Week of April 27​

🚀 Features Added​

• Vera MCP write tools — Vera can now take action through external AI clients like Claude, Cursor, and Windsurf. Five new write tools let you add systems, create assessments, answer assessment questions, update assessments, and associate processing activities — all from your AI client. Write tools are off by default and require explicit admin enablement per user. A new MCP Logs page provides full visibility into every tool call.
• Bulk edit system profiles — you can now select multiple systems and edit processing activities, contacts, and assessment fields (legal basis, legal role, processing countries, data subjects, personal data categories) in a single operation.
• Assessment insights — AI-powered suggestions now surface potential risks and system data recommendations directly on assessments, helping you identify gaps faster.
• Local and session storage scanning — consent controls now extend beyond cookies to localStorage and sessionStorage. You can detect storage keys, review unmanaged storage activity alongside cookies, block storage reads and writes based on consent state, and apply Vera-suggested rules based on detected patterns.
• Global search by UUID and phone number — you can now search for tickets by pasting a UUID or typing a phone number in any format. Phone numbers are normalized automatically, so "(415) 555-1234", "+14155551234", and "4155551234" all find the same ticket.
• Readiness checks for custom direct contact integrations — you can now send automated readiness checks during request initialization to collect a response from an internal team before deciding how a request proceeds. Define a custom question, provide structured response options, and use the answer to drive conditional workflow logic.
• Delay execution workflow action — a new "Then delay execution" action node lets you insert a configurable pause (in hours) between workflow steps, giving upstream integrations time to finish processing before the next action runs.
• Assessments "Date Approved" column — the Assessments table now includes a sortable "Date Approved" column so you can see when each assessment was approved directly from the list view.

🛠 Changes Made​

• TSV download format options — when downloading request results as a TSV, you can now choose between rows (each record as a row) or columns (existing behavior), making large datasets easier to review and filter.
• Vera search history — removed the one-year lookback limit so Vera can search further back in your request and ticket history.
• Integration error banners — disconnected integration warnings now display as separate, clearer banners for transactional mailers and cloud storage, with improved error detection for sender issues.
• Released rm-agent:v1.0.5 - Fixed Valkey permissions in Docker container to enable deployments on Cloud Run and other container orchestration platforms with strict security contexts.

🐛 Bugs Squashed​

• Resolved an issue where Vera included closed and completed requests when answering questions about overdue privacy requests.
• Resolved an issue where deleted GTM tags still appeared in the consent banner tracking services shown to end users.
• Resolved an issue where DSR notification emails showed the wrong workflow state.
• Resolved an issue where policy names in the request modal dropdown didn't match the Policies page.
• Resolved an issue where the "Other" close reason was missing from the Bulk Close Requests modal.
• Resolved an issue where changing a consent tag's category didn't update in the UI.
• Resolved an issue where consent audit log CSV and TSV exports downloaded with the wrong file extension.
• Resolved an issue where a consent locale could not be re-enabled after being disabled.
• Resolved an issue where Privacy Request Center translation generation failed for certain locales.
• Resolved an issue where parent systems in the grouped inventory view showed the earliest child system's "date added" instead of the most recent.
• Resolved an issue where large cookie CSV exports timed out.
• Resolved an issue where data exports returned an error when integration data contained decimal numbers.

Week of April 20​

🚀 Features Added​

• Self-service SSO configuration — new customers can now configure their own SSO during onboarding. A secure link lets you choose your SSO provider (Google Workspace, Microsoft Entra ID, or custom SAML), enter your identity provider details, and activate SSO.
• Rokt integration — you can now connect Rokt in Request Manager to process deletions via API.
• Out-of-the-box consent layouts — new customers now start with three pre-configured consent layouts: GDPR (EU + UK), CPRA (California), and a Default fallback for all other locations. You can publish immediately and be compliant across the most common regulations from day one.

🛠 Changes Made​

• HubSpot integration upgrade — new HubSpot connections now default to v3 of the API. Existing v1 connections continue to work.
• "Mark as Verified" for request initialization — you can now mark a request as verified directly during the initialization phase without waiting for automated checks.
• Workflow automation deletion safeguard — you can no longer delete an unpublished workflow while requests are still actively running through it.
• Integrations table layout — the Integrations page now uses vertical space more efficiently, reducing excess whitespace.

🐛 Bugs Squashed​

• Resolved an issue where Pendo returned an error when a visitor was not found.
• Resolved an issue where the email template translations dropdown was missing for some customers.
• Resolved an issue where consent layouts returned an error when updating close behavior or creating new layouts with multi-layer link elements.
• Resolved an issue publishing consent cookie rules to live sites.
• Resolved an issue where adding contributors to assessments returned an error for certain assessment types.
• Resolved an issue where API key group assignment silently dropped the selected group on creation.
• Resolved an issue where consent publishing failed for customers with large Google Tag Manager containers due to API rate limits.
• Resolved an issue where Gladly deletion requests failed when a customer record had been merged.
• Resolved an issue where inbound call transcription incorrectly retried on authorization failures, eventually closing the request as spam.

Week of April 13​

🚀 Features Added​

• Configurable authorized agent verification — you can now choose whether data subjects must verify their identity when an authorized agent submits a request on their behalf. A new "agent only" option skips data subject verification when written authorization is sufficient.
• Customizable Opt-Out intake forms — you can now remove and restore the first name and last name fields on your Opt-Out intake form without affecting other privacy rights. Simplify your form when regulations don't require collecting a name for Do Not Sell requests.
• Vera inline chart visualizations — when you ask Vera questions about trends or distributions, she can now generate interactive charts — bar, line, pie, and scatter — displayed inline alongside her written response.
• Consent Subresource Integrity (SRI) — you can now enable Subresource Integrity for consent scripts, allowing browsers to verify that scripts haven't been tampered with before they run. Toggle SRI on in container settings, republish, and swap in the updated script tag.

🛠 Changes Made​

• Multiple user assignments in workflow automation — automation workflows now support multiple user assignment steps, so different stages of a request can be assigned to different team members.
• Safe workflow automation unpublishing — unpublishing a workflow no longer interrupts requests already in progress — they continue through the original workflow to completion.
• Risk register systems column — the Systems column now displays the system name directly for single-system risks and shows logos with hover labels for multi-system risks, making the register easier to scan.
• New Consent developer guides — two new guides for developers who need fine-grained control over how third-party content loads: Progressive Consent covers blocking embedded content behind a consent prompt, and Blocking Page Reloads documents three methods to prevent full-page refreshes when consent preferences change.

🐛 Bugs Squashed​

• Resolved an issue where editing a Merge! integration returned a 403 error.
• Resolved an issue where consent publishing failed for customers with large Google Tag Manager containers due to API rate limits.
• Resolved an issue where daily Okta user syncs timed out for customers with large tenants.
• Resolved an issue where deletion requests submitted via email or API incorrectly triggered verification emails.

Week of April 6​

🚀 Features Added​

• Email templates redesign — email templates have been rebuilt with a redesigned editing drawer, template duplication, language management with one-click translation regeneration, a review and publish flow with preview emails, and multiple template selection at send time.
• Ringside CRM integration — you can now connect Ringside CRM in Request Manager to retrieve personal data via API and process deletions via direct contact.

