These release notes evidence that the ProvePrivacy platform is regularly monitored. Major and minor enhancements are released often and issues are addressed where they are identified.
Version Numbering:
The major version number represent a significant new feature, the mid version number represents a minor functionality update or change and the minor version number represents cosmetic changes or bug fixes.
Latest release and announcements
Latest release: v11.1.0, released on 5 November 2026. It adds a Disclosure tab, a case Timeline, new FOI request types and ProvePrivacy Lite. Read the ProvePrivacy platform update announcement for the full explanation.
Each major release has an announcement that explains what changed and why it matters. The newest are listed here, with the detailed version notes below.
- v11.1.0: ProvePrivacy platform update: DSAR and FOI software
- v11.0.0: New DPIA module: integrated impact assessments
- v10.1: ProvePrivacy platform 10.1: GRC and risk management update
- v9.0 to v9.2: ProvePrivacy DSAR redaction tool
- v8.1.0: New Reporting Centre
- v8.0: A platform built to work the way your team does
See every product update in the ProvePrivacy announcements archive.
v11.1.0
Released: 5th November 2026
Large release delivering significant enhancements to data subjects requests and information management modules.
Read the full announcement: ProvePrivacy platform update: DSAR and FOI software.
- Introduced ‘ProvePrivacy Lite’.
- Automated page credit distribution to a monthly cadence.
- Added incident tracking stage information to data subject rights and information management tables.
- Re-designed Circumstances tab on data subject rights and information requests.
- Introduced Timeline tab on data subjects rights to easily track progress of a case.
- Added system generated notes to investigation notes on data subjects rights and information requests.
- Introduced Disclosure tab on data subjects rights and information requests to manage redaction process.
- Introduced Disclosure: Collation to ensure all rights and information request documentation can be clearly identified.
- Introduced Disclosure: Scoping to de-duplicate discovery materials and reduce scope by applying filtering.
- Enhanced Disclosure: Redaction file handling to compress files into a single file prior to redaction.
- Enhanced Disclosure: Redaction to enable saving and restarting a redaction session.
- Introduced Disclosure: Exemptions to capture exemption reasons from redaction and add to the incident audit log.
- Enhanced Disclosure: Results handling to collate input, output and audit files.
- Introduced Disclosure: Secure data subject portal to deliver disclosure documents securely and remove access promptly.
- Introduced Redaction report to assist organisations with budget management.
- Introduced FOI (Scotland), EIR (Scotland), CHAIRs (Housing) and Non-regulatory incident types in information management.
- Introduced Fee and Public Interest delay management (FOIA & FOISA) to information management.
- Introduced FOIA & FOISA incident splitting to allow multi-part requests to be managed separately.
- Improved target date tracking on data subject rights and information management incidents.
- Improved closure process for ‘not disclosed’ FOIA & FOISA incidents.
- Improved Internal and external incident reporting forms.
- Added ability for a Company Administrator to turn on/off redaction service.
- Added email sending support so that emails from ProvePrivacy are client branded and from client domain.
- Added ‘Clients’ to data subject types in RoPA module.
- Resolves a minor ‘500 error’ in DPIA module.
v11.0.0
Released: 11th October
Major release delivering a DPIA module:
Creating and finding DPIAs
- New DPIAs option in the side menu lists every DPIA you are entitled to see, with reference, status, outcome, owner and review state.
- Create a DPIA for a project or a RoPA activity. A project DPIA needs no separate project register.
- The RoPA High Risk tab lists every DPIA linked to that activity.
- Link a primary activity and any number of covered activities to a single DPIA.
- Clone an assessment as a sibling to reuse the answers without sharing the activity set.
- Cloning a RoPA activity now links to the existing DPIA instead of copying it.
- In-platform: complete the assessment in ProvePrivacy and export a prefilled Word document.
- Your own document: upload your own PDF or Word DPIA and certify it. ProvePrivacy records who certified it, when, and the declaration wording.
- Exports are prefilled from your data, with only genuine gaps left as labelled blanks. They use your own risk-matrix terminology.
- A six-stage tracker shows progress against the anticipated conclusion date, with green, amber and red urgency.
- New statuses: Draft, Drafted, Consulted, Assessed, Regulator Consultation, Concluded, Signed Off, Abandoned, Reopened and Archived.
