v2.6.1
This release contains maintenance and reliability work only. There are no changes to how you use Veritome.
Every feature, improvement and fix as it ships — the same changelog as veritome.eu, with the dated roadmap one click away.
This release brings improvements to Veritome. The changes that matter to your team are listed below. What’s new • Auth posture page mapping each confirmed auth rule to its tests • Draft policies into the policy editor • Aria Inbox by capability with each capability's approval rate • Prepare the workspace from onboarding - new Onboarding experience • Prepared-by-Aria strip,and more proactive Aria in your workspace -more work should be drafted for your approval only, and Aria will guide you through your next steps • Propose each classified system's risks from Veritome's library • Propose risks, suppliers and course assignments • Supplier research on demand, inbox by capability, research and policy evaluations ran satisfactory • Improved design system accross website and application screens, with new light slate menu rail, and section submenus - moving Veritome towards focused compliance workspace + proprietary Veritome icon pack • Policy owner, review cadence and acknowledgement • One catalogue of access controls, streamlined for final organisation admin decision • Settings decide access, with no hidden tier cap • Organisation-wide risks on the risk register • Every access control in the role editor, and system scoping
This release contains maintenance and reliability work only. There are no changes to how you use Veritome.
This release brings improvements to Veritome. The changes that matter to your team are listed below. What’s new • Honour the auto-apply setting instead of ignoring it Fixes • Decide the autonomy policy by the system a proposal acts on • Editor-bound drafts never auto-apply; visibility checked before acting • Connector registry says what each connector does today • Say when a connector's deployment state is not known yet • Cap the logo request body before parsing it • Upload the organisation logo through the server
We’ve fixed a few small issues that came up during the recent promotion review, so everything should now look and work as intended.
You can now set up stronger login security for your team and control how people sign in. Admins can require two-factor authentication from the second sign-in, and organisations can enforce single sign-on for their approved domains. This makes it easier to protect sensitive compliance data without extra hassle. The obligation engine system handles routine scans more smoothly. It can now import data from compliance horizon checks and watch for updates to standards editions automatically. When changes happen, we’ll see them right away. Plus, the Annex IV technical file is now clearer, with a simplified version for small and medium companies, so you can complete it faster.
You can now track and manage course versions, giving you more control over your training materials. The platform also lets you set email preferences and receive enrolment notices, while administrators can manage consent settings more easily. Learners can now save their progress as they go, with lesson URLs and server-saved states making it easier to pick up where they left off. The new "My Learning" section provides a clear overview of courses, certificates, and profile updates. Meanwhile, teams can assign courses and track progress through a dedicated team view, with assignments now automatically enrolling members and sending email confirmations.
Internal platform dependencies improvements.
You can now sign up and log in with a clearer, two-step layout that keeps the process focused and reduces distractions. The platform’s main navigation has been streamlined, making it easier to move between sections without clutter. Any remaining authentication screens now appear in your language, so you won’t see mixed translations when managing your account. The sign-up and onboarding steps have also been tightened up to help you get started without unnecessary reminders or delays. Build both frontend and backend Founders portal and feedback widget. Aria - From advisor to assistant that acts — drafting assessments, assembling evidence and progressing obligations behind your approval, never without it. Obligations completions drawers have been redesigned so users workspace is more streamlined, with clear instructions on what is expected of them in each step, Aria assistance and approval workflow.
The system ensures training completions are recorded accurately, preventing any gaps in compliance records. Additionally, key player completions and module branches are now properly tracked, giving you a clearer view of your team’s progress.
Minor dependencies updates delivered in this version.
We can now publish weekly briefs directly from the platform, making it easier to keep stakeholders informed about AI governance updates. The register filter bar has been simplified, and the audit search is now more intuitive, saving you time when navigating compliance records. Additionally, transactional emails are now sent through Plunk, ensuring smoother communication.
