Overview
This article details the capabilities of the Credo AI commenting system across both internal and external portals. Comments in Credo AI serve as a central channel for communication and coordination among stakeholders, enabling organic discussions, clarifications, and the documentation of decision-making context within the platform.
Users typically create and respond to comments within the context of a Use Case and its related entities. Currently, comments are supported in the following scenarios:
- Comments applicable to entire Use Case
- Comments on individual questions within a Use Case questionnaire
- Comments on individual controls within Use Case linked risk scenarios
Comments can now be created at any point in the Use Case life cycle , not just while a review is in progress. Comments persist on the Use Case after a review is closed, although they are captured and remain in that state in review history snapshots.
Credo AI is enhancing its commenting system to provide a more unified experience across the platform. The following text provides a brief summary of the changes.
Where can comments be added
- Use Case: General comments appear in the lower right sidebar.
- Questionnaire Section: Each individual question supports inline commenting.
- Control: Previously “notes”; now supports full commenting functionality.
- Control Requirement: Evidence and requirement-level comments are supported.
- Reviewer Panel Feedback: Comments originating from review actions (e.g., Reject, Request Changes) are treated separately from general comments
Permissions
Internal Users
Comment creation & editing
- Internal users can initiate comments across all entities mentioned above.
- Internal users can tag other internal users in comments.
- Internal users can assign Questionnaire sections and Controls to External users, and chat with External users via comments in the respective UI areas. External users can see the entire history of the specific Credo AI entity once they are assigned to that entity. Admin users can create a comment thread on any Use Case. Other users can create comments on Use Cases where they are owner, stakeholder or a reviewer.
- Admin users can resolve any comment thread on any Use Case. Stakeholders (owners/contributors) can resolve any comment thread on their Use Cases.
- Only the comment author can update individual comments they create.
- Only an admin user or the comment author can delete a comment.
Viewing comments
- Admin users can view any comment thread in any Use Case.
- Stakeholders (owners/contributors) can view any comment thread in their Use Cases.
- Users assigned to a Use Case questionnaire section or control can view comment threads on those assigned sections and controls.
External Users
- Can view & reply to comments.
- Can initiate comments on Questionnaire sections and Evidence Requirements that are assigned to them. External users cannot search or tag internal users via “@” option.
- External users cannot resolve any comment thread, even if they started the thread.
- External users assigned to a Use Case questionnaire section or control can view comment threads for resources attached to those assigned sections/controls.
Note
- Only one comment thread can be active per resource at any given time.
- Comments cannot be created in resolved threads.
Commenting on Use Case
Use Case level comments can be used for recording asks, responses, clarifications and agreements on any topic within that Use Case. These comments are at the level of the Use Case and not tied to a specific Use Case component.
- To initiate the comment, look for the comment dialog in the bottom-right section of Use Case Overview screen. Type your comment and click on “Send Comment” button to send the comment.
- You can tag individual internal users via “@” in Use Case level comments. Tagging Teams and External Users is not supported.
Screenshot: Typing in a new comment
Screenshot: New comment submitted
To reply to a comment, click on the “Reply” button and type your answer.
Commenting on Questions & Controls
Internal users can comment on individual questions in a questionnaire section by clicking the Comment icon shown below.
Questionnaire sections can be assigned to External users via the “Assigned to:” option. External users will see the section appear as a Task in the External user portal. External users can then initiate a chat with the internal users by typing a message in the Comment section.
Commenting via External User Portal
External users can now view and interact with comment threads on resources assigned to them through the External Use portal, thus enabling better collaboration. The following screenshot shows a view of the External User portal, where a questionnaire section and a Control have been assigned.
Message typed by Internal User (Admin) on a Control assigned to External User.
Message as seen on the External User portal.
For developers
You can refer to the Comments API guide for details on how to programmatically access Credo AI comments.
Summary of Major Changes in v19.0
- Comments are no longer limited to the “Review” status. Comments can now be initiated in any stage of a Use Case, including “Clear.”
- Unified concept of comments.
- Previous “Notes” have been deprecated and migrated into the new comments system.
- One active comment thread is supported per resource-control pair. Older threads are marked as resolved but remain visible under resolved filters.
- Expanded commenting capabilities. Internal users can now comment.
- Outside the review flow.
- At multiple levels within a Use Case (details below).
- Only one active comment thread per control/resource pair is allowed.
- “Notes” previously could have multiple active threads per control, but as a part of the new unified comments system, they will adhere to the same limitation of one active thread per control at a time.
- Comments on Use Case controls are now included in the review history snapshots along with the rest of the comments, as a part of the unified comments system.