--- sourceDocument: yokohama Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/delta-xanadu-yokohama Release : - yokohama ft:locale : - en-US ft:publication_title : - yokohama Combined Product Files ft:clusterId : - delta3yx bundleId : - delta3yx --- # Combined Policy and Compliance Management release notes for upgrades from Xanadu to Yokohama # Combined Policy and Compliance Management release notes for upgrades from Xanadu to Yokohama {#ariaid-title1} Release version: Yokohama Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 8 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined Policy and Compliance Management Release Notes for Upgrades from Xanadu to Yokohama This consolidated release notes document provides ServiceNow customers with essential information about the Policy and Compliance Management product upgrades from the Xanadu to the Yokohama release. It highlights new features, changes, deprecations, and important upgrade considerations to help you prepare and optimize your use of the application. Show full answer Show less ## New Features * **Document Management Integrations:** Upload and manage policy documents directly from your local machine to Microsoft OneDrive, Google Drive, and Microsoft SharePoint. These integrations enable collaborative authoring, version control, and easy access across devices. * **Policy Authoring Enhancements:** Integration with Microsoft SharePoint allows policy owners and reviewers to collaborate on drafting, revising, and redlining policies with automatic text updates and version history retention. * **Cyber Risk Institute (CRI) Assessment:** Perform CRI tiering assessments and profile entities to calculate compliance scores based on questionnaire responses, with expanded roles authorized to initiate assessments. * **Employee Center Role Enhancements:** Employees with the operator role can now respond to policy acknowledgments and request policy exceptions directly through the Employee Center portal. * **Compliance Scoring Improvements:** Yokohama introduces entity-level compliance scoring that aggregates child and parent entity compliance data for a comprehensive view. * **Duplicate Citation Management:** When downloading Unified Compliance Framework (UCF) content, duplicate citations are eliminated by marking duplicates inactive and consolidating control objectives, improving data clarity. * **Performance Enhancements:** The Compliance Workspace now offers faster performance by removing the Issues widget from the landing page while retaining issue details under the Issues Overview section. * **Entity-Based Access Controls:** Data access is refined through entity-based access, allowing administrators to grant permissions more granularly for controls, attestations, and policy exceptions. * **Control Objective Deduplication Using AI:** Generative AI identifies similar control objectives, enabling users to merge duplicates, retain primaries, or dismiss non-duplicates, ensuring consolidated and accurate control documentation. ## Changes * **Role Expansion for CRI Assessments:** Beyond entity owners, corporate compliance managers, analysts, and IT compliance managers can initiate CRI tiering questionnaires and profile assessments. * **UI Updates:** Buttons for initiating CRI assessments were renamed to better reflect their functions ("Initiate CRI tiering questionnaire" and "Initiate CRI profile assessment"). * **Domain Separation:** All Policy and Compliance Management records, whether manually created or auto-generated, are now domain separated based on parent object or user domain for improved data security and segregation. * **Now Assist Skill Defaults and Usage Measurement:** Some Now Assist skills are enabled by default for new installations and certain upgrades, with a change in usage measurement from a look-back to a burn-down model aligned with contract dates. ## Deprecations and Removals * **GRC DevOps Accelerator:** This feature is deprecated, no longer supported, and unavailable for new activations starting with the Yokohama release. * **No features were removed in Xanadu or Yokohama releases for Policy and Compliance Management outside of the above deprecation.** ## Activation and Requirements * **Activation:** Policy and Compliance Management must be requested and installed from the ServiceNow Store. * **Browser Support:** Supported browsers include the latest public releases and two previous versions of Google Chrome, Firefox (including ESR), Microsoft Edge Chromium, and Safari 12.0 or later. * **No additional localization or accessibility updates were introduced in these releases.** ## Practical Impact for ServiceNow Customers Upgrading to Yokohama enhances your Policy and Compliance Management capabilities by enabling better document collaboration via cloud services, improved compliance scoring visibility at the entity level, and smarter control management through AI-driven deduplication. Entity-based access controls help enforce data security and governance more precisely. Performance improvements in the Compliance Workspace and expanded user roles improve usability and efficiency. Customers should review prerequisite tasks before upgrading and consider the deprecation of the GRC DevOps Accelerator in their planning. Consolidated page of all release notes for Policy and Compliance Management from Xanadu to Yokohama. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family Policy and Compliance Management release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Xanadu to Yokohama. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading Policy and Compliance Management to Yokohama Before you upgrade to Yokohama, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-policyandcompliancemanagement-summary__entry__2} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## New features Between your current release family and Yokohama, new features were introduced for Policy and Compliance Management. {#dfrn3-policyandcompliancemanagement-summary__entry__8} | Release | Release notes | |-|-| | Xanadu | [Upload policy document from your local machine to Microsoft OneDrive](https://www.servicenow.com/docs/access?context=upload-word-doc-onedrive&family=xanadu&ft:locale=en-US) : Upload a Microsoft Word document that exists in your local machine to Microsoft OneDrive and link the document with the policy. You can access the document from any device and enable multiple users to collaborate on the policy document. [Create and associate a policy text document in Google Drive](https://www.servicenow.com/docs/access?context=create-policy-redlining-docu-google-drive&family=xanadu&ft:locale=en-US) : Integrate your ServiceNow instance with Google documents to manage documents in Google Drive. Create a Word document in Google Drive that you can access through a browser and store in Google Drive. You also have the option to create a Microsoft Word document that you can manage in Google Drive. [Upload policy document from your local machine to Google Drive](https://www.servicenow.com/docs/access?context=upload-word-doc-googledrive&family=xanadu&ft:locale=en-US) : Upload a Microsoft Word document that exists in your local machine to Google Drive and link the document with the policy to enable multiple users to collaborate on the policy document. [Upload policy document from your local machine to Microsoft SharePoint](https://www.servicenow.com/docs/access?context=upload-word-doc-sharepoint&family=xanadu&ft:locale=en-US) : Upload a Microsoft Word document that exists in your local machine to Microsoft SharePoint and link the document with the policy to enable multiple users to collaborate on the policy document. [Policy authoring using Microsoft SharePoint](https://www.servicenow.com/docs/access?context=connect-sharepoint-doc&family=xanadu&ft:locale=en-US) : Monitor and revise your organization's policies at regular intervals to maintain their relevance and compliance. Integrating Microsoft Word document files with multiple Microsoft SharePoint sites helps your policy owners, reviewers, and approvers to author, modify, and maintain different versions of a policy text and thus retain its history. You can also collaborate on policy drafting and review processes. The policy text is updated automatically. You can copy and paste text from a document into the Policy text field in HTML and then convert it to a PDF format. [Using CRI assessment questions to profile an entity](https://www.servicenow.com/docs/access?context=perform-cri-assess-pc-ws&family=xanadu&ft:locale=en-US) : Perform a CRI tiering assessment for an entity to determine its tier, and then perform a CRI assessment for that entity. Based on the response to the CRI questionnaire from the assessor, the compliance status of each mapped control to a question is determined. The overall compliance score of the entity is also calculated. [User role enhancements in Policy and Compliance Management](https://www.servicenow.com/docs/access?context=manage-pol-comp-emp-center&family=xanadu&ft:locale=en-US) : Respond to policy acknowledgments and request a policy exception from the Employee Center portal with the employee operator role. | | Yokohama | [Calculate compliance score and roll up to entity](https://www.servicenow.com/docs/access?context=compliance-score-calculation-pc-ws&family=yokohama&ft:locale=en-US) : View a comprehensive compliance score at the entity level that includes all the child entities rolled up to the parent entity along with the compliance score of the parent entity's direct controls. [Elimination of duplicate citations from UCF Shared list download](https://www.servicenow.com/docs/access?context=ucf-deduplication-pc&family=yokohama&ft:locale=en-US) : Eliminate duplicate citations associated with the authority documents when you download UCF content. You can retain one citation as active and mark the duplicate citations as inactive. Move the control objectives of the duplicate citations to the active citation, and update the duplicate citation records with the Source ID of the active citation. [Improve compliance workspace performance](https://www.servicenow.com/docs/access?context=compliance-manager-compliance-ws&family=yokohama&ft:locale=en-US) : Improved the performance of the compliance workspace by removing the issue widget to ensure a faster and smoother user experience. You can still access issue details from the "Issues Overview" section. [Entity based access](https://www.servicenow.com/docs/access?context=c_GRCControls&family=yokohama&ft:locale=en-US) : Entity based access aims to provide a more granular approach to data access, ensuring that users can only access data through entity-based access. The entity-based access has been enabled for controls, attestations and policy exception to control mappings. Administrators can grant access to an entity's related records by adding users or user groups, or by using entity user fields for entity-based access configuration. [Deduplication of control objectives](https://www.servicenow.com/docs/access?context=now-assist-for-irm&family=yokohama&ft:locale=en-US) : Using Generative AI, identify and recommend similar control objectives. You can choose to accept a control objective as duplicate, dismiss those that are not similar, or retain a control objective as primary in which details from all other similar control objectives are merged. Additionally, the system automatically copies related records, including policies and risk statements, to ensure comprehensive information is maintained in one location after retiring the accepted control objectives. | [ ] ## Changes Between your current release family and Yokohama, some changes were made to existing Policy and Compliance Management features. {#dfrn3-policyandcompliancemanagement-summary__entry__14} | Release | Release notes | |-|-| | Xanadu | [Perform CRI tiering questionnaire to determine the tier value of entity](https://www.servicenow.com/docs/access?context=perform-cri-tier-pc-ws&family=xanadu&ft:locale=en-US) : In addition to the Entity owner, the Corporate compliance manager \[sn_compliance_ws.corporate_compliance_manager\], Corporate compliance analyst \[sn_compliance_ws.corporate_compliance_analyst\], and IT compliance manager \[sn_compliance_ws.it_compliance_manager\] can trigger CRI tiering questionnaire and initiate CRI profile assessments. * UI action button Initiate CRI tiering assessment has been renamed as Initiate CRI tiering