🛠 Changes Made​

• Customizable Additional Comments section — the Additional Comments section on intake forms is now fully optional. Remove it to eliminate noise from high-volume request queues, or re-add it anytime from the section drawer.
• RoPA CSV export by multibrand group — the RoPA CSV export now respects multibrand group permissions, so your export only includes processing activities and systems for the brand groups you have access to.

🐛 Bugs Squashed​

• Resolved an issue where consent publishing failed for customers with large Google Tag Manager containers (200+ tags) due to API rate limits.
• Resolved an issue where the Consent Mode settings page crashed for customers with incomplete category mappings.
• Resolved an issue where direct contact emails always included an SSO login link even when SSO was not required, blocking recipients without SSO from responding.
• Resolved an issue where users with the Live Data Map Admin role could not access the RoPA tab in Processing Activities.
• Resolved an issue blocking support access.

Week of March 30​

🚀 Features Added​

• Adobe Experience Platform Tags consent integration — you can now connect Adobe Experience Platform Tags (Adobe Launch) properties to manage consent and publish DataGrail.

🛠 Changes Made​

• Webhook data retrieval before deletion — webhook-connected integrations can now retrieve customer data before processing a deletion request.
• Group filter on Processing Activities — you can now filter the Processing Activities page by brand group.
• Multibrand Groups for Suggested Processing Activities — suggested processing activities are now scoped per brand group. A processing activity that exists for one brand no longer suppresses suggestions for another.
• Refactored the Request Manager Agent Terraform module for AWS ECS to support egress-only Agent versions.

🐛 Bugs Squashed​

• Resolved an issue where PDF generation failed when content contained emoji or special Unicode characters.
• Resolved an issue preventing the System Inventory table from scrolling past a certain point for some customers.
• Resolved an error in the System Inventory grouped view for non-admin users.

Week of March 23​

🚀 Features Added​

• Initialization phase for Workflow Automation — a new automated workflow phase that runs immediately when a Privacy Request is submitted. Branch logic based on request source (API, Intake Form, Request Queue), verify identity, send confirmation emails, and extract identifiers — all before processing begins.
• Privacy Inspector 6.0 — a redesigned Chrome extension with new diagnostic tabs for cookies, integrations (Google Consent Mode, Shopify, WordPress, and more), and settings, plus the ability to set consent preferences and open banners directly from the extension.
• Discuss assessments with Vera — after approving a Risk Assessment, you can now ask Vera about the questions, answers, and source documents used during the assessment.
• Group filter on Agents page — users with multiple brand groups can now filter the Agents page by group, matching existing behavior on Systems and Data Classification.
• Multibrand Groups for Processing Activities — you can now assign brand groups when creating processing activities.
• Clear answer selections on Risk Assessments — easily clear radio, dropdown, multi-select, and date answers before an assessment is approved.

🛠 Changes Made​

• Vera chat UI refresh — wider response container, reduced visual density, and improved spacing for a more readable conversation experience.

🐛 Bugs Squashed​

• Resolved an issue preventing Risk Assessment PDF downloads from completing.
• Resolved an issue where email intake misclassified access requests as deletions due to keywords in email footers.
• Resolved an error in Consent audit log exports.
• Resolved an issue where deletion integrations could fire simultaneously instead of following the configured tier order.

Week of March 16​

🚀 Features Added​

• Consent banner preview by location — you can now preview exactly what banner a visitor would see based on geographic location, directly from within DataGrail. No more VPN testing or location spoofing to validate banners across jurisdictions.
• Cross-container sharing for custom tags and services — custom tags are now automatically available across all Consent containers by default, eliminating repetitive manual setup in multi-container environments.
• Added a Gem Integration with access and deletion capabilities on Privacy Requests.

🛠 Changes Made​

• Improved the preview banner UX in Consent layouts.
• Improved Vera top bar responsiveness across different screen sizes.
• Disconnected integration notifications are now scoped to the relevant brand group.
• Integration webhook callbacks now return 409 Conflict for duplicate requests instead of 400, providing clearer signals for retry logic.
• Request Manager agent polling is now ~280x faster (p95 latency from ~3 min to 658ms), meaning Privacy Requests get picked up and processed significantly faster.

🐛 Bugs Squashed​

• Resolved an issue preventing RoPA PDF downloads from completing.
• Resolved an issue causing duplicate elements in Consent layers.

Week of March 9​

🚀 Features Added​

• Wildcard search has been added for Privacy Requests, Systems, Integrations, and Cookies, allowing for more advanced queries within DataGrail using ^ and +.
• The language picker for Consent is now its own asset, allowing you to place it anywhere on your banner.
• Added a Drip Integration with access and deletion capabilities on Privacy Requests.
• Added an MCP tool for DataGrail's Knowledgebase, allowing you to search DataGrail’s knowledgebase documentation from your favorite AI tools.

🛠 Changes Made​

• Multiple improvements to the Vera UI.
• Consent container settings now auto save.
• The third-party disclosures list can now be sorted flexibly.

🐛 Bugs Squashed​

• Resolved an issue preventing some Privacy Requests from moving forward, despite all integrations completing.
• Resolved an issue preventing the Consent Audit Log from downloading for some larger datasets.
• Resolved sporadic 500 errors from Persona Integration on Privacy Requests.

Week of March 2​

🚀 Features Added​

• Released DataGrail's Model Context Protocol (MCP) Server, allowing you to interact with DataGrail through AI tools like Claude and ChatGPT.
• Added OIDC support for DataGrail login.

🛠 Changes Made​

• Refreshed the Risk Assessments UI for easier navigation and readability.
• The language picker on the Privacy Request Center now shows translated language names.

🐛 Bugs Squashed​

• Resolved an issue creating inconsistencies when sorting or using filters on the System Inventory.
• Resolved an issue causing some managed trackers to appear in the New Uncategorized Trackers email.
• Resolved a PDF encoding issue when exporting content from DataGrail.
• Resolved an issue creating some inconsistencies with the Risk Assessment Contributor status.
• Resolved an issue preventing the Risks table from being visible on System Profiles.

Week of February 23​

🚀 Features Added​

• Policies can now be added directly through the DataGrail app, giving your team full control of policies within DataGrail.
• Released a Shopify System Detection Integration, allowing your team to automatically surface systems from connected Shopify instances.
• Vera now features a unified search bar that lets you search across the entire platform. Type a query and instantly see results from Requests, Opt-Outs, Integrations, Assessments, Data Map, Workflows, Policies, Agents, and Processing Activities.

🛠 Changes Made​

• Risk Register risks can now be deleted.
• Vera responses are now streamed, so you can see answers formed in real time.
• When test mode is enabled for Consent, events are logged so you can validate behavior and confirm events are firing as expected.
• Agents can now be deleted.

🐛 Bugs Squashed​

• Resolved an issue causing some downloaded PDFs to display a missing font error.
• Resolved an issue preventing detected risks from being sorted correctly in the table.
• Resolved an issue preventing categories from being autoselected on Access Categories requests.

Week of February 16​

🛠 Changes Made​

• Multiple Vera UI improvements to make interacting with the search bar easier.
• Children of Internal System Integrations now inherit the multibrand group of the parent.

🐛 Bugs Squashed​

• Resolved an issue blocking Appsflyer deletion for some customers.
• Resolved an issue causing Salesforce to show as disconnected for some customers, despite a successful connection.
• Resolved an issue causing some invalid direct contacts to show in the Expired Direct Contact Summary email.
• Resolved an issue causing Marketo to show as disconnected for some customers, despite a successful connection.

