[{"data":1,"prerenderedAt":215},["ShallowReactive",2],{"changelog-2026-10-19-desktop-apps-guided-setup-scheduled-reports":3,"changelog-2026-10-19-desktop-apps-guided-setup-scheduled-reports-surround":204},{"id":4,"title":5,"api":6,"authors":7,"body":13,"category":116,"date":117,"description":118,"extension":119,"faq":6,"features":120,"fixes":152,"highlight":169,"image":178,"improvements":180,"meta":198,"navigation":199,"path":200,"seo":201,"stem":202,"summary":6,"updated":6,"__hash__":203},"posts\u002F3.blog\u002F2026-10-19-desktop-apps-guided-setup-scheduled-reports.md","episki for macOS, Windows, and Linux",null,[8],{"name":9,"to":10,"avatar":11},"Justin Leapline","https:\u002F\u002Fwww.linkedin.com\u002Fin\u002Fjustinleapline\u002F",{"src":12},"\u002Fimages\u002Fjustinleapline.png",{"type":14,"value":15,"toc":112},"minimark",[16,26,29,36,42,57],[17,18,19,20,25],"p",{},"The desktop app is episki in its own window, on macOS, Windows, and Linux, with the things a browser tab cannot do: workspace tabs that remember where you were, notifications that reach you when the window is in the background, and updates that install themselves. It uses the same login and the same data as the web app, so nothing changes about how you work — only where. Get it at ",[21,22,24],"a",{"href":23},"\u002Fdownload","episki.com\u002Fdownload",".",[17,27,28],{},"The other half of this release is about the first week and the fiftieth.",[17,30,31,35],{},[32,33,34],"strong",{},"The first week is guided setup."," A new workspace no longer lands on an empty dashboard and a checklist. It walks you through one decision at a time — what you are, which frameworks fit, what scope, when the audit is — and finishes with a plan dated back from that audit. Frameworks adopted together are mapped to each other on the way in, and the policy-writing tasks are already in the agent's hands.",[17,37,38,41],{},[32,39,40],{},"The fiftieth week is scheduled reports."," A report used to compute in your browser, which meant someone had to open it. Now a report runs on a schedule, is frozen when it runs, optionally waits for an approver, and is emailed to whoever needs it — inside the workspace or not. The board gets the same numbers you reviewed, every month, without anyone remembering to send them.",[17,43,44,45,48,49,52,53,56],{},"In between, the app got easier to read. ",[32,46,47],{},"Programs, Assessments, and Vendors open on an overview"," instead of a table, ",[32,50,51],{},"approvals live in the Inbox",", and ",[32,54,55],{},"mapped controls are visible wherever a control is",", so evidence you attach once can count everywhere it should.",[58,59,60,67,73,79,85,94,100,106],"ul",{},[61,62,63,66],"li",{},[32,64,65],{},"Desktop apps"," for macOS, Windows, and Linux",[61,68,69,72],{},[32,70,71],{},"Guided setup"," from signup to a dated implementation plan",[61,74,75,78],{},[32,76,77],{},"Scheduled reports"," with approval, external delivery, and expiring links",[61,80,81,84],{},[32,82,83],{},"Whole-workspace reports"," and five new templates",[61,86,87,90,91],{},[32,88,89],{},"Approvals in the Inbox"," and ",[32,92,93],{},"overview dashboards",[61,95,96,99],{},[32,97,98],{},"Mapped controls everywhere",", per-scope owners, and evidence renewal tasks",[61,101,102,105],{},[32,103,104],{},"A services directory"," for auditors, QSAs, and vCISOs",[61,107,108,111],{},[32,109,110],{},"Per-instruction PCI responses"," and a ROC table that matches the template",{"title":113,"searchDepth":114,"depth":114,"links":115},"",2,[],"changelog","2026-10-19","The episki desktop app is here for macOS, Windows, and Linux, with tabs for every workspace, native notifications, and automatic updates. Plus a guided setup wizard for new workspaces, scheduled reports delivered by email, approvals in the inbox, overview dashboards, mapped controls everywhere, a services directory, and per-instruction PCI responses.","md",[121,124,127,129,132,135,138,140,143,146,149],{"label":122,"text":123},"Onboarding","New workspaces start in guided setup, a one-question-per-screen wizard that replaces the old setup hub. Tell it about your company, get a framework recommendation, adopt frameworks with scope (SOC 2 categories, ISO 27001 with Annex A) and cross-framework control mapping, set audit dates, connect integrations, add policies, evidence, and teammates — every step skippable and resumable. It ends with an implementation plan scheduled back from your audit date, with document-writing tasks handed to the episki agent to draft for your review.",{"label":125,"text":126},"Reports","Reports can now run on a schedule. Each run is rendered on the server and frozen, so what was reviewed is exactly what was sent. Schedules take a cadence and timezone, an optional approver with a review window, workspace members, and outside recipients. Members get a link into episki; executives, customers, and auditors get the report in the email plus a private link that expires in 30 days and can be revoked.",{"label":125,"text":128},"Whole-workspace reports with four new blocks — risk posture, third-party risk, goals progress, and trust center activity — and five built-in templates, starting with an Executive GRC Summary. Preview any template against your real data before creating the report.",{"label":130,"text":131},"Inbox","Approvals moved into the Inbox as a tab, and approvals waiting on you sit at the top of Priority. One badge for everything waiting on you, red when an approval is past due.",{"label":133,"text":134},"Overviews","Programs, Assessments, and Vendors open on an overview dashboard — coverage by program, assessments by status and due date, vendors by tier and review status, contracts ending soon. Every tile and bar drills into the list with the filter already applied, including