Skip to main content

August 2026

This page documents all customer-facing changes to the DataGrail application made in August 2026. Additional entries will be added every week on Friday.

Week of August 24​

🚀 Features Added​

  • Multi-condition assessment logic — assessment templates can now branch on multiple conditions with AND/OR logic instead of a single trigger answer. You can show or hide entire sections, and automatically spin up a follow-on assessment (like escalating a threshold check into a full DPIA) when specific answers are given, with contributors invited automatically and the new assessment linked back to its parent.
  • Cancel and reopen assessments — you can now cancel a stalled assessment instead of only finishing or deleting it. Cancelling makes it read-only, revokes external contributor access, and drops it from due-date reminders and completion-rate reporting. Reopen it later to pick up exactly where you left off.
  • Assessment notifications in Slack — assessment assignments, comment @mentions, and due-date reminders can now be delivered as Slack direct messages from Vera, not just email. Connect your workspace, map your users, and each user can turn on Slack notifications in their preferences.
  • Privacy Requests API fields — the list-requests and get-a-request v2 API endpoints now support an optional extra_fields parameter that returns approval status, assignee, closed date, and last updated date. It's opt-in, so existing integrations are unaffected.
  • Download all request results — for integrations that generate multiple TSV result files, a new Download All button bundles every file into a single ZIP, replacing what used to be hundreds of individual downloads.
  • Universal Consent iOS SDK 1.7.0 — the iOS Consent SDK now supports both reading and writing Universal Consent, so mobile apps can share and honor consent state consistently.

🛠 Changes Made​

  • Processing Activity Systems tab — the Systems tab edit view now splits into a Linked Systems section (what's already attached, removable in place) and an Available Systems section (the rest of your inventory), so it's clear what's already linked versus what you're adding. Select All now applies only to your search-filtered results instead of your entire inventory.

🐛 Bugs Squashed​

  • Resolved an issue with the Oracle Opera Cloud integration's handling of deletion requests.
  • Resolved an issue with how the Ada integration processes email identifiers.
  • Resolved an issue where consent audit log exports weren't scoped to the project you were viewing.
  • Resolved an issue where the inventory risk filter still included dismissed and archived risks.

Week of August 17​

🚀 Features Added​

  • Rich text editing for assessment answers — assessment answer boxes now support full rich text formatting, including bold, italic, underline, bulleted and numbered lists, and links. Exported PDFs preserve the formatting, and existing answers continue to work unchanged.
  • Weekly assessment digest — admins now receive a weekly email summarizing assessment activity, so you can track outstanding work without opening the app.
  • Processing Activity contact exclusions — Processing Activities now include a contact exclusions table so you can specify contacts that don't apply to an activity.
  • Vietnamese consent support — consent management now supports Vietnamese for banners and preference displays.
  • Unclassified request filter — the Request Type filter in Request Manager now includes an Unclassified option so you can surface requests that haven't been categorized yet.

🛠 Changes Made​

  • Processing Activity Overview redesign — the Overview tab now shows the whole activity at a glance: a RoPA progress card with percent complete and questions remaining, a processing risk card with personal data types and data subjects, dedicated Linked Systems and Contacts cards (contacts now show which systems they're tied to), and new Recent Attachments and Recent Changes cards. Understanding an activity no longer means digging through separate tabs.
  • Assessment template question numbers — the template builder now shows question numbers, making questions easier to reference and organize.
  • System contact titles — the "Contact Type" field on system contacts is now called "Title" and appears next to each contact's name and email on the system profile, so you can label contacts as "Data Owner," "Legal Lead," and the like.
  • Google Tag Manager consent delivery — stored consent is now delivered to Google tags on page load, with more reliable container lookup and automatic failover when publishing, so consent is applied consistently.

🐛 Bugs Squashed​

  • Resolved an issue where the consent policy drawer could overlay the publish drawer.
  • Resolved an issue where the Adobe consent banner could inject when another tag owner was already live.
  • Resolved an issue where assessment creators couldn't remove approvers.
  • Resolved Live Data Map issues with the "Detected By" filter and a false unsaved-changes warning when a System Data Report was approved elsewhere.
  • Resolved an issue where the System Profile page didn't handle integration-loading errors gracefully.
  • Resolved multibrand issues where notifications wouldn't save, the Privacy To-Do List returned a permission error, and detection notifications weren't scoped to the correct brand.
  • Resolved an issue where connecting Cursor to DataGrail over MCP could fail during setup.