Week of February 9​

🚀 Features Added​

• Direct Contact Integration duration can now be adjusted per Request Policy, allowing for specific control of processor SLA by location.
• Privacy Request start time can now be configured by Request Policy, allowing you to "start the clock" either when the request is created or verified.

🐛 Bugs Squashed​

• Resolved an issue preventing some assessment PDFs from being downloaded.
• Resolved an issue preventing some Shopify Integration deletions from completing.
• Resolved an issue blocking some Privacy Requests from moving to the next workflow step after all integrations were complete.
• Resolved an issue installing the GitHub Integration.
• Resolved an issue requiring some Privacy Requests to enter the wizard step, despite having an automation setting to skip it.

Week of February 2​

🚀 Features Added​

• You can now detect systems through the new Cisco Umbrella Integration.
• You can now opt out data subjects through the Salesforce Integration.

🛠 Changes Made​

• Privacy Request voicemails can now be downloaded at any stage of the workflow.
• The Discovered Integrations page now includes a filter for detected risk level.
• Migrated the Shopify Integration to the GraphQL Admin API.

Week of January 26​

🚀 Features Added​

• Added support for the following languages in Request Manager and Consent: Indonesian, Hindi, Arabic, Korean, Malay, Thai, and Chinese (Simplified & Traditional).
• Added anonymization support for the Oracle Opera Cloud Integration on deletion requests.
• The Tracking Details asset can now group entries by name or vendor, allowing for better organization when many tracking services are listed.
• Tracking services can now be exported from DataGrail as JSON to support programmatically generated cookie policies.

🛠 Changes Made​

• Multiple System Inventory performance optimizations, resulting in a 98% speed improvement.
• System Inventory items are now grouped by system to make larger inventories more manageable.
• Multi-Brand users will now only see integrations associated with their group/brand, except for the Super Admin role.
• New integration processing options in Workflow Automations
  • Skip all - Don't process any remaining integrations
  • Process all - Process every integration
  • Process by brand - Only process global integrations + integrations assigned to the request's brand/group

🐛 Bugs Squashed​

• Resolved formatting issues when filtering the integration list by a multi-brand group.
• Resolved an issue processing identifiers for some multi-brand groups.
• Resolved an issue preventing the specific location for Opt Out Requests from showing.

Week of January 19​

🚀 Features Added​

• Suggested Processing Activities can now be dismissed.
• Discovered Integrations can now be filtered by type.
• Terraform module to support deploying Request Manager Agents in AWS Elastic Container Service (ECS).

🛠 Changes Made​

• Improved error message UI on the login page.

🐛 Bugs Squashed​

• Resolved an issue causing some scanned cookie domains to show as obfuscated.
• Resolved an issue blocking some Amplitude Integration deletions when the provided User ID is an email address.
• Resolved an issue preventing some users from being identified with the Cordial Integration.

Week of January 12​

🚀 Features Added​

• Risks that are created within assessments are now available on a new Risks tab on the Assessment Overview page for an easy overview.
• Released Consent Plugins for WordPress and Shopify, allowing consent preferences to be sent to the platform from DataGrail automatically.

🐛 Bugs Squashed​

• Resolved an issue preventing some months from being included on the Consent Dashboard and Audit Logs.

Week of January 5​

🚀 Features Added​

• Enhanced wildcard rules have been added for Cookie Management, allowing you to better categorize consistent cookie patterns.
• Released Unmanaged Cookie Behavior controls for Consent, allowing you to treat unmanaged cookies as classified under a category, or even block and delete all unmanaged cookies.
• The complete Consent Audit Log is now available by month directly within the DataGrail app.

🛠 Changes Made​

• Readability improvements to the integration list.
• Added the ability to archive unmanaged cookies that are not relevant or adding noise to the list.
• Introduced batch deletion for the MailChimp Integration, offering better processing efficiency for high-volume customers.

🐛 Bugs Squashed​

• Resolved an issue causing the Inspectlet Integration to fail on some Privacy Requests.

Week of December 15​

🚀 Features Added​

• Introduced the Browser Signal Notice Asset and new layout behavior to ensure CCPA compliance.
• Failed integrations on privacy requests can now be retried directly within the app.

🛠 Changes Made​

• Performance optimizations for the AirTable Integration to support better privacy request throughput.
• Added an option to enable whole-record deletion on the Braze Integration to better support high-volume processors.
• Activity Logs on privacy requests more precisely indicate when an integration is skipped vs. when no data is found.

🐛 Bugs Squashed​

• Resolved an issue preventing the consent audit log from being downloaded for some customers.
• Resolved an issue preventing category selections from saving when suggested cookie rules were added.
• Resolved an issue causing the PayPal Integration to fail on some privacy requests.
• Resolved an issue causing the consent publish status to show "In Progress", despite publishes completing successfully.

Week of December 8​

🚀 Features Added​

• Share the services and cookies that are running on your site using the new Tracking Details Asset on the Consent Banner.
• Quickly identify and configure integrations using the new Discovered Integrations page.
• Scan your Mixpanel instance with newly-released Responsible Data Discovery capabilities.

🛠 Changes Made​

• Redesigned the SSO login page for Google and Microsoft SSO users.
• Updated the Webflow Integration for Consent to support the new Webflow API.
• Direct Contact Integrations now use the user-defined integration name in emails to the processor.

Week of December 1​

🚀 Features Added​

• Added new state-specific policies for Rhode Island, Kentucky, and Indiana to ensure your team stays compliant.

🛠 Changes Made​

• Enhanced Live Data Map System metadata, so your team has better context on what systems do and how they process data.
• Improved deletion logic for the Airtable Integration to better support a high volume of privacy requests.
• Standardized all integration names to create better parity between Live Data Map Systems and Request Manager Integrations.

Week of November 24​

🚀 Features Added​

• Control access to the DataGrail platform through Multibrand Group Permissions, which allows you to map your Okta users to the Multibrand groups within the DataGrail app.

🛠 Changes Made​

• Integration connection attempt errors are now surfaced on the Integration Errors page.
• Released Request Manager Agent v0.14.0 which improves transaction commit handling for deletion requests.

Week of November 17​

🚀 Features Added​

• Configure request policies directly with Self-Service Policy Management. Your team can enable and disable specific policies, edit available privacy rights and durations on policies, and update policy locations.
  • Optionally enable or disable automated policy updates from DataGrail in your Settings.
• Monitor API errors across all integrations via the Integration Errors dashboard, so you can identify trends and take action quickly.

🛠 Changes Made​

• Refreshed the settings page UI, allowing your team to better navigate DataGrail settings.
• Added an optional include_identifiers field to the V2 privacy_requests endpoint.
• Added API deletion to the TeamUp Integration.

Week of November 10​

🚀 Features Added​

• Updates to the Privacy Dashboard that help provide better data for your team:
  • New time filters
  • New Requests by Type chart
  • New Requests by Source chart
• Added a Local Session/Storage blocking plugin for Consent that can block local storage using the Cookie Rules table.
• Custom risk types can now be created in Risk Register.

🛠 Changes Made​

• The title style on the consent banner now publishes as an h2 for SEO, effective the next time you publish.
• Added date filters for Opt Outs Requests.

🐛 Bugs Squashed​

• Resolved an issue preventing requests from exiting "Extracting Identifiers" after identifiers were manually populated.
• Resolved an issue preventing the dashboard from loading when certain filters were applied.

