May 2026 | DataGrail Documentation

This page documents all customer-facing changes to the DataGrail application made in May 2026. Additional entries will be added every week on Friday.

Week of May 26

🚀 Features Added

• Consent Projects — create and manage multiple, fully isolated consent configurations within a single account. Each project gets its own banner layouts, cookie rules, privacy policies, categories, and locales — and publishes independently, so changes to one brand never touch another.
• Consent Analytics (Beta) — a new Analytics tab provides real-time visibility into consent banner performance, including opt-in/opt-out rates, geographic breakdowns, consent trends over time, and per-category insights.
• Sender Alias self-service configuration — you can now configure your transactional mailer sender name and from address directly in integration settings, without opening a support ticket.
• Assessment collaboration suite — leave comments on assessment questions and sections with markdown formatting, edit your own comments, see comment counts per card, and assign questions or sections to specific team members or external contributors.
• Phone number search in Request Manager — search the request queue by phone number from the sidebar. Supports full numbers, formatted numbers, or partial matches like the last few digits.
• A/B testing integration guides and pattern library — 6 new guides ( Optimizely, VWO, LaunchDarkly, AB Tasty, Convert, Kameleoon) with pre-built cookie and storage blocking templates you can apply to gate experimentation tools behind consent.
• Email Template Publisher diff view — review exact inline diffs of template changes (red for previous, green for updated) before publishing, so you can see precisely what will change.
• Monetate integration for Request Manager — connect Monetate to process access and deletion requests via the Data Privacy API.
• Phaedon Tally integration for Request Manager — connect Phaedon Tally to process access and deletion requests via the Tally Platform API.

🛠 Changes Made

• Vera drawer coexistence — drawers now open alongside the Vera assistant instead of covering it, so you can reference Vera while working in any drawer.
• iOS Consent SDK 1.5.0 — includes fix for banner open event parameter handling.
• Android Consent SDK 1.5.0 — includes consent container version tracking, policy UUID support, and rich text banner rendering.

🐛 Bugs Squashed

• Resolved an issue where "Block All" or "Allow All" could not be saved as the default cookie handling behavior.
• Resolved an issue where recategorized scripts could be incorrectly blocked after a "Reject All" action when categories changed between published versions.
• Resolved an issue where opt-out submissions via custom intake forms were not processed correctly.
• Resolved an issue where the "Cookies Matched" count always displayed 0 when viewing cookie rule details.
• Resolved an issue where the BambooHR integration was failing due to an API URL migration.
• Resolved an issue with consent configuration version handling during publishing.

Week of May 19

🚀 Features Added

• Stream integration for Request Manager — you can now connect Stream (getstream.io) to process access and deletion requests. The integration retrieves user profiles, chat messages, and moderation reports, and supports asynchronous deletion with completion polling.
• Bulk "Process Request" action — you can now select multiple pending requests in the Request Manager list view and process them all at once, eliminating the need to open each ticket individually.
• Consent banner preview mode — a new "Preview" button lets you see exactly how your unpublished banner changes will look and behave on any URL before publishing. Preview configs auto-expire and never affect your live banner.
• Change History tab for System Reports and Processing Activities — a dedicated Change History tab on System Data Report and Processing Activity drawers shows a chronological timeline of every versioned export, grouped by date with direct links to PDF snapshots.
• Readiness Checks for Webhook integrations — you can now configure Webhook integrations to send automated Readiness Check requests, receive structured responses via callback, and drive conditional workflow logic — all without manual coordination.
• Vera integration performance insights — you can now ask Vera about historical integration outcomes, including failure trends over time, per-phase breakdowns (e.g., access vs. deletion), direct-contact responder behavior, and rankings by failure rate.
• Cookie Store API enforcement in Consent — DataGrail Consent now intercepts the modern Cookie Store API on both the main page and inside Service Workers, blocking unconsented cookie writes through the newer browser API that bypasses traditional document.cookie enforcement.
• Consent banner accessibility improvements — category toggle checkboxes now include proper ARIA labels in every supported language, ensuring screen readers can announce what is being toggled. Automated WCAG 2.1 Level AA checks now run on every update to catch regressions in color contrast, keyboard navigation, and focus management.

🛠 Changes Made

• Assessment version indicators — versioned assessments now display their version number (Version 2, Version 3, etc.) directly in the assessments table, overview page, and question view as clean dot-separated metadata.
• Inbound assessment creator attribution — inbound assessments now display the actual contributor's name instead of a generic "Inbound" chip, giving you better visibility into who submitted each assessment.
• Assessment Analysis UI improvements — the insights drawer now features simplified copy, improved checkbox styling, larger system logos, a "New Insights" chip on the assessments table, and a "View Insights" button on the overview status card. Terminology has been updated from "Insights" to "Analysis" throughout.
• Assessment file upload size guidance — the attachment upload area now displays "Maximum file size: 10MB" and shows a more actionable error message when a file exceeds the limit.
• System Profile responsive layout — the System Profile page now adapts gracefully to smaller viewports, with buttons that wrap cleanly, a two-column layout that stacks vertically, and a fluid sidebar that scales with screen width.
• GA4 deletion API migration — the Google Analytics 4 integration now uses Google's new Admin API for user deletion, replacing the deprecated endpoint.

