Changelog
Meaningful platform changes that buyers, integrators, and analysts should know about. Internal refactors and dependency bumps are not listed; the full commit history is in the GitHub repository.
Developer surfaces + status page + glossary expansion
May 6, 2026- New /developers page documenting public API endpoints (badge SVG, OG image, by-domain lookup, embed iframes, RSS feeds, JSON read APIs)
- New /status page showing live data freshness signals (latest scoring run, news ingest, incident log, citation health check) and catalog totals
- Glossary expanded to 30 terms — added CMMC, AI Bill of Rights, DPIA, de-identification, NIST 800-53, Section 889, Binding Corporate Rules, zero data retention, SR 11-7 Model Risk Management, FERPA
- Vendor comparison pairs expanded to 45 — added cross-category matchups and coding-tool combos
- Legal: /privacy and /terms pages now live, required before paid plans and email outreach
Phase 2 — embeds, RSS feeds, share UTMs
May 5, 2026- Four public RSS feeds: news, score changes (>5pt moves), new vendors, recent incidents
- Embeddable iframe surfaces: /embed/vendor/:slug and /embed/compare/:pair, designed for third-party embedding with X-Frame-Options: ALLOWALL
- Live iframe added to the Share popover on every vendor profile alongside the existing SVG badge
- Social share buttons (X/Twitter, LinkedIn, Email) now embed UTM tags so attribution is clean when traffic eventually lands
- Annual State of AI Vendor Risk 2026 report at /report/state-of-ai-vendor-risk-2026 — data-driven, updates as the catalog grows
- Public /news page surfacing the vendor-tagged news feed grouped by ISO week
Phase 1 — programmatic SEO complete
May 4, 2026- New /vs/:slug-a-vs-:slug-b comparison pages — 35 curated AI vendor matchups (OpenAI vs Anthropic, GitHub Copilot vs Cursor, etc.)
- New /best/:industry pages for healthcare, finance, legal, and government — ranked under industry-specific risk weights
- New /best/:industry/:useCase pages — 16 industry × use-case combinations for long-tail procurement queries
- New /learn/:term glossary, /jurisdiction/:slug, /compliance/:slug pages — 35 entries total
- Sitemap grew from 12 URLs to 250+, all served as Worker-rendered HTML for crawlers
Stripe billing scaffolding + admin role
May 3, 2026- Stripe Checkout, Customer Portal, and webhook handler at /api/billing/* — inactive until secrets are set, returns 503 cleanly when not configured
- Migration 0008 adds Stripe linkage columns to users; migration 0009 adds is_admin column
- Admin authentication now supports JWT-with-is_admin in addition to legacy X-API-Key
- Dashboard PlanCard surfaces tier, subscription status, renewal date, and Manage / Upgrade buttons
Watchlist email alerts + Pages Functions migration
May 2, 2026- Daily 6 AM UTC cron now fires per-user watchlist email alerts when a watched vendor crosses the user-set score threshold
- Watchlist dispatch extracted into a testable service (api/src/services/watchlist-alerts.ts) with 7 unit tests
- SEO routes migrated from Cloudflare Pages _redirects to Pages Functions — _redirects with status 200 does not actually proxy to external Worker domains
- Helper trio (siteUrl / apiUrl / siteHost) extracted so a future trustatlas.com flip is one env-var change
PDF board report + industry landing pages
May 1, 2026- /vendors/:slug/report — print-optimized board report page with @media print rules for clean PDF export
- /for/healthcare, /for/finance, /for/legal, /for/gov — industry landing pages with anonymized case studies, FAQ sections, and FAQPage JSON-LD
- Playwright E2E tests for register, compare, and wizard flows; CI runs on every PR
PWA polish + SEO foundation
April 30, 2026- PWA icon set + site.webmanifest enabling install-to-home-screen on iOS and Android
- sitemap.xml and robots.txt now served by the Worker with vendor URLs included
- JSON-LD structured data on landing page (Organization + WebSite SearchAction) and vendor detail pages (Organization + BreadcrumbList)
- TaxonomyBadge defensive default — no longer crashes on unknown taxonomy values
Subscribe to changes. Material score moves are pushed via the
/feed/score-changes.xml RSS feed.
New vendors via /feed/new-vendors.xml.
Platform changelog is not yet syndicated as RSS — file a request if useful.