Product Updates
Explore the latest capabilities now available in PulseAI, built to strengthen AI visibility, governance, and accountability across your organization. New to the platform? Start with Why PulseAI.
Attestation cycles now run quarterly, semi-annually or annually, every reassignment stays on the record, and certifying over a known gap takes an exception with an owner, a compensating control and an end date. The AI Tool Registry records who approved each tool and what data it may handle, and your AI assistant can answer both.
Read the updateOn October 21, 2026 the Node.js project disclosed Node2Shell (CVE-2026-111497), a flaw in its built-in Brotli decoder that can allow remote code execution. A review of the whole PulseAI platform found one path that could reach it: reading the text of policy PDFs uploaded to the Policy Center, which only a signed-in administrator of a customer organization can do. PulseAI 2.12.0 closes that path. No action is needed on your side.
Read the updateOn October 21, 2026 the PHP project disclosed two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. PulseAI does not use PHP anywhere in its platform, website, or status page, so neither vulnerability affects PulseAI or your data. No action is needed on your side.
Read the updateReports now has an OSFI E-23 readiness view that shows, principle by principle, whether the records Guideline E-23 asks about exist in PulseAI, with an Appendix 1 table for every model. Six new health checks on the model record feed it, and every place PulseAI cites E-23 now uses the headings of the guideline itself.
Read the updateEach model in your registry now carries its review history and the findings those reviews raised, a next review date set by its risk tier, and thresholds for the metrics your own monitoring reports. A metric that reaches its breach threshold opens a finding for a person to close.
Read the updateEvery policy finding can now have a named owner and a remediation due date, policy rules that cannot be checked automatically become questions the attester answers, your policy is re-evaluated whenever your AI registry changes, and User Management shows how each account can sign in.
Read the updatePulseAI now has a public status page. It shows the live state of every part of the platform in each hosting region, 90 days of daily history, and every incident and scheduled maintenance window, with an Atom feed and a machine-readable status file you can plug into your own monitoring.
Read the updateAI insights now draw on your organization context and AI policy, subscriptions and per-seat licenses count toward spend attribution, and every KPI can have an owner who is reminded when a check-in is due.
Read the updatePolicy Center is live. Upload the AI policy your organization approved, activate the version that governs, confirm the rules PulseAI reads from it, and see every model and use case checked against those rules daily. Gaps are findings under the rule that produced them, in your policy's own words; exceptions are bounded by what your own document allows; and every activation is sealed in the Evidence Vault.
Read the updatePulseAI now runs a production deployment in the United States. US organizations can sign in at us.app.pulseai.now and keep their data in the United States, on the same platform version and the same model catalog as the Canadian region.
Read the updatePulseAI now connects to GitHub: Copilot AI credits, seat fees, and GitHub Models usage show up in daily spend attribution, with a Copilot adoption card beside them. The dashboard now compares your Compass Score to your industry, and every signed evidence bundle includes the address where its verification key is published.
Read the updateEvidence Vault is now live. Every certified attestation, approved AI Impact Assessment, shadow-AI decision, and weekly governance health report is sealed into write-once storage the moment it happens, with live integrity checks, a weekly signed digest chain, and signed auditor bundles that verify offline with standard tools.
Read the updateAssessment amendments and version history keep completed AI Impact Assessments current through new, reviewable versions instead of in-place edits, with every superseded version kept on the record.
Read the updateCanadian financial institutions can now activate OSFI Guideline E-23 in PulseAI, hold Appendix 1-aligned model records with assessed risk ratings, and export an inventory appendix that shows what is captured and what is still missing.
Read the updatePulseAI now makes it easier to spot governance issues, keep AI-generated narratives current, and maintain accurate historical spend attribution.
Read the updateShadow AI Discovery gives Google Workspace customers visibility into third-party AI tools employees have authorized, with a workflow for bringing them under governance.
Read the update