🐛 Bugs Squashed

• Resolved an issue where Salesforce token refresh could fail under concurrent requests due to a race condition.
• Resolved an issue where the deny request flow for phone-submitted tickets did not render the email input field, blocking operators from sending denial notifications.
• Resolved an issue where request modal inputs displayed incorrectly after the recent icon migration.
• Resolved an issue where attempting to add an integration with a name already in use showed a generic error instead of a specific message.

Week of May 12

🚀 Features Added

• Vera source citations — every answer Vera gives in web chat that draws on our knowledge base or privacy laws now includes a Sources section with direct links.
• Global search for all tenants — the top navigation bar with global search is no longer gated behind Vera. All tenants now get the search bar with Cmd+K / Ctrl+K shortcut and results popover, making it easy to find pages, systems, and requests without digging through the sidebar.
• Risk assessment IDs in global search — assessment identifiers like "RA-729" are now recognized by both global search and Vera. Type an ID to get instant access with key details including template, status, creation date, and contributors.
• Search history in global search — your recent searches are now saved and displayed in a merged History tab, making it easy to revisit previous queries across search and Vera.
• Assessment contributor names — contributors are no longer just email addresses. You can now add a first and last name when inviting contributors, and names display on contributor cards throughout the assessment workflow.
• AI auto-categorization for consent tags — when the scanner detects scripts on your site, the system now automatically categorizes them, identifies the vendor, writes a description, and links to the vendor's privacy policy. Auto-classified tags show an AI badge and live on the draft until you publish.
• Vera support tickets and feedback — you can now ask Vera to create support tickets, submit product feedback, or check the status of existing tickets directly in chat.

🛠 Changes Made

• Assessments table redesign — the assessments table now matches the modern system inventory design with column customization, smart sizing, pinned columns with horizontal scroll, a three-dot action menu, and a new product type filter.

🐛 Bugs Squashed

• Resolved an issue where the Last Updated filter on the Policies page returned a TypeError.
• Resolved an issue where cookie rules showed as uncategorized on published consent sites.
• Resolved an issue where "Mark as Reviewed" was not working on system reports.
• Resolved an issue where discovered integrations were accessible without the Request Manager product.

Week of May 5

🚀 Features Added

• IAB TCF support in Consent — you can now enable the IAB Europe Transparency & Consent Framework directly in DataGrail Consent. Align your consent experience with the industry-standard framework used across the ad-tech ecosystem, including standardized purposes, vendor disclosures, and consent signals — all without needing an external CMP.
• Rich text formatting in consent layouts — the layout builder now includes a built-in rich text editor for body text and category descriptions. Bold, italic, underline, hyperlinks, and bulleted or numbered lists are all supported and render consistently across web, iOS, and Android. Formatting is preserved through translations, and all content is sanitized on save for security. Target rich text elements with CSS selectors for additional customization.
• Sub-Processor legal role in Live Data Map — you can now designate systems as "Sub-Processor" in your data inventory, a legally distinct role from "Processor" under GDPR. This distinction is available across system profiles, assessment templates, and system data reports.
• Assessment insights on System Profile — AI-powered risk and data suggestions from assessments are now surfaced directly on the System Profile page. A banner shows pending suggestions across all assessments for that system, and you can accept or dismiss them without navigating into the assessment.
• System Data Report to RoPA auto-sync — changes saved on a System Data Report now automatically propagate to all linked Records of Processing Activities, keeping RoPA data in sync without manual updates.
• Vera search processing activities — you can now ask Vera about processing activities in the Live Data Map. Search by name, filter for stale or incomplete RoPAs, and view associated systems, contacts, and status.

🛠 Changes Made

• Vera auto-pagination — Vera now automatically pages through large result sets when searching tickets, risks, inventory items, assessments, and other records, so you get complete answers without asking for more results.

🐛 Bugs Squashed

• Resolved an issue where multi-paragraph rich text in consent banners collapsed into a single line after saving.
• Resolved an issue where inserting a link in the rich text editor placed it at the beginning of the text block instead of wrapping the selected text. You can now also click an existing link to edit it.
• Resolved an issue where assessment due date edits were blocked even when the date hadn't changed.
• Resolved an issue where assessments with no questions returned an error.
• Resolved an issue preventing unverified requests from being closed if they were submitted via the app.
• Resolved an issue where consent scan submissions failed for URLs that couldn't be resolved.