Week of November 3​

🚀 Features Added​

• Risk Register is now connected to Risk Assessments, enabling you to:
  • Flag Risks from Assessments: You can now log a risk directly from an assessment question without disrupting your workflow. Risk Register will display the risk with a source link to the assessment.
  • Prioritize Assessments by Risk: Sort and filter the Assessments table by the number of associated risks.
• US Privacy Strings (whether a user has opted out of data sales) can now be retrieved through the following consent browser console command: window.DG_BANNER_API.getUSPrivacyString()
• New Inflection Integration for Request Manager with API access capabilities.
• Added a search bar to the Opt Out Requests page, allowing you to quickly find requests by email, first name, and last name.

🛠 Changes Made​

• Extracted identifiers are now included in the response to the privacy_requests endpoint on the V2 API.

🐛 Bugs Squashed​

• Resolved an issue preventing custom systems from being edited in System Inventories.
• Resolved an issue causing the publishing status to persist in the Consent UI, despite the process completing successfully.
• Resolved an issue causing the Dropbox and Arity Integrations to sporadically return a 409 error during data extraction or deletion.

Week of October 27​

🛠 Changes Made​

• Improved performance of the Persona Integration on Privacy Requests.

🐛 Bugs Squashed​

• Resolved an issue preventing unverified Opt Out Requests from showing when filters were applied to the table.
• Resolved a timeout error preventing the NetSuite Integration from completing on some Privacy Requests.
• Resolved an issue causing the Entra ID Integration to disconnect for some customers.

Week of October 20​

🚀 Features Added​

• Released the Webhook Integration, which sends notifications of new Privacy Requests, allowing you to process requests in your own systems and report results back to DataGrail.

🛠 Changes Made​

• Daily integration health checks now test email deliverability for Transactional Mailer Integrations.
• Added support for U.S. Government tenants with the Entra ID Integration.
• Added the ability to define and automatically remove certain Hubspot Integration fields from Privacy Request results.

🐛 Bugs Squashed​

• Resolved an issue preventing some systems from being tagged with newly-added Processing Activities.

Week of October 13​

🚀 Features Added​

• Released the Oracle Opera Cloud Integration with access and deletion capabilities in Request Manager.

🛠 Changes Made​

• Improved backend processing of Opt Out Requests to allow requests to be processed more quickly.
• Privacy Requests created via phone are now automatically closed if the Data Subject does not leave a voicemail.
• Long data file strings now wrap in the TSV viewer in Request Manager.
• Released Request Manager Agent v0.10.2, which updates dependencies.
• Released Data Discovery Agent v0.9.1, which updates dependencies.

🐛 Bugs Squashed​

• Updated API endpoints utilized by the Typeform Integration.

Week of October 6​

🚀 Features Added​

• Access Request Results emails can now be resent to Data Subject from the Data Subject Request Details page.
• You can now suppress the final notification email for Privacy Requests from the Data Subject Request Details page or the V2 API.

🛠 Changes Made​

• All actions to close a Privacy Request have been rolled up under the new Close Request action, allowing you to indicate a specific "close reason" and email the Data Subject, if desired.
• Improved the System Detection model to increase breadth and quality of detected systems.
• Token Based Authentication for the Oracle Netsuite Integration is no longer supported. OAuth 2.0 authentication is now required.

🐛 Bugs Squashed​

• Resolved an issue preventing some cookies set on subdomains from being surfaced by the Cookie Scanner.

Week of September 29​

🚀 Features Added​

• Retry failed integrations for any data subject request with the push of a button.
• Webhooks Integrations notify your internal systems when a privacy request is ready for processing.

🛠 Changes Made​

• Policies can now be searched and filtered.
• Privacy Policy Link now displayed for both Cookies and Tracking Services.
• Added policy to support the Maryland Online Data Privacy Act.
• Risks within Data Protection Impact Assessments (DPIA) now support adding optional comments.

🐛 Bugs Squashed​

• Improved error verbiage when attempting to remove an integration currently used in an automation.
• Resolved an issue preventing the Yotpo Integration from successfully reconnecting.

Week of September 22​

🚀 Features Added​

• Ensure requests reach the right systems with a data subject relationship field that can be customized and defined per privacy request policy in the Privacy Request Center, then used in Automations.
• Group Privacy Request Data Files by data category using a new datagrail_category field in your Internal Systems Integration.

🛠 Changes Made​

• Location is now included when exporting Opt Out Requests from within the app.
• Improved performance on the Cookie Management page.
• The group dropdown is no longer required on the Privacy Request Center if the group is passed through the URL.

Week of September 15​

🚀 Features Added​

• Added a Salesforce B2C Commerce Integration to support access requests against Salesforce Commerce Cloud orders.
• Released the Privacy To-Do List, which provides an actionable list of tasks to set up your DataGrail instance.

🛠 Changes Made​

• Updated the Aftership API version to 2025-07.

Week of September 8​

🚀 Features Added​

• Active Direct Contact emails can now be resent to the processor.
• Added support to manually verify Privacy Requests in the "Pending Verification" state.

🛠 Changes Made​

• Consent will no longer throw an error if the site contains an uncategorized data-consent-id on an inline script.

🐛 Bugs Squashed​

• Resolved an issue where some Marketo API calls were malformed.

Week of September 1​

🚀 Features Added​

• Updated the ServiceNow Integration to support customers without the customer_contact table. The sys_user table can now be queried on Privacy Requests.
• Released the Integration Files API Endpoint.
• Added support for custom Entity IDs for Microsoft Entra ID SSO.

🛠 Changes Made​

• The Marketo Integration has been updated to use the Authorization header.
• Opt-Out Requests no longer require the first and last name field.

🐛 Bugs Squashed​

• Resolved an issue preventing the Algolia Integration from extracting data in some cases.
• Fixed a UI issue on the API Keys page.

Week of August 25​

🚀 Features Added​

• Released support to configure default consent categories by policy.
• Released support to configure Do Not Track (DNT) and Global Privacy Control (GPC) signal behavior by policy.
• Released support to honor an Opt Out Request from Request Manager in DataGrail Consent.

🛠 Changes Made​

• Updated the Jira integration to use a new search endpoint under the V3 API.
• Improved retry handling for failed Opt Out Request integrations.

🐛 Bugs Squashed​

• Resolved an issue preventing PayPal data extraction from completing in some cases.
• Resolved an issue preventing DataDog data extraction from completing in some cases.

Week of August 18​

🚀 Features Added​

• Released a Workday Recruiting Integration with access capabilities in Request Manager.
• Released an HR Cloud Recruiting Integration with access capabilities in Request Manager.

🛠 Changes Made​

• User names can now be edited from the DataGrail settings page.
• Improved the performance of the Data Subject Requests page.
• Added alerts for System Profile pages that have newly surfaced data categories from Responsible Data Discovery.
• Systems can now be added to the inventory without an associated Processing Activity.

🐛 Bugs Squashed​

• Resolved an issue preventing some direct contact integrations from being selectable in the "Pending Legal" state.
• Resolved an issue preventing the final notification email from sending on requests denied by a workflow automation.
• Resolved an issue preventing Dropbox from completing data extraction on some Privacy Requests.

Week of August 11​

🚀 Features Added​

• Released a Junction Integration with access and deletion capabilities in Request Manager.