- Every DPIA has a review date
- Describe the processing: nature, scope, context, data subjects, personal data categories, data flows, international transfers and security assessments. Link information assets too.
- Roles and data-sharing details read through from the RoPA. Findings are raised automatically where a data sharing agreement, contract, transfer or security assessment looks missing or non-compliant.
- Record necessity and proportionality, reusing your RoPA lawfulness work.
- A dedicated AI tab appears when AI is involved. It applies a shared AI framework, runs hard-stop checks and lists the linked AI systems.
- Raise concerns in context, let contributors propose findings, and promote confirmed risks to the risk register.
- Record consultation feedback and role-aware sign-off for the owner, the DPO and any senior approver.
- An Accepted outcome requires every registered risk to have a Target grade and at least one mitigating action.
- Authority referrals have their own dates and outcomes.
- Invite colleagues, vendors, joint controllers and auditors by personal link, with no shared logins.
- Create covered activities as drafts and run a full RoPA assessment while the DPIA is open.
v10.1.004
Released: 5th October
Minor release to improve redaction file uploads:
- Max files per session: 100
- Max size per file: 25MB
- Concurrency: 2 parallel uploads
- Failed files stay in the queue for Retry failed
- Successful files are removed from the queue as they complete
- Page reload happens once after the batch finishes (or when the user closes after partial success)
v10.1.003
Released: 4th October 2026
Minor release to implement wider file types on the redaction engine, the engine now supports:
- PDF: Standard PDF documents
- Office Documents: Word, Excel, PowerPoint, RTF, HTML
- Images: JPG, PNG, GIF, BMP, TIFF
- Text Files: TXT, CSV
- Email Archives & Files: MSG, EML, PST, OLM, MBOX
- Archives: ZIP
v10.1.002
Released: 7th September 2026
Minor release to implement fixes to Root Cause Analysis and Action deletion:
- Removed an issue which caused the absence of a root cause analysis to block an incident closure
- Resolved an issue where an action could not be deleted
- Added a delete icon to the new Action accordian in data breach actions
v10.1.001
Released: 24th August 2026
Minor release to add a demonstration platform to the new e-learning suite.
v10.1.0
Released: 23rd August 2026
Large release combining platform wide broadcast announcements, automatic mandatory training on joining, and a significant upgrade to risk, root cause analysis, notifications, audit and security across GRC:
- New platform announcements area in the admin portal, letting ProvePrivacy staff write, send, review and retract broadcast notifications to users
- Announcements display in the notification bell and centre as Platform announcement, with safe plain text rendering, reaching active users in normal organisations (Learning Only accounts excluded)
- New ‘Mandatory on join’ function added to Settings, E-Learning, for Awareness courses, with existing users automatically backfilled and assignments following each course’s own schedule
- Create user screen and bulk user upload now show mandatory courses as Assigned automatically, listing only optional courses to select
- Risk records now retain a full history of inherent and residual score changes
- New Risk Assessments area on each risk record, showing history and allowing reassessment with a reason, plus an optional external reference field
- Risk matrix labels, such as Probability and Impact, can now be customised in settings
- New shared root cause analysis panel across Breach, FOI and Rights, recording contributing causes, findings and links to actions, controls and risks
- New Taxonomy settings area for managing RCA cause categories, with restricted editing rights
- New Risk and Rights settings areas added, covering GRC configuration and outcome category management
- New notification centre with a bell icon, unread count, and the ability to mark notifications as read or dismiss them
- New audit trail recording who made important GRC changes, when, and the before and after detail
- FOI now supports proper redaction and File Centre functionality, matching Rights
- Organisations can now be placed on an E-Learning suite subscription with an expiry date
- Strengthened security checks, plus CSRF protection by default on risk, breach and controls forms
- Fixed a broken data sharing assessment link and a redaction credit notification linking to a missing page
- Question bank CSV import added to the admin portal, plus a fix for uploading learning materials locally
v10.0.0
Released: 5th August 2026
Major release introducing the new Learning Centre, replacing the previous KnowledgeZone learner experience:
- New Learning Centre replacing KnowledgeZone, giving learners a single branded hub for courses, guides, knowledgebase articles and tutorials
- Personalised course hub that only shows the tabs relevant to each learner, with Assigned Courses opening first and filters for Due, Completed and Upcoming
- Certificates can now be downloaded directly from the course hub, with no extra navigation required
- Classroom now supports a wider range of content types within a single course, including SCORM, xAPI, hosted video, YouTube, PDF, slide decks, webpages and quizzes, with PDFs viewable directly in the browser
- New post course feedback capture, with learners choosing whether their feedback is shared with ProvePrivacy
- New Learning Dashboard within the Reporting Centre, giving managers live visibility of overdue, due soon and completed training, with drill-down by department and course
- New E-Learning Manager setup checklist to guide configuration of departments, users, courses and assignments, saving progress as you go
- Organisation level Awareness training schedules, configurable as a single assignment or an annual recurring cycle
- New bulk course assignment packages, reducing admin time for larger training rollouts
- Learning Only accounts are now contained to the Learning Centre, while authorised managers retain reporting access
- Strengthened security across the Learning Centre, including entitlement checks and protection against malformed course packages
v9.2.0
Released: 1st August 2026
Revised email templates across the whole application:
- 48 emails reformatted in the main application
- 8 emails reformatted in the ProvePrivacy administration portal
v9.1.0
Released: 31st July 2026
Minor functionality and security improvements to the ProvePrivacy administration portal.
