Changelog

June 2026

Trust Center & Security overhaul

• Launched /trust hub — single entry point for all security and legal surface pages.
• Security page updated to v1.1 with current infrastructure detail, responsible disclosure policy, and access control summary.
• Contact standardised across all trust pages: security@, privacy@, legal@, hello@audit-iq.com.
• Subprocessors page tightened — removed placeholder entries, aligned to active services only.

June 2026

Export redesign

• Compliance report modal redesigned: unified Format + Audience section, readiness elevated above coverage.
• Gate state CTA hierarchy inverted — 'Review first' is now the primary action.
• Locked Client-ready state replaced dashed-border badge pattern with intentional opacity treatment.
• Point-in-time note moved to footer; 'Download' wording replaced with 'Generate'.

April 2026

Audit packs & client deliverables

• Client-safe export mode produces a structured audit pack: cover page, obligation status, evidence summary, and coverage notes.
• Audit hash included on every export for tamper-evident provenance.
• Export history tab tracks all generated reports with download links and metadata.

March 2026

Audit period lifecycle

• Audit periods now support a full lifecycle: Draft → Active → Fieldwork complete → Closed → Archived.
• Closing a period captures a point-in-time readiness snapshot — obligations, controls, evidence, and coverage at the time of close.
• Remediation items surface severity-ranked gaps with linked controls and action tracking (Start, Block, Accept risk, Resolve).

February 2026

Consultant Workspace

• Consultant plan users can now manage multiple client engagements from a single workspace.
• Portfolio view surfaces readiness risk level, trend, and open attention items across all clients.
• Attention queue ranks gaps by severity across all engagements — missing evidence, overdue controls, open findings.
• Client-detail view scopes compliance posture and evidence to a single client engagement.

Version 1.3 — June 2026

• Added legal operator disclosure (RIO ENTERPRISE, India) across Terms, Privacy Policy, DPA, Trust Center, About, and footer.
• Added Australian Consumer Law (ACL) savings clause to Terms §11 and §12.
• Added force majeure, notice, assignment, waiver, and survival provisions to Terms.
• Added 14-day minimum notice period for material Terms changes (§14).
• Added cure period and data export rights to Terms §10.
• Hardened AI processing disclosures: named OpenAI as AI provider across Security, Privacy, and Subprocessors pages.
• Removed 'to be confirmed' qualifiers from Subprocessors; added OpenAI, Fly.io, Zoho Mail.
• Added OAIC complaint pathway and NDB scheme disclosure to Privacy Policy.
• Added specific data retention timelines to Privacy Policy §8.
• Published Acceptable Use Policy v1.0.
• Legal Changelog separated into standalone /legal-changelog page.

Version 1.2 — March 2026

• Added section 9: Billing, Subscriptions & Plan Changes — covering plan upgrades, downgrades, and refund policy.
• Clarified IP ownership in section 6.3 (Outputs).
• Minor language cleanup across sections 4 and 10.

Version 1.1 — February 2026

• Added Data Residency statement and Sub-processors transparency page.
• Strengthened 'Not legal advice' language across app and exports.
• Clarified user responsibility, reliance limitations, and export disclaimers.

Version 1.0 — January 2026

• Initial Terms of Service and Privacy Policy published.