This is a major platform release for Veritome. Complete visual overhaul across the product, with a cleaner design system, refreshed navigation, and a more consistent app experience from dashboard to workflow surfaces. New Added four framework modules to the platform: GDPR, ISO 27001, NIST AI RMF, and ISO 42001. Reworked the framework/programme model so compliance work, obligations, evidence and framework coverage are more tightly connected. Improved the document and evidence layer, making generated artefacts, records and audit trails more reliable and easier to follow. Expanded the compliance engine and scoring surfaces to better reflect system risk, completion state and framework coverage. Strengthened the Trust Centre and operational reporting so the platform surfaces controls, attestations and status more clearly. Improvements More coherent product flow across onboarding, navigation, tasks, systems and documents. Better alignment between obligations, frameworks and evidence. Cleaner reporting and compliance status views for teams operating across multiple AI systems and regulatory requirements. More consistent UX across the platform, reducing visual drift and legacy state. Fixes Resolved navigation, layout and legacy UI inconsistencies introduced across older screens. Tightened data integrity around records, programme linkage and evidence flow. Corrected gaps in framework mapping and overlap handling to better reflect what is actually in place. This release brings the platform closer to a single, coherent operating model for AI compliance, framework coverage and audit readiness.
This release brings significant enhancements across the Academy, admin capabilities, Aria agent infrastructure, billing workflows, and platform hardening. Major features include a high-risk operator course with standardized course structure in Academy; admin-console changes now post to Slack and the DPA 30-day deletion clock is now functional with purge capabilities. The Aria system gains a comprehensive agent-trajectory evaluation harness, runner, scorer, and golden goal set, along with enforced ground-before-you-act validation on the write path. Billing improvements add consumer-law regime selection at checkout and self-service. New monthly reconciliation system is introduced which will enable automated tarcking of regulatory updates and prompt update of Veritome's obligation engine.
We’ve added a safeguard to the public enrolment page of Veritome Academy so that repeated attempts to sign up will now be slowed down. This stops automated scripts from overloading the system while genuine users can still create accounts at their own pace. A big Thank you to Muhammad Shahzaib ( https://linkedin.com/in/mshahz) for bringing this gap to our attention.
You can now manage your own account settings directly from the platform, including password changes, multi-factor authentication rotations, and backup code generation, all without needing to contact support. Organisation owners also have full self-service control over their accounts, from adding new members to handling subscriptions and viewing important announcements. The interface has been streamlined for clarity and consistency, with a refreshed design across all generated documents and a more intuitive layout for admin tasks. Identity management is now more flexible—users can belong to multiple organisations and have clearer visibility of their roles and permissions. Session security has been tightened, with automatic revocation and stricter controls on privileged actions.
The focus ring around forms and buttons now matches your chosen theme and is easier on the eye, while the layout stays neatly within a 1280-pixel cap so nothing spills off the screen. If an email fails to send during verification, you’ll now see a clear notice instead of being left wondering what happened. The workspace has been rebuilt under a shared design, giving every screen a consistent look and feel. The action queue shows exactly what needs doing next, ordered by what it unblocks, and the task centre now offers three views plus a working timeline. The evidence hub has been refreshed and the chain of custody is clearer than ever, so you can trace every record with confidence.
Major platform polish and product-surface work: an authentication overhaul, onboarding & academy improvements, document/ evidence integrity upgrades, a broad UI/design/marketing refresh, and a large set of fixes and ops/security hardening.
Final beta release brings a complete website and application design overhaul. Dark mode now covers the whole product — every modal, drawer, table, calendar, report and the marketing site — instead of stopping at the screens most people see first. Hundreds of places where text sat on a background it could not be read against have been corrected, and the palette is now checked automatically so it cannot drift back. Aria chat moves to a tidy right-side drawer you can shrink to a corner, and the guided risk-assessment forms are easier to follow with clearer layouts and better contrast. The keyboard focus indicator is now visible on every surface, including the public verification pages an external recipient opens. Exported PDF reports have been rebuilt on the current design system — a corrected masthead, headings that no longer strand themselves at the foot of a page, and tables that break cleanly across pages. Every sealed document, dossier and audit anchor now presents its SHA-256 fingerprint the same way: grouped for reading, truncated in the middle so you can compare both ends, never reflowed across lines, and copyable in full with one click. Sealed, generated, draft and broken-chain records each carry their own shape and label, so the state survives greyscale printing and colour blindness.
