Issues

• Objectives and programs created, renamed or deleted in the app are missing from search (or stay in it) until the next index rebuild

  bug
  unidoc/isms#507 · Filter by author unidoc-alip opened on Oct 30, 2026

• Dates sent as epoch seconds are stored a day early on servers west of UTC

  bug
  unidoc/isms#503 · Filter by author unidoc-alip opened on Oct 29, 2026

• API 500 responses expose raw database error text to the client

  bug
  unidoc/isms#497 · Filter by author unidoc-alip opened on Oct 29, 2026

• [Feature]: Applicability decision and justification per control/requirement, with a per-framework applicability matrix (the SoA in ISO 27001)

  enhancement
  unidoc/isms#472 · Filter by author ArturLorek opened on Oct 16, 2026

• [Docs]: 6.1.3 Statement of Applicability template tells users to run isms soa generate, which doesn't exist; spec lists a "not_applicable" status the database rejects

  documentation
  unidoc/isms#471 · Filter by author ArturLorek opened on Oct 16, 2026

• Annual Plan on the Overview still shows closed risks, terminated suppliers and closed or draft legal requirements

  bug
  unidoc/isms#468 · Filter by author ArturLorek opened on Oct 15, 2026
  1

• [Feature]: Make the items in the Overview's Annual Plan links to the record they stand for

  enhancement
  unidoc/isms#467 · Filter by author ArturLorek opened on Oct 15, 2026

• [Feature]: Allow underscores (and optionally dashes) in a Program key, e.g. IMS_QU / IMS-QU

  enhancement
  unidoc/isms#465 · Filter by author ArturLorek opened on Oct 15, 2026

• Overview is titled "ISO 27001 ISMS" but mixes all frameworks into one compliance figure, with no per-framework view

  bug
  unidoc/isms#464 · Filter by author ArturLorek opened on Oct 15, 2026

• [Feature]: Allow auditor specification to be custom

  enhancement
  unidoc/isms#463 · Filter by author alchemicalkube opened on Oct 14, 2026
  2

• npm audit on master reports 2 low-severity findings: KaTeX (via Mermaid), prototype pollution advisory GHSA-238p-pmpm-9mq7

  bug
  unidoc/isms#461 · Filter by author ArturLorek opened on Oct 14, 2026

• Deleting a record leaves its links behind as dead chips on other records' Links tab

  bug
  unidoc/isms#455 · Filter by author unidoc-alip opened on Oct 14, 2026

• Terminated suppliers, decommissioned systems, closed legal requirements and archived assets are still flagged overdue for review

  bug
  unidoc/isms#453 · Filter by author unidoc-alip opened on Oct 13, 2026

• The approver is not notified when an edit withdraws their change request approval

  enhancement
  unidoc/isms#424 · Filter by author unidoc-alip opened on Oct 7, 2026

• [Feature]: Asset Register lacks a "People" asset type; no clean way to model personnel as intangible assets

  enhancement
  unidoc/isms#371 · Filter by author ArturLorek opened on Sep 29, 2026

• [Feature]: Framework/programme applicability tagging on Suppliers (and other shared registers)

  enhancement
  unidoc/isms#356 · Filter by author ArturLorek opened on Sep 25, 2026

• No non-email path to add a user (blocks assigning external auditors) - GAP, Enhancement, API, UI, Docs.

  bug
  unidoc/isms#322 · Filter by author ArturLorek opened on Sep 22, 2026 · 0.9.0

• Supplier certifications field present in schema but not displayed in supplier UI

  bug
  unidoc/isms#312 · Filter by author ArturLorek opened on Sep 21, 2026

• Print/PDF export: include a Related Documents section from the Links tab

  unidoc/isms#233 · Filter by author unidoc-ahall opened on Aug 27, 2026

• Decide: should org creation be deployment-gated, or admin-only everywhere (current)?

  unidoc/isms#225 · Filter by author unidoc-ahall opened on Aug 25, 2026

• [Feature]: Objectives record claims, not measurements — no code anywhere compares a check-in to its target

  enhancement
  unidoc/isms#206 · Filter by author unidoc-alip opened on Aug 7, 2026

• Suggestion staleness detection fails in both directions — no snapshot for 8 of the 11 entity types that can carry a suggestion, and every risk/supplier suggestion is stale from birth

  bug
  unidoc/isms#199 · Filter by author unidoc-alip opened on Aug 6, 2026

• Integration layer v1.0 — well-defined ingest of objectives and evidence from external systems

  enhancement
  unidoc/isms#21 · Filter by author unidoc-ahall opened on Jun 6, 2026 · 1.0.0

• Epic: Trust center (external-facing compliance posture under access control)

  epic
  unidoc/isms#20 · Filter by author unidoc-ahall opened on Jun 6, 2026 · 1.0.0