- Improved visibility for managing individual organisations
- Enhanced redaction credits management
- Improvements to management of client data at end of life
- Simplified creation of client organisations and subsidiaries
- Added API creation for internal/external reporting forms to admin portal
- Resolved an issue where revising an organisation changed the SSO login details
- Added functionality to allow SSO login details to be changed by an administrator
- Added Redaction history table detailing each redaction exercise per case (on the client portal)
- Fixed redaction button hover behaviour on client portal
- Focused redaction page count on to redaction table only
v9.0.0
Released: 29th July 2026
Major release implementing new functionality to the platform introducing personal data redaction integrated into data subjects rights management.
- File Centre added into Data Subjects Rights Module
- Select files to be marked for redaction
- Deduplication of files prior to redaction
- Conversion of files into a single PDF
- Redaction marking a PDF
- Creation of a redaction output file
- Creation of a redaction audit file (which elements were redacted)
- Redaction page credits added to administration portal
- Low credits email to client admin
- No credits email to client admin and ProvePrivacy support
v8.1.0
Released: 13th July 2026
Upgrades to Management Information Reporting
- New Reporting Centre with live MI dashboards for RoPA, Breach, Data Subject Rights, Information Requests, Risk, Policy, Controls, and Information Assets
- Organisation and department scoping, drill-down tables, chart filters, and refresh for up-to-date metrics
- Clearer Reporting Centre navigation, menu icons, and header branding
- New Privacy Notice Drafting Aid to support notice creation and assessment reporting
- Breach/Data Subject Rights and Information Request reportable-outcome view, with time-to-report limited time remaining open
v8.0.0
Released: 4th July 2026
Major user experience enhancements to the platform:
- Switched to a blue theme throughout the application
- Extended screen width improving visibility of information
- Improved navigation including a ‘tabbed RoPA’ and breadcrumbs
- New home screen incorporating, insights and incident notification badges
- Improved Settings screen, incorporating ’embedded Incident Reporting Form’ creation
- Improved tables throughout, incorporating improved column filtering
- Improved RoPA, including dashboard, simpler navigation and incorporated risk management
- Improved Risk Management, introducing the risk matrix and improved action planning and closure flow adding context into risk tables
- Improved Policy Management, separating Review documents from Readable document for document owner clarity
- Improved Data Subjects Rights reporting, adding internal and external reporting forms and improved action planning
- Improved FOI Management including improved tracking, action planning
- Improved Information Asset Management introducing new deep dive function to identify data types on assets etc
- Improvements to Controls Management
- General improvements across the platform for file uploads, date and time pickers, navigation breadcrumbs
- Minor bug fixes
v7.7.0
Released: 21st June 2026
Security & Maintenance Upgrades to the ProvePrivacy database
v7.6.0
Released: 10th May 2026
Enhancements to KnowledgeZone stability and learner journeys:
- Landing page changed to My Courses.
- Course tiles added for knowledge base and tutorials videos.
- Learner certificate updated.
- Course page user interface improvements (for Scorm files).
- Improved course completion database update logic.
- Improvements to administration screens.
- Stability improvements.
v7.5.002
Released: 20th February 2026
Enhancements:
- Changes to Data Sharing Agreement assessments (Data Controllers only) to capture if other arrangements/documentation is in place.