Dark mode now covers the whole product — every modal, drawer, table, calendar, report and the marketing site — instead of stopping at the screens most people see first. Hundreds of places where text sat on a background it could not be read against have been corrected, and the palette is now checked automatically so it cannot drift back.
Veritome now looks and behaves the same whichever theme you work in, on every screen from the dashboard to a printed regulator pack. This release is almost entirely repair: contrast, focus, legibility and the way proof is presented — the parts of a compliance tool that only matter when someone is checking your work.
Every sealed document, dossier and audit anchor now presents its SHA-256 fingerprint the same way: grouped for reading, truncated in the middle so you can compare both ends, never reflowed across lines, and copyable in full with one click. Sealed, generated, draft and broken-chain records each carry their own shape and label, so the state survives greyscale printing and colour blindness.
The keyboard focus indicator is now visible on every surface, including the public verification pages an external recipient opens. Exported PDF reports have been rebuilt on the current design system — a corrected masthead, headings that no longer strand themselves at the foot of a page, and tables that break cleanly across pages.
The Help Centre has been rebuilt as proper documentation — searchable, properly laid out, with tables that render and a terms page that is easy to find. Alongside it, every document Veritome generates now shares one house style, so an Annex IV file, a declaration of conformity and a compliance report arrive looking like they came from the same organisation, because they did.
Long compliance forms now show where you are and what is left, and Aria is available on every text field rather than a handful. Completing a smart-form document files its own evidence record automatically, so the proof is attached to the obligation the moment the document is done instead of waiting for someone to remember.
The public Aria system card no longer 404s, saving from Settings works reliably, and generated documents print on white paper instead of a full-page warm tint that wasted ink and read as a scan.
Every date you see is now written dd.mm.yyyy — on screen, in emails, in exported PDFs and inside generated documents. No more guessing whether 03.04 means March or April on the page a regulator is reading.
The incident register now shows the Article 73 reporting clock right beside the log, the evidence library reads as one aligned table, and the approvals inbox makes each pending decision obvious. Ask Aria is one keystroke away, with its proposals pinned and every answer citing its Article.
Veritome opens to public beta with a top-to-bottom redesign of the workspace — a clearer dashboard that leads with your nearest deadline and an org-wide score, a faster way to reach Aria, and cleaner incidents, evidence and approvals. Sign up, classify your first AI system in minutes, and tell us what to build next.
Publish a verifiable, plain-language transparency record for an AI system at a public /verify link — what it is, how it works, and how it’s governed. Veritome dogfoods it: Aria, our own assistant, has one you can read.
A fast, clear read on your potential penalty exposure under the AI Act, so you can size the risk and prioritise.
Built-in “you’re interacting with AI” disclosures and machine-readable marking of AI-generated content are now part of the engine, ready well ahead of the 2 August 2026 transparency deadline. Chatbots and assistants surface the Article 50 disclosure obligation automatically, with the notice wording and content-marking guidance attached to the obligation itself — so you can satisfy the requirement without leaving the platform.
We’ve optimised the obligation generation engine so the duties for a new system are worked out faster and with far less duplicated effort — large portfolios regenerate noticeably quicker, and your score stays in lockstep across the dashboard, system pages and obligation queue. Registering a system is smoother too: a clearer, guided flow walks you from classification through to a live compliance journey, and the instant a system is registered its classification dossier now opens on its own with a sealed, tamper-evident first entry. Your audit trail starts on day one, with nothing extra to click.
See where Veritome is heading on the new Now / Next / Later roadmap, and follow what's shipped here. Both pages now render from structured data, so updates reach you faster — and you can subscribe by RSS.