Week of August 10​

🚀 Features Added​

  • Processing Activity change history — Processing Activity RoPA forms now have a Change History tab showing who changed what and when: answer edits, status changes, contributor and document changes, and system or contact links. Filter by category, expand any entry to see the before-and-after, and export the full history to CSV.
  • Individual assessment submissions — each contributor can now submit their own part of an assessment when they're done, without blocking teammates. Once everyone has submitted, the assessment automatically moves to review, and a reviewer can send a single contributor's work back for more detail without reopening it for everyone else.
  • Bulk skip failing integrations — when an integration breaks across many open requests, a new Integration Status filter surfaces every affected request so you can skip the failing integration across all of them in one action instead of opening each request individually. Every skip is recorded in the audit trail.
  • Opt Out Request Received email control — you can now decide independently whether a Request Received email is sent when an Opt Out request comes in, instead of it being tied to the verification email setting. The email template is linked directly from the setting for quick review.

🛠 Changes Made​

  • Google Tag Manager container opt-in — after connecting GTM, you now choose exactly which containers to share, with nothing selected by default, so containers can't be shared without explicit consent.
  • Greenhouse upgraded to Harvest v3 — the Greenhouse integration now supports OAuth 2.0, ahead of Greenhouse retiring its legacy API-key authentication on August 31, 2026. Reconnect your Greenhouse integration with OAuth before then to avoid interruption.
  • Consent Auditor scan results — the Failed filter now matches the Failed count, and each issue shows a plain-language description and suggested action instead of an internal code.
  • System Inventory — items inside large rolled-up systems now paginate instead of loading all at once, keeping big systems fast to open.
  • Live Data Map suggestions — the suggestions sidebar now shows every source behind a suggestion, grouped by vendor, and the RoPA Add Suggestions toast reports how many activities were created versus added to existing ones.
  • System Overview — read-only attributes now refresh automatically the moment a System Data Report edit is saved, with no page reload needed.

🐛 Bugs Squashed​

  • Resolved Salesforce issues so access and deletion request errors and upstream timeouts are classified and handled reliably.
  • Resolved an issue where the Formstack integration returned a 400 error.
  • Resolved an issue where cookie rule validation errors weren't shown in the interface.
  • Resolved an issue where Consent Analytics charts formatted the time axis incorrectly.
  • Resolved an issue where the About card collapsed when switching to the Contacts tab in the Live Data Map.
  • Resolved an issue where RoPA edits could be lost during propagation.
  • Resolved an issue where email intake requests didn't fall back to your configured email locale when no language was detected.
  • Resolved an issue where deleting an assessment with contributor comments could fail.

Week of August 3​

🚀 Features Added​

  • Proofpoint Secure Email Relay — a new integration lets you route DataGrail's transactional email through a Proofpoint Secure Email Relay, so outbound mail flows through your organization's approved email path.
  • System Data Reports and RoPA are now live documents — SDRs and RoPAs no longer use the Approve/Draft/Edit cycle. They're always live and editable, so what you see in the report, the System Overview, and the Inventory table stays consistent. Your changes autosave, and versions are still captured automatically in the background after a period of inactivity.

🛠 Changes Made​

  • User management at scale — Settings > User Admin and the assessment Invite Contributor picker now load quickly and search smoothly for organizations with thousands of provisioned users. Pagination, sorting, and search now run server-side, and the contributor picker supports search-as-you-type across your full directory instead of a capped list.
  • Mixpanel batch deletion — the Mixpanel integration now processes multiple deletion requests together in a single batch, making large deletion runs faster and more reliable.

🐛 Bugs Squashed​

  • Resolved an issue where editing or deleting a Privacy Request Center form could serve a stale, archived copy of a draft instead of the live draft.
  • Resolved an issue where email previews appeared blank on request lists with more than 25 email intake tickets.
  • Resolved an issue where the Stop Processing action was hidden for direct-contact deletions when API access automation was turned off.
  • Resolved an issue where the email template assigned by a workflow automation wasn't pre-selected when sending email from an individual request — the standard template was used instead.
  • Resolved an issue where confirmation emails weren't sent for some email intake requests even when confirmations were enabled.
  • Resolved Salesforce issues so access and deletion request errors are captured and requests authenticate reliably.
  • Resolved an issue where a missing integration could cause an error when loading configured integrations.