- Reworded Data Retention option ‘Data is deleted immediately’ to ‘Data is not retained’
- ‘Purpose of Transfer’ is now captured at Activity level not Third Party level to provide greater granularity when the same third party is used across activities.
- Data Sharing relationships can now be recorded for transfers that flow both outward and inward (i.e. both ways).
- Issue fixed where sometimes a third part Security Assessment (IT) was not recording the correct status.
v7.5.001
Released: 4th February 2026
Minor enhancements:
- New ‘Client’ filed added to data breaches, data subjects rights and FOI incidents to allow users to record incidents for thier own clients.
- New ‘Outcome Reason’ field added to data subject rights incidents to allow closure data to be captured to enhance MI reporting.
- Added options Agency Staff, Volunteers and Next of Kin to ‘Who are the Data Subjects’ within the RoPA.
- Renamed option Consumers to Member of the Public in ‘Who are the Data Subjects’ within the RoPA.
- Renamed Open Access to Open Access/Generic Account in Data Management.
- Renamed Public Interest to Public Task / Interest to assist NHS clients.
- Improved SSO login process to bypass main log in screen and load SSO immediately.
v7.5.0
Released: 19th January 2026
Enhancement:
- Implemented revised main menu and side menu to group modules into Compliance, Incidents and Management functions.
- Added Information Asset module.
- Added ability to search for and merge information assets.
- Added information asset details screen to enable editing of asset details.
- Enhanced data breach reporting form to include adding to SharePoint sites.
v7.4.002
Released: 22nd October 2025
Minor bug fix:
Fixed a bug where ‘DPIA Completed Date’ was not allowing a historic date to be added.
v7.4.001
Released: 13th October 2025
Minor enhancements:
- Extended the text box for ‘Other Personal Data’ to allow greater visibility of longer descriptions
- Enhanced user role profiles to allow visibility of a related organisations data breach incidents.
v7.4.0
Released: 11th September 2025
Enhancement:
- Introduced new functionality to allow client organisations to add a data breach reporting form to an intranet web page
v7.3.001
Released: 9th June 2025
Data Breach Module Updates:
- Added an option to record the breach reporting date for a manual breach report
- Added an option to capture Breach Closure Date – which may be different to reported date
- Resolved an issue where the Breach Investogator was being changed if a Breach was re-opened
- Resolved an issue where Reporting Rationale field was not being removed if options were changed
- Resolved an issue where Target Date was not being set if ‘No Personal Data’ was selected
v7.3.0
Released: 19th May 2025
Enhancement & Upgrade:
- Upgrade to RDS to ensure continued security
- Separation of Knowledgezone databases
v7.2.007
Released: 27th March 2025
Minor bug fix:
- Resolves an issue affecting one user when attempting to save a data breach
v7.2.006
Released: 26th march 2025
Minor bug fix:
- Resolved an issue where a course could not be assigned to a user from User creation/update screen
v7.2.005
Released: 13th March 2025
Minor bug fix:
- Resolved an issue which was limiting the vendor search on Data Sharing screen.
v7.2.004
Released: 7th March 2025
Minor bug fix:
- Resolved an issue where Data Breaches which resulted in ‘No Breach’ were incorrectly categorised
- Resolved an issue where information banners were displayed incorrectly on some data breach incidents.
v7.2.003
Released: 5th March 2025
Minor enhancement:
- Removed the functionality which automatically added actions to a new data breach following client feedback
v7.2.002
Released: 6th February 2025
Minor bug fix:
- Resolved an issue which was failing a high risk assessment if special category data was selected
- Resolved an issue which was showing data sharing assessments as in progress when they had passed
v.7.2.001
Released: 29th January 2025
Minor bug fix:
- Fixed a bug to allow arrow button on breach screen to operate correctly
- Fixed an issue where changing a URL created a security issue
v7.2.0
Released: 29th October 2024
Minor release to add NCSC CAF framework into Controls Module and minor bug fixes
- National Cyber Security Centre, Cyber Assurance Framework added to Control Module
- Improved reliability of document loading within Policy Module
- Improved reliability of document loading within Attachment Screens
- Improved user experience when retrieving vendors on data sharing screens
- Added ability to change vendors on the transparency screen
- Fixed a bug where ‘Other Data Items’ was displayed on International Safeguards screen in some circumstances
v7.1.004
Released: 23rd September 2024
Minor bug fix:
- Fixed a bug which stopped RoPA risks showing in the risk log (impacted 1 client only)
v7.1.003
Released: 19th August 2024
Minor security release:
- Changes to database password handling to improve security
v.7.1.002
Released: 16th August 2024
Minor improvements:
- Changes to knowledgezone articles, improving links to other resources.
