Changelog

AI Safety & Autonomous Removal Hardening

Closed gaps in how autonomous removals and AI-assisted support are gated before they act.

• Removal jobs now re-check autonomy policy at the moment a worker claims the job, not just when it was created — closing a window where a policy change made after creation could let a removal proceed that shouldn't have
• Wired an AI-backed prompt-injection second opinion into support chat, catching manipulation attempts a single classifier could miss
• The AI provider router now correctly rejects a request when no provider is available instead of silently reporting success
• Fixed the DPIA sign-off and breach-notification compliance pipelines and a system_alerts schema drift that could silently drop alerts

Evidence & Notification Reliability Fixes

Fixed a broken unsubscribe link in notification emails and made removal-proof verification cryptographically real.

• Fixed a broken {{unsubscribe_url}} placeholder in notification emails that left the unsubscribe link non-functional
• Implemented real Merkle proof verification for removal evidence, replacing a check that always passed
• Corrected marketing copy that described our tracked broker count as "verified" or "live-tested" — those are two different, honestly-labeled numbers

Mobile Data Security Improvements

Strengthened how the mobile app protects data on-device when secure storage is unavailable.

• Replaced a reversible XOR session-storage fallback with real AES-256-GCM encryption
• The app no longer writes personal data in plaintext when encrypted storage can't be reached — it now fails safely instead

Enterprise SSO Integration

Added support for SAML 2.0 and OIDC single sign-on for enterprise customers.

• SAML 2.0 support for Okta, Azure AD, and OneLogin
• OpenID Connect (OIDC) support for Google Workspace
• Just-in-time user provisioning on first SSO login
• Admin dashboard for SSO configuration and troubleshooting

Improved Removal Verification

Enhanced our removal verification process with before-and-after screenshot proof.

• Automated screenshot capture before and after each removal request
• Timestamped proof of removal stored in your dashboard
• Exportable removal verification reports for compliance teams
• Faster re-scan cycle to confirm removals within 48 hours

Security Hardening Update

Strengthened platform security with additional encryption and access controls.

• Upgraded to TLS 1.3 for all API communications
• Added rate limiting and brute-force protection on all auth endpoints
• Implemented additional input validation on scan submission forms
• Enhanced audit logging for all administrative actions

Data Broker Coverage Expansion

Expanded our monitoring coverage to include additional data broker sites.

• Added monitoring for 15 new data broker sites
• Improved matching accuracy for common name variations
• Reduced average scan time by 30%
• Added family member discovery for executive protection plans

UnlistIN Platform Launch

The first public release of UnlistIN — privacy protection for executives and their families.

• Privacy scanning across 1,800+ tracked data broker sites
• Automated removal request submission with proof-of-removal tracking
• Enterprise dashboard with real-time privacy score monitoring
• GDPR and CCPA compliant data handling with zero-knowledge architecture

Amended 2026-09-14: This entry originally described those broker sites as "verified". They are tracked — monitored for your data — which is a much larger set than the brokers with a recorded, passing live test. The scope of what shipped at launch has not changed; only the word describing it, which overstated how many of those sites we had tested.