The most important gate in the Act is now a guided checklist: every prohibited practice — including the December 2026 additions — with a plain-language explainer and an Aria-assisted answer for you to confirm.
Provider, deployer and GPAI-model-provider each get the obligation set the Act actually assigns them — so you never see provider duties on a system you only deploy, and Article 53 only lands on a real GPAI-model provider.
Corrected the Article 5 applicability date to 2 February 2025 and made the regulatory registry the one source every screen reads, so dates can never drift between pages. Seeded the two new Article 5 prohibitions taking effect in December 2026.
Obligation due dates now derive from when you onboard plus a risk-tiered lead time, so a brand-new account is never shown “overdue” against dates that pre-date your sign-up. Completing an obligation now reliably clears it, and each item shows its legal status separately from your working target.
Overdue counts and completion percentages now come from one shared calculation, so the dashboard, system pages and obligation queue always show the same figures.
Article 4 literacy is now a single organisation-wide obligation linked to the Training module, instead of a duplicate task on every system — cleaner queues and one honest status.
Accessible multi-column navigation, a refreshed home page and clearer pricing — so it's quicker to find what Veritome does and where you fit.
The Trust Center is now live and data-connected — security posture, sub-processors and compliance status drawn from real signals rather than a static page.
Veritome Academy opens a public training surface with role- and sector-based tracks, including a dedicated Provider Operations programme — producing certified Article 4 AI-literacy evidence for your whole team.
Every Article reference and statutory deadline in the app now comes from one regulatory registry, kept current with the Digital Omnibus timeline — so guidance stays consistent and easy to update as the law moves.
A redesigned system view and obligation drawer, plus refreshed PDF reports and new export formats — your compliance record is faster to navigate and cleaner to hand to an auditor.
A new name, a new home and a refreshed identity across the app, emails and guides — the same compliance instrument, with a sharper edge.
Refreshed the regulatory content to the latest Digital Omnibus timeline and added a complete legal layer — terms, data-processing addendum and policies — so the dates you act on and the contracts you sign stay current.
Multi-factor authentication is now required, with a branded sign-out and an in-app User Guide — stronger account security and a faster path to getting started.
Start your compliance work at €0 and upgrade when you're ready, with plans and gating aligned across the app and the pricing page.
Fixed the regulator-dossier registration tab and how a system's phase status reads before its obligations have been generated.
A guided FRIA for deployers of high-risk systems — Article 27, structured and evidence-ready, with a phase chip that shows where it sits in your journey.
Structured Smart Forms across every obligation area — technical documentation, conformity, registration, risk management, data governance, human oversight, transparency and GPAI — so each duty captures exactly what the Act asks for.
Compliance scoring now reflects where the real effort sits across the journey, and a pre-filled Annex VIII export gets you ready for EU-database registration.
Classify, Scope, Implement, Assess, Register, Monitor — a gated journey that always shows the next right step and locks a stage until the one before it is done.
Background detectors flag classification drift and surface reviews as they fall due — compliance that nudges you, rather than the other way around.
Broader risk categories and evidence you can attach directly where a risk is assessed — proof lives next to the thing it proves.
A clearer risk-register drawer that's quicker to read and edit.
Six role-based training programmes with interactive modules, quizzes and progress tracking — producing the evidence you need for Article 4.
Classifying a system now auto-generates its review schedule, surfaced on a new calendar and a Compliance Pulse dashboard widget — so nothing quietly falls due.
Classify general-purpose AI against the 10²⁵ FLOP threshold and automatically generate the Article 53 and 55 obligations that follow, with three ready GPAI templates.
Eighteen provider obligations, an Annex IV technical-documentation builder, an EU Declaration of Conformity generator, and rich-text editing for your documentation.
Article 73 serious-incident reporting with countdown timers to each deadline, a generated notification-letter PDF, and a clear status workflow.
Upload, preview and manage evidence files against any obligation — stored in the EU, with download and removal controls.
Turn your compliance status into a polished PDF in one click — executive summary, per-system breakdown and full obligation tables.