🛠 Changes Made​

• Updated the Mixpanel Integration to use service account authentication.
• Improved the retry logic for failed integrations on Opt Out Requests.
• Released Request Manager Agent v0.10.0
  • Improved APIProxy Connector retry handling for requests when a response status code is not listed in the valid_response_codes or fail_retry_response_codes arrays.
• Released Data Discovery Agent v0.9.0
  • Introduces Bring Your Own Integration (BYOI) adapter which allows integrating data sources via a RESTful API service.
  • Smart Scans enabled which will only scan new tables or tables with new attributes (schemaless not supported).
  • Improved schema scanning by identifying tables by the fully qualified name, including database/catalog and/or schema.

🐛 Bugs Squashed​

• Resolved an issue preventing Privacy Requests from being created using email webhooks.
• Resolved an issue blocking new OAuth integration connections.
• Resolved issues in the Responsible Data Discovery Agent:
  • Fixes syntax error on scientific notation values upon sampling of Databricks datasets.
  • Handles EmptyDataFrame responses for Athena partition queries.
  • Scans only MySQL base tables to avoid scanning views, and others with no table_rows resulting in exceptions.
  • Properly escapes tables with names that are SQL keywords (e.g., group, order, delete) to avoid SQL exceptions.
  • Handles empty collections in MongoDB.

Week of August 4​

🚀 Features Added​

• The Marketo Integration now supports setting custom fields for Deletion and Opt Out Requests.
• Added an option to export individual Processing Activities as a PDF.
• Responses to custom Privacy Request Center questions can now be included on Direct Contact forms.

🐛 Bugs Squashed​

• Resolved an issue blocking Twilio data extraction for some phone numbers.

Week of July 28​

🚀 Features Added​

• Released Intelligent Processing Activities, allowing DataGrail's AI Agent to automatically recommend relevant Processing Activities.
• Added a method to the V2 API to retrieve Opt Out Integrations.
• Added a toggle for Risk Assessment email notifications on the Settings Page.

🛠 Changes Made​

• Increased the expiration time of Risk Assessment contributor links from 24 hours to 7 days.
• Improved rate limit handling for the Facebook Marketing Integration.

🐛 Bugs Squashed​

• Resolved an issue causing some deleted systems to be surfaced again through System Detection.
• Resolved an issue where the Consent Management Admin role could not see the DataGrail Dashboard.

Week of July 21​

🚀 Features Added​

• Launched RoPA Management for Live Data Map.

🛠 Changes Made​

• Updated the Salesforce Integration API to version 62.0 and improved visualization of errors within DataGrail.
• Opt Out Requests that are not verified within 7 days now automatically move to Canceled.
• Improved retry logic for failed integrations on Opt Out Requests.

🐛 Bugs Squashed​

• Resolved an issue preventing additional links from being added to Consent Layouts.
• Resolved an issue preventing the domain filter from working on the Cookie Management page.
• Resolved an issue preventing the Entrata Integration from extracting data on Privacy Requests.

Week of July 14​

🚀 Features Added​

• Released support for custom tables with the ServiceNow Integration. If you would like to include custom ServiceNow tables in Privacy Requests, please reach out to support@datagrail.io.
• Custom Privacy Request Center question responses can now be utilized in Workflow Automations.

🛠 Changes Made​

• Refactored analytics for Consent on the Dashboard, allowing interaction metrics to be filterable by Consent Policy.
• Improved the load time of the Systems page.
• Updated the Segment Integration to handle the "partial success" deletion status.
• Updated the UI for the Privacy Request Details view on an Access Categories request to provide a clearer call to action.

🐛 Bugs Squashed​

• Resolved an issue preventing users provisioned via SCIM from logging in.
• Resolved an issue preventing new images from being added to Email Templates.

Week of July 7​

🚀 Features Added​

• Released the Kount Connect Integration with Access and Deletion capabilities in Request Manager.
• Released the Sift Integration with Access and Deletion capabilities in Request Manager.

🛠 Changes Made​

• The integration list on a Privacy Request is now grouped by Integration Status: integrations with errors are shown at the top, processing in the middle, and complete at the bottom.
• Improved integration error visualization for non-HTTP errors for integrations such as Marketo, SendGrid, and Slack.
• Integrations on deletion requests that do not find data in the "Extracting Personal Data" state will now show Complete: Nothing to Delete instead of Complete: Deletion skipped.
• Improved handling of international phone numbers for data subject verification.
• The "General" Processing Activity can now be removed from Systems.

🐛 Bugs Squashed​

• Resolved an issue preventing custom favicons from showing on the Privacy Request Center.

Week of June 30​

🛠 Changes Made​

• Added caching to the Facebook Marketing Integration to improve efficiency reprocessing failed requests.

🐛 Bugs Squashed​

• Resolved an issue preventing all Processing Activities from being included in the Data Processing Report.
• Resolved an issue blocking some users from being verified when generating Inbound Assessments.
• Resolved an issue preventing Opt Out Request exports from being properly filtered by brand.

Week of June 23​

🚀 Features Added​

• Released Subdomain Sharing for Consent.
• Released an Enteractive Integration with the access capability in Request Manager.

🐛 Bugs Squashed​

• Resolved an issue preventing the API Credentials Manager role from seeing the API Keys page.
• Resolved an issue causing the Request Manager Wizard to skip when the required details were not inputted on a Privacy Request.
• Resolved an issue causing some failed Consent publishes to show as successful.

Week of June 16​

🚀 Features Added​

• Released custom dropdown questions for the Privacy Request Center.
• Released an Arity Integration with the deletion capability in Request Manager.
• Added the Do Not Sell/Share capability to the Marketo Integration.

🐛 Bugs Squashed​

• Resolved an issue causing the MailGun Integration to show as "disconnected" when a domain sending key is configured instead of a private API key.
• Resolved an issue causing the Facebook Marketing Integration to attempt deletion on uneditable audiences.

Week of June 9​

🚀 Features Added​

• Released the beta US Privacy Strings feature for Consent.
• Released email notifications for uncategorized cookies and trackers in Consent.
• Released Sub Domain Choice Sharing for Consent.

🛠 Changes Made​

• Redesigned the PDF Export for Risk Assessments.
• Added support for the Privacy Request Center on multiple domains.
• Multiple "open layer" buttons are now supported on the Consent Banner.

🐛 Bugs Squashed​

• Resolved an issue causing Internal Systems Integrations to show as "disconnected" when the inline data response callback is malformed.

Week of June 2​

🚀 Features Added​

• Released Processing Activities for Live Data Map.
• Detailed error information when connecting an API Integration has been added to Integrations page and includes response codes, request bodies, and headers.

🛠 Changes Made​

• Improved the validation of Data Subject Emails on Privacy Requests.
• Updated the Facebook Marketing Integration API version to v23.0.

Week of May 26​

🚀 Features Added​

• Released a sierra.ai Integration with access and deletion capabilities in Request Manager.
• Released a Reach Integration with the access capability in Request Manager.
• Released an endpoint for Consent Audit Logs in the V2 API.

🛠 Changes Made​

• Improved the System Detection model, allowing for a higher volume of systems to be surfaced.

🐛 Bugs Squashed​

• Resolved an issue preventing Direct Contact Integrations from saving if the processor email included capital letters.

