1. 2026-07-16

   Governance

   Cross-tenant isolation hardening — path-parameter leaks closed and verified

   A systematic audit closed five cross-tenant access paths (knowledge, pricing, incidents, audit, access-request surfaces). Every fix verified in our live environment: a cross-tenant path now returns 403. Isolation claims on this site are backed by these tests, not by intention.

2. 2026-07-15

   Platform

   Durability sweep: in-memory state moved to Postgres, real vector embeddings

   Fourteen surfaces that previously held state in process memory now persist to Postgres and survive restarts. Semantic search now runs on real pgvector embeddings instead of keyword matching.

3. 2026-07-13

   Security

   Customer-owned KMS encryption — fail-closed, verified in our live environment

   Data and Iceberg catalog metadata are encrypted with the customer's own KMS key — and the write path is fail-closed: when a key is bound but cannot be honored, the platform refuses to write plaintext. Both behaviors verified in our live environment, not just designed.

4. 2026-07-13

   Platform

   SAML SSO login + Open Semantic Interchange (OSI) import/export

   Enterprise SSO via SAML is live. OSI v1.0 semantic import/export shipped and verified in our live environment — metrics defined in dbt, Cube, ThoughtSpot, Sigma, or any OSI-conformant tool travel in and out without translation.

5. 2026-07-10

   Platform

   Production deployment with real reliability posture

   The platform runs in production behind Cloudflare Tunnel + Access with Prometheus / Loki / Grafana observability, auto-restart that has been kill-tested, and nightly off-box encrypted backups that are byte-verified after every run.

6. 2026-07-07

   Security

   Row-level security enforced with a non-superuser application role

   Multi-tenancy is now enforced by Postgres RLS with the API connecting as a dedicated non-superuser role — tenant separation the database enforces, not just the application layer. Dynamic column masking was also made fail-closed: a masking-policy failure now blocks the read instead of leaking it.

7. 2026-07-07

   Platform

   Federated reads in place — govern data where it lives

   Read Postgres, Snowflake, and other sources in place through engine federation: classify PII at the source without copying it, mask per role using the source's own classification, and resolve the same real-world customer across owned and federated data with zero copy.

8. 2026-07-05

   Platform

   Try-with-sample-data trial is real end-to-end

   Login → command center → sample data → a real federated query on real engines. The out-of-box trial runs the actual platform path, not a scripted demo.

9. 2026-06-22

   Security

   Customer-owned data plane: per-workspace warehouse routing

   Data and Iceberg metadata land in the customer's bucket; only the catalog pointer stays with the control plane. Per-warehouse credentialed catalog metadata I/O shipped alongside.

10. 2026-06-15

    Agents

    Governance spine load-bearing: birth certificates, impact-as-a-gate, guardrails

    Every agent carries a signed Birth Certificate enforced at compile time; the governance chokepoint enforces by default; predictive blast-radius (impact-as-a-gate) stops consequential actions before they run; two-key approvals gate the high-stakes ones. All of it wired into the execution path — not narrated on top of it.

Want every release in your inbox? Email changelog@eisbergdata.com and we will add you to the digest.