Klari

Changelog

What's new in Klari.

We publish a changelog entry whenever a customer-visible release ships. Internal changes (refactors, infrastructure work, test improvements) land in commits but not here.

  1. 2026-08-22

    Trust Centre live

    • Trust Centre publishing pipeline — legal documents are published from markdown with a version number, an effective date and a SHA-256 over the canonicalised source, and the downloadable PDF is rendered from the same markdown that is published.
    • Privacy notice published as v1 at /trust/privacy. /privacy now redirects there. The remaining Trust Centre documents are still in legal review and render as 'In preparation'.

  2. 2026-08-21

    DPIA sign-off controls and organisation authorisation

    • DPIA segregation of duties enforced in the database: the reviewer and the DPO countersignatory must be different people, with a documented single-signer exception for organisations that have only one eligible approver. The exception is recorded on the record, written to the audit log and printed on the DPIA PDF.
    • Two-axis authorisation for organisation edits — admins may edit the organisation profile and NDPC registration; billing and identity columns are withheld from every authenticated role by column-level grants.
    • Cross-border transfers are now validated at publish, with an error naming the offending row. Fixes: DPIA step 1 saves, RoPA compliance flags can be un-ticked again, and 'Save & exit' no longer 404s.

  3. 2026-07-20

    Domain split, auth redesign, evidence crons

    • klari.ng now serves the marketing site and app.klari.ng serves the authenticated product, enforced by host at the proxy layer. The marketing site no longer carries a Sign in link.
    • Redesigned split-screen /login and /invite on their own minimal shell.
    • Self-serve 'create another organisation' for existing users.
    • Evidence janitor and hash-maintenance crons, a /api/health endpoint and automated uptime checking against it.

  4. 2026-05-18

    Trust Centre, Billing and DPCO surfaces

    • A customer-facing /billing surface showing plan, billing status and issued invoices. Invoicing is manual in V1 — invoices are raised by Klari and paid by bank transfer; there is no self-serve card payment.
    • DPCO settings — record the licensed Data Protection Compliance Organisation your organisation files through.

  5. 2026-05-17

    V1.5 — Bulk import, NDPC registration helper, CAR generator

    • Bulk RoPA CSV import with a downloadable Klari template, per-row preview with status badges, and atomic many-row commit via a SECURITY DEFINER RPC.
    • NDPC registration helper — 5-step wizard capturing CAC, RC, registered address, sector, DPO identity, and appointment letter. Produces a submission PDF and a formal DPO appointment letter PDF.
    • CAR (Compliance Audit Return) dossier generator — 12-section PDF compiling every RoPA, DPIA, cross-border transfer, technical/organisational measure frequency, and audit summary in one document, with dataset and document SHA-256 printed on the cover.
    • Commercial scaffolding — pricing, security, terms, DPA, customers, about, contact, changelog, and cookie-policy pages.

  6. 2026-05-15

    V1 polish + Settings (M7)

    • Settings → Members live: invite by email (branded HTML), role changes with owner-only and last-owner protections, revoke, remove.
    • Settings → Profile + Organisation editors.
    • Dashboard refresh: action-items strip, four stat cards, recent activity feed, role-aware quick actions.
    • PDF redesign: Geist Sans + Mono registered; cover composition tuned; sign-off summary lifted to the cover meta grid.

  7. 2026-05-12

    V1 feature-complete: RoPA + DPIA + Audit + Evidence

    • RoPA Builder — 8-step wizard with save-and-resume, transfers child rows, publish flow.
    • DPIA Workflow — 7-step wizard with risk register, reviewer + DPO sign-off, A4 PDF with band-tinted risk cells.
    • Audit Log + Evidence Locker — full timeline UI with family filters, date range, click-to-expand, CSV export. Cross-feature Evidence Locker with parent-resource jump-links.

  8. 2026-04-26

    Foundation (M0-M3d) shipped

    • Multi-tenant organisations + memberships + RLS, with a 20+ assertion cross-tenant harness in CI.
    • Magic-link auth via @supabase/ssr, Resend transactional email, Sentry EU error monitoring.
    • Design tokens shipped to app/globals.css.