June 2026 release: Microsoft sign-in, cycle insights, and bulk editing

June was about visibility and control. Administrators now see exactly what a cycle will do before it is sent, can trace every recipient across every cycle, and can manage recipients at scale instead of one at a time. Here is everything that shipped.

The full list of features and their release dates is always available from the dashboard inside the application.

Administrators can now sign in with their Microsoft work account using single sign-on (SSO) directly from the login page.

This matters for two reasons. First, access to your compliance evidence should follow the same identity controls as the rest of your organization. When an administrator leaves, disabling their Microsoft account also removes their access to Policy Confirm. Second, it removes one more standalone credential from your environment, which is exactly the kind of finding auditors like to raise.

Microsoft sign-in is available for administrators today. Recipients continue to confirm through secure magic links and OTP verification, with no accounts or passwords required.

Recipients can now also confirm policies using Microsoft single sign-on with their work account. This requires the organization's Microsoft Entra tenant ID to be configured.

Magic links and OTP verification remain available for recipients without Microsoft accounts. The value is identity assurance: the confirmation is tied to a verified work identity managed by the organization's own directory.

When eSign is enabled, recipients can now type their name in a signature-style font as an alternative to drawing it.

Drawing a signature works well on a phone or tablet. It is less practical with a mouse or trackpad. The typed option removes that friction without weakening the record: the confirmation is still tied to a verified identity, a specific policy version, and an exact timestamp. The signature style is a presentation choice. The proof is in the audit trail.

Administrators can now add quiz questions to any policy and require recipients to answer them before completing their confirmation. Each question is presented in the confirmation flow with immediate feedback, so recipients know whether they have understood the content before moving on.

This strengthens the acknowledgement itself. The record shows not only that the recipient confirmed the policy, but that they completed a quiz about its content before confirming. That moves the evidence beyond "read and confirmed" toward demonstrated engagement with the policy, which is a stronger position under audit.

Before a cycle is sent, the confirmation step now shows exactly what you are about to distribute: how many policies, groups, and recipients are involved, with an expandable per-policy breakdown of which groups each policy reaches and how many recipients that resolves to.

A confirmation cycle is a formal act. Once dispatched, every email, version link, and timestamp becomes part of your audit trail. The new breakdown gives you a final, explicit check that the right policies are going to the right people before anything is committed. No assumptions, no surprises after send.

Any cycle can now be exported to an Excel file containing the cycle details, its policies, and one row per recipient with their confirmation status.

PDF certificates remain the formal proof. The Excel export exists for everything around the proof: filtering non-responders for follow-up, reporting completion rates to management, or handing an auditor a working dataset they can sort and pivot themselves. The data comes straight from the audit trail, so the export reflects exactly what the system recorded.

You can now select multiple recipients or groups and update them in one operation: set them active or inactive, delete them, or change group memberships.

Recipient data changes constantly. Departments reorganize, contractors roll off, and teams merge. Keeping group memberships accurate is what makes smart targeting reliable, and doing it one recipient at a time does not scale past a certain headcount. Bulk edit keeps your recipient structure current with a fraction of the effort.

Open any recipient to see every cycle they are part of, the policies in each cycle, and the emails they have received.

This answers the question auditors actually ask: not "did you send the policy" but "show me what this specific person received and confirmed." The recipient details view gives you that answer in one place, including the delivery history, so you can trace an individual's full acknowledgement record without assembling it from multiple screens.

A new Support page is available from the menu, with contact options and a searchable help library.

Answers to common questions about cycles, versioning, recipients, and proofs are now available directly in the app, and you can reach us from the same place when the library does not cover your case.

What this adds up to

Every feature in this release serves the same principle: you should be able to see, verify, and prove what your acknowledgement process is doing at every step. Before send, during the cycle, and per individual recipient.

If you are still tracking acknowledgements through email threads and spreadsheets, you can replace that process in an afternoon. The principle behind why the switch pays off is covered in Excel vs. dedicated policy tracking: The hidden risks.

About the author

The team behind Policy Confirm has hands-on experience across full-stack development, product growth, compliance leadership, and executive technology roles such as CTO and CPTO. They have led and supported ISO 27001 implementations, policy governance initiatives, and audit-driven compliance projects in regulated environments. This background informs a practical, audit-oriented approach to policy management and policy acknowledgements.

Related content

• What is a policy acknowledgement system?
• How to prove policy acknowledgement in an audit
• Excel vs. dedicated policy tracking: The hidden risks
• Audit ready compliance checklist: What auditors actually look for

Legal disclaimer

The information provided in this article does not, and is not intended to, constitute legal advice; instead, all information, content, and materials available on this site are for general informational purposes only. You should contact your attorney to obtain advice with respect to any particular legal matter.