Week of May 19​

🚀 Features Added​

• Added an optional audience parameter on Internal Systems Integrations for use with Auth0.
• Released Request Manager Agent v0.9.3.
  • Resolved an issue where failed Snowflake deletion queries returned success to the orchestrator.
  • Disabled autocommit in the Snowflake connector so that groups of transactions that modify data are atomic.

🛠 Changes Made​

• Optimized the Stripe Integration for customers not using Issuing.
• Added batch deletion to the Qualtrics Integration to improve efficiency processing high volumes of privacy requests.
• Published custom questions can no longer be renamed in the Privacy Request Center to prevent workflows from being interrupted.
• Improved batch deletion with the Amplitude integration.

🐛 Bugs Squashed​

• Resolved an issue preventing identifiers from being fetched on some Privacy Requests.
• Resolved an issue preventing "Request Admin" users from creating Opt Out requests.
• Resolved an issue preventing the assessment_type placeholder from being replaced on emails from the Risk Assessments Product.

Week of May 12​

🚀 Features Added​

• Added a Privacy Request Integrations endpoint to the V2 API.
• Added a Privacy Request Creation endpoint to the V2 API.
• Released Request Manager Agent v0.9.2.
  • Disabled the Request Manager Agent job queue from logging job description, which includes PII, when the LOGLEVEL environment variable is not set to DEBUG.

🛠 Changes Made​

• Improved the deletion of Zendesk Users, avoiding a 422 response in some cases.
• Removed %customer_name% as a required variable on Email Templates.

🐛 Bugs Squashed​

• Resolved an issue preventing identifiers from being included on Internal Systems Integration retries.

Week of May 5​

🚀 Features Added​

• Released the beta "Custom Content Types" feature for Data Discovery, enabling customers to define and identify custom assets in connected systems.
• Added a Privacy Request Index endpoint to the V2 API.
• Added a Privacy Request Policies Index endpoint to the V2 API.

🛠 Changes Made​

• Released improved verification pages for mobile devices.
• Added the ability to archive a Business Process.
• Added batch deletion to the Segment Config Integration to improve efficiency processing high volumes of privacy requests.
• Non-sensitive fields are no longer hidden in the Internal Systems Integration configuration within the app.
• Improved error handling with the Stripe Integration.

🐛 Bugs Squashed​

• Resolved an issue preventing extremely large data files (3GB+) from being uploaded by Internal Systems Integrations.
• Resolved an issue preventing some customers from adding a system to a Business Process.

Week of April 28​

🚀 Features Added​

• Added identifier support for Customer ID with Braintree.
• Released the beta V2 API for Privacy Requests.
• Added support for intake form answers on the V2 API for Privacy Requests and Opt Outs.

🐛 Bugs Squashed​

• Resolved an issue causing the email template editor to become unfocused.

Week of April 21​

🚀 Features Added​

• Added support for Customer ID as identifier with the Stripe Integration.
• Added a "Processing Preference" option and support for User ID as an identifier with the Braze Integration.
• Redesigned the landing pages for email verification and access request download links.
• Released Request Manager Agent v0.9.1.

🛠 Changes Made​

• Improved the rate limiting behavior for the Segment Integration.
• Cookie Rules are now case-insensitive.

🐛 Bugs Squashed​

• Resolved an issue preventing the Jira Integration from showing a "connected" status for some customers.
• Resolved an issue preventing the "Data Processing Report" PDF from rendering correctly for some customers.
• Resolved an issue in Request Manager Agent where MySQL transactions were not properly committed.

Week of April 14​

🚀 Features Added​

• Added a button to download all Risk Assessments as a CSV.
• Added OAuth support for the Klaviyo Integration.

🛠 Changes Made​

• Added the "Sync with Google Tag Manager" button to the Tracking Services page in Consent.

🐛 Bugs Squashed​

• Resolved an issue causing the Risk Assessment PDF to render blank for some users.
• Resolved an issue preventing some custom scripts from being included in the published consent configuration.

Week of April 7​

🚀 Features Added​

• Added the ability to create a Consent Layout for every geolocated Request Policy.

🛠 Changes Made​

• Added a Basic Authentication method for the ZoomInfo Integration.
• Added the deletion capability to the Facebook Marketing Integration.
• Updated the primary font in the DataGrail app.
• Single-character matching rules are now allowed in Cookie Management.
• Added a constraint that prevents integrations from being deleted if they are referenced in a workflow.
• Optimized the load time of the Data Classification page.

🐛 Bugs Squashed​

• Resolved an issue matching some cookies in Consent.

Week of March 31​

🚀 Features Added​

• Launched the beta Group Management feature.
• Launched the beta SCIM Configuration feature with support for Okta.

🛠 Changes Made​

• Improved the rate limiting behavior for the Qualtrics integration.
• Email verification is no longer required for Processor Requests.
• Improved the load time of the Data Subject Requests page by 40%.

🐛 Bugs Squashed​

• Resolved multiple UI issues on the System Inventory page.

Week of March 24​

🚀 Features Added​

• Released Phone Verification for Request Manager.
• Released Inbound Risk Assessments.
• Added a Data Discovery Read role.
• Released Data Discovery Agent v0.7.7
  • Athena Updates
    • Improved support for Iceberg partitioning.

🛠 Changes Made​

• Added a landing page for expired Request Manager verification links, instead of showing a 404.
• Updated the System Inventory Export to include all custom questions.
• Updated the API endpoints used by the Entrata Integration.
• Added note content to Request Manager Activity Logs.
• Prevent the default layer on the Consent Banner from being deleted.
• Add a basic authentication method for the ZoomInfo Integration.

🐛 Bugs Squashed​

• Resolved an issue causing the "Last Edited Date" to be incorrect on some System Inventory Reports.
• Resolved an issue preventing the correct state transition on some Opt Out Requests.

Week of March 17​

🚀 Features Added​

• Released an Intrinsic Integration with API deletion capabilities in Request Manager.
• Released Embedded Deployment for Consent, allowing Consent to be deployed directly on your website, without the need for Google Tag Manager.
• Released Data Discovery Agent v0.7.5 and v0.7.6.
  • Athena Updates
    • Adds workaround for Athena Query Engine 3 limitation.
    • UNLOAD approach used for test connection method.

🛠 Changes Made​

• Added constraints to prevent the default layer on the Consent Banner from being deleted.
• Made the "Download Assessment" button available to all Contributors.
• Added the "Department" and "URL" columns to the System Inventory export.

🐛 Bugs Squashed​

• Resolved an issue preventing Amplitude data extraction from completing successfully on some requests with large amounts of data.

Week of March 10​

🚀 Features Added​

• Released Data Discovery Agent v0.7.4
  • Athena Updates
    • Supports boolean type partitions.
    • Transitions to using UNLOAD from CTAS for temporary results to simplify IAM policies.

🛠 Changes Made​

• Improved retry logic for the Facebook Marketing Integration.

🐛 Bugs Squashed​

• Resolved an issue preventing data from being identified in Salesforce Commerce Cloud when the email was present in mixed case.

Week of March 3​

🚀 Features Added​

• Added Support Access functionality.
• Released Data Discovery Agent v0.7.2 and v0.7.3.
  • Athena Updates
    • Added support for configuring multiple databases for scanning with one integration.
    • Added support for date type partitions.
    • Improved support for Iceberg partitions.
    • Optimized schema scans.
  • BigQuery Updates
    • The require_partition_filter is now honored when performing table samples.
    • The integration will now report on individual, dataset schema scan errors and only fail if all datasets are unqueryable.

