchored filter overlays that stop the table shoving, facet counts on chips, row pinning, column freeze, a redesigned peek panel with inline quick-edit, and shareable URL state on every board toolbar.

PII masking structurally enforced across every classified read path, SCIM tokens hashed at rest, timing-safe personal access tokens, SBOM generation, key rotation, and enforced CSP.

Automated backup with WAL point-in-time recovery and a rehearsed restore drill; runtime observability, SLOs, alerting, and on-call wired end to end.

SLA breach → escalation → notification chains now fire live, and the business-rules runtime engine is wired to the rule admin.

Attachment virus-scan quarantine settles instead of hanging, CSV exports are guarded against formula injection, and light-theme status text meets WCAG AA contrast.

"My work" — role-filtered lanes on a personal home, built on a shared work-item contract rather than a per-module query.

Shared claim on incidents: atomic first-wins, audited, and segregation-of-duties aware.

Notification fan-out records, so who was notified and why is answerable after the fact.

Workflow presets chosen during onboarding, with an editor at Settings → Workflows.

Advanced dashboard visualizations.

A major incident now gates a mandatory problem record — the post-incident step cannot be skipped.

Initial release of TENSOR — Incident, Problem, Change, Service Request, CMDB, SLA, Knowledge Base, and Audit Log.

DORA, NIS-2, MaRisk/BAIT, BetrVG, and GDPR compliance toggles with opt-in per tenant.

DORA 4h/72h/30d and NIS-2 24h/72h/1mo reporting cascades.

Register of Information export (XBRL + CSV) and Berechtigungskonzept export (PDF + JSON).

14 typed relationship kinds, SCD Type-2 point-in-time history, CVE and end-of-life tracking.

Transport-as-Change with bidirectional STMS sync, BAIT 5 SoD, collision detection, landscape mapping.

13 first-party adapters: M365/Entra, AD, Intune, Datadog, PagerDuty, Sentinel, CrowdStrike, Tenable, Slack/Teams, Veeam, VMware, Citrix — plus the SAP module, email-to-ticket intake, and signed webhooks.

Hash-chained append-only audit log with daily verification.

Light/dark theming, field-level customization, terminology override.

Multilingual knowledge base (de/en) with semantic search, KCS, and decision trees.