diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md
index be531e88f2..56dc9c9ab2 100644
--- a/api/CHANGELOG.md
+++ b/api/CHANGELOG.md
@@ -8,6 +8,7 @@ All notable changes to the **Prowler API** are documented in this file.
 
 - Provider type is validated against the SDK's available providers instead of a static enum, so the API accepts any installed provider (built-in or external); `Provider.provider` is stored as `varchar` and the native PostgreSQL enum is removed [(#11399)](https://github.com/prowler-cloud/prowler/pull/11399)
 - Compliance framework discovery is sourced from the SDK's available providers instead of a static enum, so an externally-registered provider's compliance frameworks are discoverable without API changes [(#11410)](https://github.com/prowler-cloud/prowler/pull/11410)
+- Compliance report availability (ThreatScore, ENS, NIS2, CSA) is derived from the provider's available compliance frameworks instead of hard-coded provider whitelists, so a provider that ships one of these frameworks gets the report without API changes [(#11412)](https://github.com/prowler-cloud/prowler/pull/11412)
 
 ---