🛠 Changes Made​

• Improved the load time on the Data Subject Requests page.

🐛 Bugs Squashed​

• Resolved an issue causing some deleted data subject relationship options to show in the wizard.
• Resolved an issue causing Facebook Marketing to encounter an error on some Opt Out requests.
• Resolved an issue preventing the rate limit for the Marketo Integration from being honored in some cases.
• Resolved an issue preventing the "success" modal from showing after a Consent publish.

Week of February 24​

🛠 Changes Made​

• Updated the FreshService Integration to make the "Itil Module" feature optional.
• Adding a new Integration will now always create a System in Live Data Map.

🐛 Bugs Squashed​

• Resolved an issue preventing the Yotpo Integration from extracting data for some customers.

Week of February 17​

🛠 Changes Made​

• Updated the Gorgias Integration to use the new Delete a Ticket endpoint.
• Released Data Discovery Agent v0.7.0 and v0.7.1.
  • Added support for Microsoft SQL Server.
  • Omit optional dependencies to reduce Docker image size.
  • Enabled Redshift to properly sample from tables in non-default schemas.

🐛 Bugs Squashed​

• Resolved an issue fetching some containers from Google Tag Manager.
• Resolved an issue preventing Data Subject Relationship details from appearing in the Opt Request Details UI and export.
• Resolved an issue preventing known Personal Data Categories from being automatically added to new Systems in Live Data Map.
• Resolved an issue to properly escape BigQuery and Snowflake database identifiers when retrieveing schemas in the Responsible Data Discovery Agent.

Week of February 10​

🚀 Features Added​

• Added a TeamUp Integration with the access capability in Request Manager.

🛠 Changes Made​

• Improved the performance fetching containers (about 2-8x faster) from Google Tag Manager for Consent.
• Released Data Discovery Agent v0.6.0 and v0.6.1 with BigQuery support and various security improvements.
  • Breaking Change: Updated the container healthcheck command, which will cause earlier versions to become unhealthy.
  • Change: The GOOGLE_APPLICATION_CREDENTIALS environment variable is no longer required for GCP deployments.
• Released Request Manager Agent v0.9.0.
  • Breaking Change: Agent port updated from 80 to 8080, which requires updating the container healthcheck and load balancer to ensure requests are successful.
• Updated the Internal Systems Integration API Specification to deprecate the use of non-multiple-identifiers and pagination.
• Celebratory confetti is now thrown after a successful consent publish!

🐛 Bugs Squashed​

• Resolved an issue preventing some Data Discovery Agent fields from saving in the UI.
• Resolved an issue preventing some Segment Config deletions from completing successfully.
• Resolved an issue causing HTML to render incorrectly on some email notifications.

Week of February 3​

🚀 Features Added​

• Released the beta Cookie Management feature for Consent.
• Added a Pause Request action in the Request Manager Wizard.
• Added a Data Discovery Admin role.

🐛 Bugs Squashed​

• Resolved an issue with inconsistent email verification behavior on Opt Out requests.

Week of January 27​

🚀 Features Added​

• Released the System Profiles experience for Live Data Map.
• Released the AWS Connect Integration with access and deletion capabilities in Request Manager.
• Released RDD Agent v0.5.0 with a Databricks and DynamoDB Integration, improved classification, and encrypted connections to MongoDB/DynamoDB using AWS certificates.

🛠 Changes Made​

• Renamed Risk Monitor to Risk Assessments.
• Custom intake form dropdown questions now sort alphabetically.
• Updated the NetSuite integration to only attempt data extraction on objects that have been granted read access.

🐛 Bugs Squashed​

• Resolved an issue where the Privacy Request Center scroll behavior was inconsistent on mobile browsers.
• Resolved an issue blocking Slack System Detection for some customers.
• Resolved an issue blocking some customers from editing System Profile pages and Assessments.

Week of January 20​

🛠 Changes Made​

• Updating a note on a Privacy Request now creates an entry in the Activity Log.
• Improved retry logic for testing integration connections.
• Added the time zone to the Request Manager Activity Log.

🐛 Bugs Squashed​

• Resolved an issue preventing the verification review step from showing in the wizard for customers with certain workflow automation settings.
• Resolved an issue preventing some translated text from being published on the Consent Banner.

Week of January 13​

🚀 Features Added​

• Added machine-learning powered localization of the Privacy Request Center in up to 20 languages (documentation).
• Added a CleverTap Integration with access and deletion capabilities in Request Manager.

🛠 Changes Made​

• Improved retry logic for handling SERVER_UNAVAILABLE errors from Salesforce Sandbox Environments.

🐛 Bugs Squashed​

• Resolved an issue causing the Discourse integration to incorrectly show a "connected" status for some customers.

Week of January 6​

🛠 Changes Made​

• Increased the header size on the Privacy Request Center to 16kb to accommodate users with large cookies.
• Updated the Klaviyo Integration API version to 2024-10-15.
• Updated the CSS selector names for the consent banner to be prefixed with dg- to avoid conflicting with existing stylesheets.

🐛 Bugs Squashed​

• Resolved an issue causing HTML formatting in some automated emails to be malformed.
• Resolved an issue causing the WooCommerce integration to show as "connected" for some customers with broken connections.
• Resolved an issue causing the creation of new contacts on Inventory System Reports to fail.
• Resolved an inconsistency with the privacy right listed on the Privacy Request Center review page.

Week of December 16​

🚀 Features Added​

• Introduced a new version of the Responsible Data Discovery Model to provide more efficient and accurate results.
• Added versioning to Risk Monitor Assessments, allowing users to create new versions of approved Assessments that preserve previous responses/answers.
• Added API deletion capabilities to the HR Cloud integration in Request Manager.
• Added a "Mark as Completed" action to integrations on Privacy Requests in the "Extracting Personal Data" and "Pending Delete" states.

🛠 Changes Made​

• Updated the Consent Banner with various accessibility updates to ensure WCAG compliance: the 'X' button is now announced by screen readers, the banner can be closed with the escape key, and category selections can be collapsed and expanded with the keyboard.
• Added the ability to deselect uploaded files in the "Miscellaneous Data" section on Privacy Requests.

🐛 Bugs Squashed​

• Resolved an issue preventing the EmailMessage object in Salesforce from being anonymized on Deletion Requests by allowing it to be deleted, while all other objects continue to be anonymized.
• Resolved an issue where some users would see an error fetching data subject relationship options in the Request Manager Wizard.
• Resolved an issue where custom systems would not appear in the Business Process drawer.
• Resolved an issue where some Stripe integrations would incorrectly show as disconnected.
• Resolved an issue where the results email on an Access Categories request was malformed.

Week of December 9​

🚀 Features Added​

• Added a Deletion Behavior option to all asynchronous deletion integrations, adding additional control of how these integrations are processed in DataGrail.

🛠 Changes Made​

• Updated the "Miscellaneous Files" files section on Access Requests to support file upload in the "Extracting Personal Data" state.

🐛 Bugs Squashed​

• Resolved an issue where the 200mb upload limit was not honored in the "Miscellaneous Files" section on some Privacy Requests.
• Resolved an issue where email translations were not consistently applied on some Privacy Requests.

Week of December 2​

🚀 Features Added​

• Enabled support for self-service custom questions for all customers on the Privacy Request Center.
• Added a "Privacy Request Denied" email template, which can be used for requests denied via custom workflows.

