Version history.

Versions

• 2026-10-08Corrects three rows. Artifact sandboxing blocks fetch, XHR and WebSocket calls but is not full network isolation: scripts, styles, images and fonts can still load from four pinned CDN hosts. The CLI is no longer described as released. The CLI keeps provider keys in owner-only files on Linux or when the keyring is turned off. The DPDP parental consent row is corrected for the new age rule: web sign-up now asks for an age and refuses anyone under 13, but the age is self-declared and no parental permission is verified, so the row still reads Not implemented. The date at the top is now labelled Last updated, not Last reviewed. The next review date is unchanged. Current version
• 2026-09-21Corrects three rows against the code: release signing covers the macOS desktop app only, as there is no Windows build; business continuity says the host-neutral restore drill runs every week and only the production database has no scheduled restore test; and security event logging adds the log of each call a connector makes. Records the 21 September review of the subprocessor list, re-measures row-level isolation and the protected route groups, and says /status runs its checks at most once a minute. This version applied until the version dated 2026-10-08 replaced it on this site. Read this version
• 2026-09-12The earliest recorded version. This version applied until the version dated 2026-09-21 replaced it on this site. Read this version

A version’s date is the day its text was settled, which can be earlier than the day this site published it. Earlier versions are shown for reference only; the current version is the one that applies.