a Failing controls tile that lands on exactly those controls.",{"label":136,"text":137},"Controls","Mapped controls show everywhere — on the control, in hover cards, in the side rail, and in a new Controls → Mappings grid. After linking evidence to a control, episki offers to attach it to the controls it maps to.",{"label":136,"text":139},"A control can apply to only some of a program's scopes, and can have a different owner per scope.",{"label":141,"text":142},"Evidence","Expiring, control-linked evidence raises one Renew task automatically, and an upload that looks like a newer copy of existing evidence asks whether it is a renewal.",{"label":144,"text":145},"Services","A curated directory of auditors, CPA firms, certification bodies, QSAs, vCISOs, and pen testers. Request an introduction from inside episki and our team makes it personally.",{"label":147,"text":148},"PCI","Each reporting instruction gets its own Assessor's Response, as the ROC template has it. The ROC requirements table now matches the template — one row per instruction, the testing procedure spanning them, and the template's own colors in print and PDF.",{"label":150,"text":151},"Chat","The assistant can read your dashboard metrics and explain why assurance moved — a newly adopted framework, or which lapsed evidence pulled it down. The composer shows the page you are on as a removable context chip and stays pinned to the bottom of the panel.",[153,156,159,162,164,167],{"label":154,"text":155},"Security","A hardening pass closed a path for guests to write catalog controls, forced evidence version history to be server-assigned, tightened who can set or change a report approver, and routed every fetch of a tenant-chosen URL through one DNS-pinned client that refuses private addresses.",{"label":157,"text":158},"Email","Mail is no longer lost or sent twice under load, failed wakeups are surfaced, and email buttons render as buttons.",{"label":160,"text":161},"Integrations","A partial sync no longer marks an integration as having stopped collecting, and Microsoft Graph page walks are bounded and retried instead of timing out.",{"label":141,"text":163},"Attachments on assessment responses now reach their controls, and the control shows what counts toward it.",{"label":165,"text":166},"Activity","Events that share a timestamp are no longer skipped when paging the feed.",{"label":125,"text":168},"The Reports page no longer opens blank, PDF export keeps its charts, and pressing Esc in a dropdown no longer closes the whole create form.",{"title":170,"description":171,"icon":172,"items":173},"episki on your desktop","GRC work is a lot of open records — a control, the evidence behind it, the risk it treats, the assessment asking about it. In a browser those get lost among everything else you have open. The desktop app gives episki its own window, with tabs per workspace that persist and reorder by drag, alerts as native system notifications with an unread count on the dock or taskbar, and updates that download in the background when you approve them. Sign in with the account you already have; everything syncs with the web app.","i-lucide-monitor-down",[174,175,176,177],"macOS 12 or later as a universal .dmg for Apple silicon and Intel","Windows 10 or later as an installer for x64 and Arm64","Linux as a self-updating AppImage or a .deb package","Download from episki.com\u002Fdownload — the page picks your platform",{"src":179},"\u002Fimages\u002Fchangelog\u002Fdesktop-apps-guided-setup-scheduled-reports.webp",[181,184,187,190,192,195],{"label":182,"text":183},"Lists","Saved views show on every tab, including overviews and recurring work.",{"label":185,"text":186},"Work","Evidence requests, investigations, outreach, and decisions have their own status lifecycles instead of starting with no status and offering every status in the workspace.",{"label":188,"text":189},"Support","When episki support needs to look at your workspace, access is a time-boxed session, never a membership. It expires after four hours, cannot exceed twelve, cannot invite members or touch billing, and any workspace admin can revoke it.",{"label":125,"text":191},"Scheduled runs show in their schedule's timezone, and shared run links can be revoked.",{"label":193,"text":194},"Editor","The drag handle stays on the left and report margins are even.",{"label":196,"text":197},"Assessments","A progress card in the side rail, and the back arrow on a report returns to where you came from.",{},true,"\u002Fblog\u002F2026-10-19-desktop-apps-guided-setup-scheduled-reports",{"title":5,"description":118},"3.blog\u002F2026-10-19-desktop-apps-guided-setup-scheduled-reports","p-JMow69-7iWwmW9wFxUl038cLovLRRee2vjwHdmg44",[205,210],{"title":206,"path":207,"stem":208,"description":209,"children":-1},"AWS Permission Updates You Approve in episki, Never Beyond SecurityAudit","\u002Fblog\u002F2026-10-05-aws-self-updating-stacks-dashboard-trends","3.blog\u002F2026-10-05-aws-self-updating-stacks-dashboard-trends","The AWS stack now registers itself, offers AWS's managed SecurityAudit policy, adds baseline posture checks, rolls out across an Organization, and can update itself when you click approve — with a permissions boundary that caps it at SecurityAudit. Plus dashboard trend history, one chat surface with edit and resend, agent sessions in the activity feed, and saved views on every list.",{"title":211,"path":212,"stem":213,"description":214,"children":-1},"Agent-first GRC: what changes when AI runs the program","\u002Fblog\u002Fagent-first-grc","3.blog\u002Fagent-first-grc","Most GRC tools added AI as a feature. Agent-first GRC treats agents as the operator — drafting policies, answering questionnaires, and running the program with humans approving the work that matters.",1792473222419]