July-August 2026 Product Updates: AI Agents Inside Your Compliance Program, and Precision Everywhere Else

Compliance programs today generate more data, span more frameworks, and involve more stakeholders than they did even a year ago. The challenge is no longer setting up controls. It is keeping up with the volume of evidence, questionnaires, audit requests, and policy changes that accumulate as programs grow.

That complexity fragments how teams work. Security questionnaires pile up with answers that need manual correction. Audit evidence lives in one platform while the auditor works in another. Policies get classified inconsistently across systems. And integrations that should take hours end up blocked behind partner dependencies for weeks.

Sprinto’s latest updates are designed to solve exactly that. You can now:

• Use Sprinto MCP on ChatGPT and Claude to connect AI assistants directly to your Sprinto workspace
• Get answers to security questionnaires in minutes, so your team can respond faster and with greater accuracy
• Sync audit evidence automatically between Sprinto and A-LIGN
• Configure policies your way with self-service downloads, custom document types, and SharePoint tag mapping
• Connect your own OAuth apps to Sprinto for fine-grained integration control
• Use your organization’s own quizzes for security training programs

Together, these updates help teams spend less time on manual handoffs, get more accurate outputs from AI-assisted workflows, and maintain tighter control over how compliance data moves across systems. Read about these updates in detail below:

1. Sprinto MCP is now available on ChatGPT and Claude

You can now connect AI assistants like Claude and ChatGPT directly to your Sprinto workspace. Sprinto is live on both the Anthropic Connectors Marketplace and the ChatGPT Plugin Store, giving your team the ability to interact with compliance data using plain language from the tools they already use.

Once connected, an AI agent can:

• Check your compliance posture across framework readiness, failing monitors, and audit findings
• Onboard and manage vendors, track due diligence, and review risk scores
• Create and approve policies, and triage risks and incidents
• Auto-answer security questionnaires from your Knowledge Hub
• Run audits, from managing requirements to attaching evidence to controls
• Run access reviews, handle employee onboarding and offboarding, check device compliance, and map custom frameworks

Why is this important? Most compliance platforms are built for people to check on their program. With Sprinto on AI marketplaces, an AI agent can act on it directly, closing the loop between spotting an issue and fixing it. A team using an AI coding assistant to ship infrastructure changes, for example, can have that same assistant check whether a change affects a control, update the evidence, and flag a drifting policy, all without switching tools. That kind of agent-driven governance is quickly becoming a factor enterprises evaluate when choosing a compliance platform, and it puts your program a step ahead of manual, dashboard-only workflows.

👉 Read more about Sprinto MCP here.

2. Get Smarter Security Questionnaire Answers With a Rebuilt AI Engine

You can now get significantly more accurate answers from Sprinto’s security questionnaire engine. The platform has been rebuilt from the ground up with a new retrieval and answer-matching pipeline powered by AI reasoning. The result is a 30% improvement in answer accuracy in benchmarks.

With the rebuilt engine, teams can expect fewer edits per questionnaire, faster turnaround times, and more confidence in what gets submitted to prospects and customers.

Why is this important? Security questionnaires are one of the highest-volume manual workloads in a compliance program. Every correction adds time, and when accuracy drops, teams start second-guessing every answer before sending it out. A 30% improvement in accuracy means fewer rounds of review, faster response times, and less friction in the sales process.

3. Sync Audit Evidence Seamlessly With A-LIGN

You can now connect your A-LIGN account directly with Sprinto using your A-LIGN API credentials, making audit evidence management between the two platforms seamless. When creating a Custom Audit, select an A-LIGN Engagement to automatically import audit requests into Sprinto. Evidence uploaded against a request in Sprinto is automatically pushed to the corresponding request in A-LIGN, keeping audit requests and evidence synchronized across both platforms.

This eliminates the need for manual evidence uploads between systems. Auditors and compliance teams can collaborate more efficiently with up-to-date evidence, and audit preparation becomes a single workflow instead of a back-and-forth between two platforms.

Why is this important? Audit preparation is one of the most time-intensive phases of the compliance cycle, and a significant part of that time goes to manually transferring evidence between the platform where it is collected and the platform where it is reviewed. With the A-LIGN integration, that transfer happens automatically. Evidence stays synchronized, nothing gets missed in the handoff, and your team can focus on the substance of the audit instead of the logistics of moving files between systems.

👉 Read more about creating a custom audit with A-LIGN here.

4. Configure and Classify Policies Your Way

You can now manage how policies are organized and accessed across your organization through a new Configuration tab under Policies.

Your employees can download policies directly from the Employee Portal after you enable the Download Policies toggle, which surfaces a Download All option for self-service access. You can classify policies and documents beyond Sprinto’s default categories by creating custom document types and using those types both when uploading new documents in Sprinto and when syncing documents from SharePoint. You can also map your custom document-type tags when syncing from SharePoint so that documents land in Sprinto already classified the way your organization expects.

Why is this important? Every organization files and labels its policies differently, and forcing that structure into a fixed set of default categories usually means someone has to reclassify things by hand later. Custom document types let your existing taxonomy carry over cleanly, including from SharePoint, while self-service downloads take routine policy requests off your team’s plate entirely.

👉 Read more in the Policies guide.

5. Connect Your Own OAuth Apps to Sprinto

You can now register your own OAuth app and connect it to Sprinto using standard or advanced OIDC flows, giving you full control over scopes, consent, and permissions at your IdP with no dependency on partner accounts or aggregators.

The consent screen is yours. You choose the exact scopes, the account, and you can revoke access at your IdP any time. Every credential field is referenceable from plan steps and the API Playground, and the setup composes directly with Sprinto’s Ingestion system for pulling data from connected systems.

Why is this important? When your team needs to connect a system that requires specific permission scopes or enterprise-grade OAuth configuration, the traditional path is to go through a partner account or aggregator. That adds dependencies, limits scope control, and can take weeks. With BYOA, your team registers the OAuth app with the exact scopes they want, adds it to Sprinto, and starts pulling data the same day. One customer recently used this to reduce a provider’s permission set from a two-week partner process to a same-afternoon setup.

6. Use Your Own Quizzes for Security Training Programs

You can now select Custom Quiz as the assessment type for a training program, giving your organization the flexibility to use its own quizzes instead of relying on Sprinto’s default quiz or Typeform. To get started, request the Custom Quiz CSV template, fill it with your questions and answers, and share the completed file with the Sprinto team to upload.

Once a custom quiz is assigned, employees can open the training from the Employee Portal and complete the configured quiz directly as part of their assigned training.

Why is this important? Security awareness training is most effective when it reflects your organization’s actual policies, risks, and operating context. Custom quizzes let you standardize internal compliance assessments, deliver training aligned with how your company operates, and reduce dependence on third-party quiz platforms.

👉 Read more about configuring training programs here.

Sprinto’s Latest Updates Give You a More Connected, AI-Powered Way to Manage Compliance

Sprinto’s presence on AI marketplaces puts agents to work directly inside your compliance program. A rebuilt security questionnaire engine delivers answers your team can trust. The A-LIGN integration eliminates manual evidence transfers during audit preparation. New policy configuration options make sure your documents are organized the way your organization actually thinks about them. BYOA gives you full control over how systems connect to Sprinto. And custom quizzes make security training reflect your actual operating context.

For Sprinto customers, the value is clear: fewer manual handoffs between systems, more accurate outputs from AI-assisted workflows, and a platform that adapts to how your team works. As more of the compliance workflow moves from dashboards to AI agents and automated reviews, the programs that stay ahead will be those whose underlying data is precise enough for both people and AI to rely on.