🐛 Bugs Squashed​

• Reduced batch sizes for customers using batched SendGrid requests to resolve an issue where the request body was too long.

Week of November 25​

🚀 Features Added​

• Added the following integrations with access capabilities in Request Manager: ADP Workforce Now, HiBob, HR Cloud, TriNet, UKG Pro, Workday

🛠 Changes Made​

• Updated the AWS Integration to utilize role-based authentication.
• Optimization of batch deletion functionality for the Amplitude integration.

Week of November 18​

🚀 Features Added​

• Added a "Systems" filter on the Business Processes page.

🐛 Bugs Squashed​

• Resolved an issue deleting "Note" objects in SalesLoft when the connecting user is not a Team Admin.
• Resolved a timeout issue causing some Braze integrations to disconnect sporadically.

Week of November 11​

🚀 Features Added​

• Added a Persona Integration with access and deletion capabilities in Request Manager.

🛠 Changes Made​

• Added the "what inaccuracies need updating" field to Direct Contact forms.

🐛 Bugs Squashed​

• Resolved an issue blocking Drift deletion on some requests.
• Resolved an issue preventing all default Risk Monitor Templates from showing for some new customers.

Week of November 4​

🚀 Features Added​

• Added the ability to start, cancel, pause, and resume Responsible Data Discovery scans.
• Added a Common Room Integration with access and deletion capabilities in Request Manager.
• Added System Detection capabilities to the Zip integration.

🛠 Changes Made​

• Moved the "Reporting Contacts" menu from the System Inventory Page to the "Settings" page.

🐛 Bugs Squashed​

• Resolved an issue blocking some Segment deletions.
• Resolved an issue which rendered an empty button on the Request Details page for some Privacy Requests.

Week of October 28​

🚀 Features Added​

• Released the TIA and LIA Assessment Templates for Risk Monitor.

🛠 Changes Made​

• Performance improvements to reduce Consent publishing time.
• Improved error handling and retry logic for the Heap integration.
• Refactored how connectors in the Request Manager Agent select the applicable queries based on the provided identifiers and made the function more extensible.

🐛 Bugs Squashed​

• Resolved an issue causing inconsistent behavior with integration selection on requests in "Pending Action".
• Resolved an issue causing Privacy Dashboard values to display in seconds instead of days.
• Resolved an issue causing the Skilljar integration to fail in "Extracting Personal Data".
• Resolved an issue with the BigQuery connector for the Request Manager Agent where queries were not formatted with identifiers.
• Resolved an issue with the Request Manager Agent where Google Default Credentials provided as an environment variable were unavailable in the rq process.

Week of October 21​

🚀 Features Added​

• Added a Zip integration with Access and Deletion capabilities in Request Manager.
• Added support for custom 'From Names' with the Mailgun Transactional Mailer integration.

🛠 Changes Made​

• Updated the 'What inaccuracies need updating?' field to be required on Update Inaccuracies requests.
• Updated the Facebook Marketing integration to use the latest v.21.0 API.

🐛 Bugs Squashed​

• Resolved an issue where Stripe would show as disconnected for customers with a high volume of invoices.
• Resolved an issue preventing the "Add Condition" button from appearing in some cases in the Assessment Templates Editor.

Week of October 14​

🚀 Features Added​

• Added an OracleCrowdTwist integration with Access and Deletion capabilities in Request Manager.
• Added an PowerReviews integration with Access and Deletion capabilities in Request Manager.
• Added a new menu to view active Responsible Data Discovery scans.

🛠 Changes Made​

• Improved handling of rate limiting with the Okta integration.

🐛 Bugs Squashed​

• Resolved an issue preventing the deletion of integrations present on a high volume of Privacy Requests.

Week of October 7​

🚀 Features Added​

• Added a Descope integration with Access and Deletion capabilities in Request Manager.

🐛 Bugs Squashed​

• Resolved an issue where some data subjects encountered an error when submitting new Opt Out requests.
• Resolved an issue where some integrations could not be deselected in the "Pending Action" state on Privacy Requests.
• Resolved an issue where Privacy Requests created from within the app or via email were immediately moved to "Pending Verification".
• Resolved an issue where some users could not see the "Add Service" button in the Tracking Services page.
• Resolved an issue where some Privacy Requests encountered an error when transitioned from "Pending Action" to "Pending Delete".

Week of September 30​

🚀 Features Added​

• Added support for Advanced Consent Mode in Google Tag Manager, allowing data subjects to be tracked using Google Services in an anonymized way.
• Added a "Custom System" option in Live Data Map, allowing customers to create new systems from within the app.

🛠 Changes Made​

• Updated BambooHR extraction logic to dynamically fetch all custom employee and customer fields on Privacy Requests.
• Optimized API calls to Braze for high-volume Privacy Request customers.

🐛 Bugs Squashed​

• Resolved an issue preventing Docebo deletion from completing on some requests.

Week of September 23​

🚀 Features Added​

• Added a Consent integration for Webflow sites to respect a data subject's consent to tracking with the Webflow Analyze and Optimize products.

🛠 Changes Made​

• Updated the HubSpot integration to include new auth settings for public apps. This update will add new options for choosing the scopes used by DataGrail.
• Optimized the Zendesk integration by implementing batch deletion requests to alleviate rate-limiting in high-request volume environments.

🐛 Bugs Squashed​

• Resolved an issue where AppsFlyer was dropping requests because the deletion batch size was too large.
• Resolved an issue in the Docebo integration where validation of deletion was not properly done.

Week of September 16​

🚀 Features Added​

• Added a Commerce Tools Integration with access and deletion capabilities in Request Manager.

🛠 Changes Made​

• Optimized SendGrid API Requests for high Privacy Request volume customers.
• Improved handling of invalid email addresses with the Iterable integration.

🐛 Bugs Squashed​

• Resolved an issue preventing direct contact processors from uploading greater than 300 data files.
• Resolved an issue causing Demandbase to fail extracting data on some requests.
• Resolved an issue displaying system sources when the integration that detected it was deleted.

Week of September 9​

🚀 Features Added​

• Updated the "Risk" column on the System Inventory to highlight systems utilizing Automated Decision Making, AI Subprocessors, and/or GenAI tools.
• Added a SendGrid configuration option, allowing users to remove unsubscribe information from transactional email footers.
• Added a pre-flight publish option for Consent, allowing customers to test Consent configurations in a new, unpublished GTM container version.

🛠 Changes Made​

• Added a "Sources" column on the System Inventory export, allowing customers to view how a system was detected in the downloaded CSV.

🐛 Bugs Squashed​

• Resolved an issue preventing NETSUITE from completing in the access phase of some Privacy Requests.
• Resolved an issue where the Business Process for an Inventory System Report displayed differently on the System Inventory column than on the report itself.

Week of September 2​

🚀 Features Added​

• Added a "Risk" filter to the System Inventory page.

🛠 Changes Made​

• Updated the "Third Party Disclosures" email template to include all available dynamic placeholders.

🐛 Bugs Squashed​

• Resolved an issue causing some deletions to fail with the Outreach integration.
• Resolved an issue preventing the data subject location from being extracted on the Intake Form.
• Resolved an issue causing the privacy right tiles on the Intake Form to be misaligned on some resolutions.
• Resolved an issue causing Business Processes to display incorrectly on the System Inventory page.