AuditBadger product news — 2026-05-05 → 2026-08-05

Three months of AuditBadger 🦡: five languages, an assistant that does the work, and five new connections

We've been quiet on the news page since early May. Here's what landed between then and the start of August — and yes, the first thing you'll notice is the name.

We're AuditBadger now

Same product, same team, clearer name. If you bookmarked us under the old one, everything still works.

Your ISMS now speaks your language

This was the biggest single change of the quarter. The entire end-user interface is now translated into English, Polish, German, Spanish, and Dutch — not just the marketing pages, but every screen your team actually works in. We went further than the UI: implementation notes, ISMS entries, security objectives, and generated policies now all come out in your account's policy language, consistently. If your auditor reads German and your engineers write in Polish, you no longer have to choose which one the evidence is for.

Agentic Mode

The assistant stopped being a chat window and started being a colleague. Agentic Mode can now read across your project — controls, risks, documents, evidence — and carry out multi-step work, asking for confirmation before it changes anything. It lives in a sidebar that follows you around the app, so you can ask "why is this control failing?" on the page where you noticed it, rather than describing the page to a bot somewhere else.

Fewer controls to stare at on day one

A new compliance project used to hand you a wall of controls. We rebuilt the default control library so projects start with a lean, sensible set, wired into Quick Wins so you always know what to do next. Underneath that, controls and evidence are now genuinely shared across projects: satisfy an access-control requirement once and it counts for SOC 2 and ISO 27001 both, with the same evidence, without duplicating anything. The AI can now draft implementation notes for those shared controls too.

Five new connections

Three new evidence integrations: FleetDM for device and endpoint posture, and Scaleway and DigitalOcean for infrastructure. Scaleway in particular matters if you're keeping your infrastructure and your data inside the EU — you can now collect infrastructure evidence without an American hyperscaler in the chain.

We also connected Linear and Shortcut. These work in both directions: change tickets and issues flow in as change-management evidence, and action items you create in AuditBadger can be pushed out as tickets in the tracker your team already uses. Alongside that, AWS collection got more reliable, GitHub branch-protection checks now understand custom rules, and the GCP integration asks for a narrower set of permissions than before.

Across every provider you can now download automated evidence as a PDF, and filter a project down to just the checks that are currently failing.

Compliance history you don't have to reconstruct from memory

New this quarter: a proper record of what actually happened. Meetings, notes, milestones, and formal reviews now live in the product, with revisions, links to the controls and risks they touch, and import/export so you can bring existing minutes in. Management reviews can be created straight from meeting notes, and the system suggests and ranks the inputs a review needs — which is the part most people dread. The ISMS workbook got a matching redesign.

ISO 27001 depth

Statement of Applicability handling was substantially reworked around clause 6.1.3, so exclusions and justifications hold together properly. Security objectives now keep score history, and risk treatment actions keep a change log — both the kind of thing an auditor asks for and nobody has written down. The risk register got a faster, clearer index.

Documents that keep their story

Generated documents are now versioned. You can regenerate one from an updated template without losing the prior version, and every regeneration is recorded in an activity log with who triggered it and why. From a document, AuditBadger can suggest which controls it should satisfy. If you'd rather write than click, the editor now takes plain Markdown. Document acknowledgements finally stop chasing people who have left the company or been disabled.

A portal for partners

Consultants and partners now get their own sign-in, dashboard, and invitation flow, with explicit, revocable access to the client accounts they support — no more sharing a login.

Security housekeeping

Account owners can now enforce two-factor authentication for everyone in the account. Control metadata is encrypted at rest. Offboarding a user now walks you through reassigning what they owned instead of leaving orphaned records behind. Your DPA is downloadable from inside the app, and legal pages can be embedded if you need to surface them elsewhere.

And a lot of smaller things

The dashboard, business continuity index, and control details pages were redesigned. Controls got next/previous navigation. Incidents and business continuity exercises accept additional evidence attachments, and employee certificates can be uploaded directly. Plus a long tail of fixes from customer feedback sessions and our own weekly SOC 2 reviews — including a meaningful pass on page latency.

Next up, we're working on broadening framework coverage. If there's something in your audit that AuditBadger is making harder than it should be, tell us — a good share of the list above came from exactly that.