questionnaire. * UI action button Initiate CRI assessment has been renamed as Initiate CRI profile assessment. [Domain separation in GRC: Policy and Compliance Management](https://www.servicenow.com/docs/access?context=domain-separation-pol-comp&family=xanadu&ft:locale=en-US) : Now both manually created records and auto-generated records created through scheduled jobs or scripts are domain separated based on their parent object or user domain for all Policy and Compliance Management objects. | | Yokohama | [Some Now Assist skills are turned on by default](https://www.servicenow.com/docs/access?context=now-assist-skills-on-by-default&family=yokohama&ft:locale=en-US) : The new default behavior works as follows: * New customers: When you install a Now Assist product, designated skills are turned on automatically. * Existing customers who are upgrading (starting with Yokohama Patch 11): Any previously unconfigured skill is turned on automatically (the skill was never configured and turned on, then turned off again). Previously configured skills that were turned on, then off, remain inactive. [Changes to Now Assist usage measurement](https://www.servicenow.com/docs/access?context=monitoring-now-assist-usage&family=yokohama&ft:locale=en-US) : Starting with Yokohama Patch 5, Now Assist usage measurement is transitioning from a 365-day look-back model to a 365-day burn-down model, with usage resetting at the contract anniversary date. For more information, refer to [KB KB2704710: Now Assist Usage - Overview \& New Measurement Logic](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2704710). | [ ] ## Removed Between your current release family and Yokohama, some Policy and Compliance Management features or functionality were removed. {#dfrn3-policyandcompliancemanagement-summary__entry__20} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Deprecations Between your current release family and Yokohama, some Policy and Compliance Management features or functionality were deprecated. {#dfrn3-policyandcompliancemanagement-summary__entry__26} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | GRC DevOps Accelerator is now deprecated and no longer supported or available for new activation. For details, see the [Deprecation process \[KB0867184\]](https://hi.service-now.com/kb_view.do?sysparm_article=KB0867184) article in the Now Support Knowledge Base. | [ ] ## Activation information Review information on how to activate Policy and Compliance Management. {#dfrn3-policyandcompliancemanagement-summary__entry__32} | Release | Release notes | |-|-| | Xanadu | Install Policy and Compliance Management by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=xanadu&ft:locale=en-US). | | Yokohama | Activation information : Install Policy and Compliance Management by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=yokohama&ft:locale=en-US). Important: Policy and Compliance Management is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | [ ] ## Additional requirements If any additional requirements were introduced or changed for Policy and Compliance Management we have noted them here. {#dfrn3-policyandcompliancemanagement-summary__entry__38} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for Policy and Compliance Management we have noted them here. {#dfrn3-policyandcompliancemanagement-summary__entry__44} | Release | Release notes | |-|-| | Xanadu | GRC: Policy and Compliance Management requires the latest public release and two previous release versions of the following browsers: * Google Chrome * Firefox and Firefox Extended Support Release (ESR) * Microsoft Edge Chromium * Safari 12.0 and later versions | | Yokohama | Browser requirements : GRC: Policy and Compliance Management requires the latest public release and two previous release versions of the following browsers: * Google Chrome * Firefox and Firefox Extended Support Release (ESR) * Microsoft Edge Chromium * Safari 12.0 and later versions | [ ] ## Accessibility information Review details on accessibility information for Policy and Compliance Management, such as specific requirements or compliance levels. {#dfrn3-policyandcompliancemanagement-summary__entry__50} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for Policy and Compliance Management we have noted them here. {#dfrn3-policyandcompliancemanagement-summary__entry__56} | Release | Release notes | |-|-| | Xanadu | No updates for this release. | | Yokohama | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for Policy and Compliance Management we have noted them here. {#dfrn3-policyandcompliancemanagement-summary__entry__62} | Release | Release notes | |-|-| | Xanadu | * Revise your policies and update the policy text periodically by integrating with Microsoft SharePoint. * Use policy authoring and the redlining feature to enable policy owners and reviewers to collaborate, review, and redline policies. * Perform a Cyber Risk Institute (CRI) assessment on a company as an entity to determine its control status and calculate the assessment score. * Use the employee operator role introduced in Policy and Compliance Management for operations in Employee Center. See [Policy and Compliance Management](https://www.servicenow.com/docs/access?context=r_PolicyComplianceMgmt&family=xanadu&ft:locale=en-US) for more information. | | Yokohama | * View the compliance score at the entity level based on the hierarchy of entities. * Eliminate duplicate citations associated with the authority documents when you download UCF content. * Revise your policies and update the policy text periodically by integrating with Microsoft SharePoint. * Enable policy owners and reviewers to collaborate, review, and redline policies by using policy authoring and the redlining feature. * The Issues widget has been removed from the Compliance Workspace landing page to enhance the performance. * Enable data access by implementing Entity-Based Access controls. * Recommend similar control objectives using generative AI. You can then retain, dismiss, or merge duplicate control objectives. See [Policy and Compliance Management](https://www.servicenow.com/docs/access?context=r_PolicyComplianceMgmt&family=yokohama&ft:locale=en-US) for more information. | [ ]