Impero (IMPERO) Investor update summary

2025 product delivery

• 2025 marked the first full year of 7–8-week release cycles, bringing functionality to users sooner and enabling iterative refinement based on feedback.

• Control testing reached general availability; planned enhancements include random sampling and clearer estimates of activities in test scope. It is not enabled by default.

• Dashboard updates added future activity views, filters and drill-through to activity lists; control triggering can launch a control after another control is completed.

• New capabilities include completion notifications for stakeholders, future activities in APIs and bulk download of control attachments.

• Platform activity in 2025 exceeded 511,000 submitted controls, 330,000 reviewed controls and 20,000 risks assessed.

Product roadmap

• Risk insights are planned for the risk module to show how risks develop over time and highlight key changes.

• AI control-description feedback and control-task functionality is planned for Q1, only for organizations that explicitly request access; AI remains disabled by default and is intended to support, not replace, human judgment.

• Other areas under consideration include Excel file previews, postponing activities and improved emails to support control completion.

• Future activities are planned for the Power BI connector; identity-manager provisioning is in development, while a first SAP connector is under technical investigation.

• The 7–8-week release cadence is expected to continue in 2026.

Entity management

• Current tag-based entity handling supports centralized control governance, but local access requires program-level permissions, creating broad data visibility and dependence on global administrators.

• Development aims to establish entity-level governance: global administrators define entities, control scope and local administrators, who can manage local access and assignments.

• The functionality will be opt-in, can run alongside existing arrangements in a hybrid model, and is intended eventually to unify entities used for risk assessment and control management.

• Entity management is a top priority and was in testing; further progress and release timing were expected to be shared at the Q1 2026 update on March 25.

• There will be no set limit on the number of entities.