See how your risk scores are built and which treatment items affect them.

Open the risks overview page to see the new layout, or read the Risks guides.

Connecting things just got faster. When you’re linking an entity and what you need doesn’t exist yet, you can now create it on the spot. There’s no need to leave the page, create it elsewhere, and come back.

Processing activities, company users, evidence submissions and findings work a little differently, so they can’t be created from the connection drawer yet.

We've simplified the dashboard so it's easier to see what needs your attention.

Anything waiting on you now sits at the top of the page, along with your past approval requests.

When nothing needs your attention, you'll see shortcuts to your tasks and past approvals instead.

We've removed the Quick links section. You can now find Roadmap and System updates under Guidance.

We’ve reorganised the risk type settings page to make it easier to follow.

You’ll find it under Settings → Risks.

The new Audit module brings internal audits into Formalize. Audits run on the controls, risks, suppliers, and evidence you already manage, so nothing has to be collected again, and every step is structured to the IIA Global Internal Audit Standards.

The biggest change is in how findings are handled: each one is tied to what it affects, gets an owner and a target date, and only counts as resolved after independent sign-off, even after the audit itself has ended.

→ Audit templates that turn your team's existing process into a reusable setup

→ Audits scoped to a framework, a set of risks, or your assets and suppliers

→ Structured findings with criterion, condition, root cause, effect, severity, and decision

→ Approval flows on findings and action plans, so nothing closes without independent sign-off

→ Findings you can raise from anywhere in the platform, not only inside an audit

→ Audit notes and history for every assessment, plus a one-click PDF report

If you're on the Standard Infrastructure or Advanced Infrastructure plan, the Audit module is already in your account. On a different plan? Reach out to your Customer Success Manager or write us here support@formalize.com to add it.

For a step-by-step setup,

read our Help Center article

.

What’s new

Availability

Formalize IQ is available to all Formalize clients and trial customers from the moment of launch. Look for the IQ sidebar on the right-hand side of the platform and start exploring.

IQ may not be enabled on your platform yet. Go to

Settings

to turn it on.

We have just released the newly redesigned Approval Flows experience! This update brings improved visibility into approval status, and more flexible configuration options. Approval Flows are now better aligned with real organizational structures and decision-making needs.

-> Apply approval flows across more entities (Evidence, Incidents, Control) and resources (Assets, Auppliers, Contracts, Customers, Employees, Processing Activities, Business Functions, Data subject requests), and Questionnaire response group.

-> Trigger approval flows automatically inside workflows with native wait nodes that pause downstream actions until sign-off is granted. Set up automated reminders, deadlines, timeouts, and escalation paths so reviews never stall.

-> Configure approval steps to run sequentially or simultaneously. Set minimum and maximum required approvers, and assign them using static, conditional, or replacement rules.

-> Instantly view live approval states () via new status badges on detail pages, backed by tooltips and automatic edit-locks to prevent unauthorized changes during active reviews.

-> Create approval flows tied to specific policy versions, customize notification email text, and add multiple email recipients to keep all stakeholders aligned.

-> Choose exactly when emails are sent by toggling notifications for overall flow completion, rejection updates to the requester, or new approval requests sent to approvers.

For detailed instructions on how to configure the new approval flows, read this Help Center article.

You can now update element connections directly inside workflows, eliminating manual data entry and ensuring your platform records stay linked in real time.

-> Every workflow now features a connection group, allowing you to select which relationships to update and choose the elements to connect.

-> Connect newly created elements on the go right inside your workflow execution.

-> All Update Actions have been migrated to our redesigned select components for a smoother, cleaner configuration experience.

⚠️ : Updating connections via a workflow action replaces existing connections for the selected elements. Leaving a selected connection field empty will clear all existing connections for that relation.*

We're excited to present MEAS - Multi-entity account setup!

This update will help you scale your operations by allowing administrators to securely restrict a user's view to a specific business/company unit. Designed to improve data governance and simplify permissions, MEAS dynamically filters the entire platform workspace so local teams and external auditors only see the data and resources connected to their designated entity.

From isolated risk registers to streamlined group-level reporting, MEAS removes the risk of messy cross-company data overlap, so you can reliably expand your setup.

:

The ability to associate a user directly with a company entity on their user card

Redesigned Users & access page, and roles configurations interface for better user experience and clarity

New access roles multi-select field in Settings → Users & access → User, that allows the admin to select a user's role

More granular, condition-based permissions, allowing you to restrict actions (view, edit, delete) based on the responsible user and/or selected company entities

A dynamic "User's company entities" condition that automatically maps permissions based on the entity the user belongs to, eliminating the need to hardcode roles.

You can now automatically or right within your workflows. By selecting the new "Create Process" action from the dropdown list, you can eliminate manual setup and instantly initiate your team's standard operating procedures whenever specific criteria are met.