Trust

Changelog.

Public product, security, and infrastructure updates for Embrasure. This page summarizes customer-visible changes and omits security-sensitive operational detail.

2026-07-13

Stronger workspace sign-in and identity lifecycle

  • Email/password accounts now use authenticator-app two-step verification, including support for a backup authenticator.
  • Workspace SSO and maximum session length are enforced consistently across the web app, API, agent authorization, and workspace data policies.
  • Published onboarding guidance for safe SSO rollout, SCIM provisioning, session testing, and account recovery.

2026-06-09

Production web traffic now redirects HTTP to HTTPS

  • The public web load balancer redirects port 80 traffic to HTTPS on port 443.
  • The redirect is codified in the AWS deployment configuration for the web service.

2026-06-09

Dependency update for the production API

  • Updated the locked Starlette package used by the API runtime.
  • CI, secret scanning, CodeQL, and API tests passed before the change reached main.

2026-06-08

Public trust pages

  • Published public pages for security, privacy, terms, and platform status.
  • Added security contact details and a machine-readable security.txt file.

2026-06-07

AWS production hosting

  • Moved the hosted web app, API, and worker services to AWS ECS/Fargate.
  • Added production smoke checks for the web and API deployment workflow.