Platform
- Multipart form data support: The HTTP connector now supports multipart form data requests, enabling file uploads and complex payloads through verification flows
- URL encoding control: Added an option to disable automatic URL encoding in HTTP connector requests, giving integrators more control over outbound API calls
- Execution UUID stability: Fixed an issue where execution UUIDs could change mid-flow, improving traceability across distributed processing steps
- File download MIME types: Improved MIME type handling for file downloads, ensuring correct content-type headers in API responses
- Component config resolution: Reworked how component configuration versions are resolved at registration time, fixing edge cases where stale configs were served
- Sharable processor improvements: Fixed issues with the SharableProcessor and improved error handling for edge cases in distributed state management
- Documentation sync: Migrated platform documentation to the new ReadMe-hosted site with fixed links and consistent navigation
Studio
- Centralized deployments: Deployment jobs have been migrated to a central deployments repository, standardizing the release pipeline across environments
- Improved session handling: Unauthenticated users are now redirected properly, and target unlock behavior on logout is more reliable
- Cognito permissions update: Updated Amplify and Cognito integration with improved admin query permissions and Node.js version alignment
- E2E test workflow improvements: Restructured end-to-end test pipelines with better environment handling, workflow naming, and dependency management
Client SDK
- Parent page notifications: The embedded SDK now properly relays completion and status notifications to the parent page via the embedding event system
- File upload error recovery: When a file upload fails, all partially uploaded files are now properly cleaned up instead of leaving partial state
- PDF preview fix: Fixed PDF document placeholders that failed to load in certain verification card scenarios
- Phone input country code: Resolved a bug where phone inputs could display only the country code without the number
- Dependency audit: Updated all dependencies to address known security vulnerabilities
Compliance Hub
- Risk score engine: New risk scoring system that calculates total risk from category-based variables, displays all score components including zero-value items, and loads country values from Alpha-3 code global value sets
- Multi-language verification emails: Verification request emails and SMS messages now use the language-specific email template, with language passed through the tokenizer link
- Automation rule diagnostics: The system now detects and records why automation rules fail, creating detailed result records that explain which conditions were not met
- Biometrics UI configuration: The biometrics section is now configurable through settings, with new positive check values for more granular pass/fail indicators
- User-friendly error messages: Replaced cryptic error messages with clear guidance when Hub settings are missing, Remote Site settings are not configured, or unexpected data formats are received
- Verification link tokenization: Improved the SMS verification link flow to validate tokenizer configuration before sending, preventing broken links
- Risk score labels: The risk score component now displays user-friendly labels instead of API names for single-select and multi-select variables
- Requirement cloning: Added the ability to clone existing verification requirements along with their associated documents, streamlining setup for similar verification types