DIRECTIVE (EU) 2019/882 · IN FORCE SINCE 28 JUNE 2025 EU-HOSTED · GDPR-CLEAN
EAA Compliance

CHANGELOG

What changed, and why.

Every release that touches your evidence, your documents or the API. Entries that change API behaviour are tagged, and breaking changes only ever arrive in a new major version. Work done before the platform opened to customers is marked pre-release.

SUBSCRIBE BY WEBHOOK FROM YOUR PORTAL · 1 ENTRIES

17 AUG 2026API
Added

Public API v1 and signed webhooks

Pull coverage, findings, the ledger and generated documents into your own systems, and stop polling: six events are delivered with an HMAC signature and retried for hours.

  • A scan requested over the API is capacity-metered like any other, returning 409 rather than pretending.
The API cannot declare compliance.No endpoint resolves a finding, signs off a criterion or sets a compliance status. Those are earned by evidence.

OLDER ENTRIES ARE KEPT INDEFINITELY — A CHANGELOG YOU CAN PRUNE IS NOT A RECORD