Auditors get a role of their own

An auditor is a first-class organization role, scoped to the frameworks and dates of their engagement.

Audits

Handing an auditor a login used to mean handing them everything. An auditor is now a first-class organization role, and the engagement record decides which frameworks they see and for how long.

Improvements
  • A bulk CSV/XLSX vendor import wizard, for onboarding a register rather than typing it.
  • In-app documentation with a nested sidebar, including the Validations and Checks pages.
Fixes
  • Severity is preserved on shared multi-select findings.
  • Questionnaire section order no longer depends on the reader's language.
  • The support dialog lays out correctly in RTL, and vendor portal comments poll faster.