v7.1.001
Released: 12th August 2024
Minor improvements and bug fixes
- Consolidated options and re-worded text on Breach Consequences tab
- Consolidated options on Breach Informing Others tab
- Extended size of Consent Evidence and Data Sharing Agreement Description fields
- Aligned DSAR Target date to commence from when the Date Identity was confirmed
- Added Breach Reported to Regulator date to improve Management Information reports
- Added functionality to exit MI Module to the Main Menu by clicking the ProvePrivacy logo
- Resolved am issue where the arrows on the Breach screens were not navigating to the next page
- Resolved an issue where DPIAs could not be raised historically
- Resolved an issue where DPIA Other Concerns information was being lost
v7.1.0
Released: 1st July 2021
Minor release to add NIST 2.0 framework into Controls Module:
- NIST 2.0 framework added to Controls module
v7.0.0
Released: 2nd June 2024
Major release implementing new functionality for the Management Information Module:
- Management Information Module
- New User Type Added – MI Manager
- New User Type Added – MI User
- Dashboard access provided from within the MI Menu
- Dashboard access provided from within other modules
- RoPA dashboard
- Breach dashboard
- Data Subject Rights dashboard
- Information Request dashboard
- Risk dashboard
- Policy dashboard
- Controls dashboard
v6.0.001
Released: 23rd March 2024
Minor release implementing various security updates:
- Sentry Logs implemented
- AWS Secrets Manager Implemented
- Security fixes on API tokens
v6.0.0
Released: 3rd February 2024
Major release implementing Single Sign On, upgrades to LAMDA processes and other enhancements.
- Single Sign On implemented using the clients Microsoft EntraID services to allow user access to ProvePrivacy
- Added unique sub domains for each ProvePrivacy client application.
- Lamda upgrade for services relating to Knowledgezone SCORM files.
- Lawful basis now allows multiple selections
- Transparency Assessment now allows multiple data sources to be selected
- Resolved an issue with duplicatation in Data Management module
v5.0.001
Released: 2nd December 2023
Minor release implementing minor fixes following last release
- Changes to layout of Information Asset screen to simplify the workflow
- Fixed issue with creation duplication issue with departments
v5.0.0
Released: 5th November 2023
Major release implementing changes to Data Management Module to collect Information Assets and adding data retention lookup.
- New Data Management menu screen added
- New Data Management overview screen added
- New Data Retention overview screen added
- New data retention schedule look up added utilising NHS and University retention schedules
- Database structure changes to support Information Assets
- Changes to vendor matching to avoid duplication
- Company Manager can now change users names and email address
- Job Title field extended to 100 characters
- Depatment Name field extended to 100 characters
- Department Description field extended to 100 characters
- Activity Name field extended to 100 characters and widened on screen
- Name of Third Party field extended to 100 characters
- Consent evidence location field extended to 100 characters
- Data Management – Vendor name fields extended to 100 characters
- Data Management – Application name fields extended to 100 characters
- Data Sharing – Organisation Name field extended to 100 characters
- Data Sharing – Transfer Name field extended to 100 characters
- Data Sharing – Contract Description field extended to 100 characters
- Data Sharing International Transfer Description field extended to 100 characters
- Data Sharing – Security Assessment Description field extended to 100 characters
- Contract exists field changed from No to No/Not Known
- Rationale added to Public Interest and Legal Obligation lawful basis
- RoPA Excel report extended
- Cosmetic changes to options on Information Request (FOI) screens
- Cosmetic changes to Information Request (FOI) closure email
- Options added to ‘Who are the data subjects’ to support Academia
- Options added to ‘Data Usage’ to support Academia
- Rename ‘Remediation Plan’ to ‘Associated Risks’ in Breach and Data Subjects Rights module
- Breach target date calculation corrected so it is based upon ‘date identified’ rather than ‘date reported’
- Actions can now accept historic date for actions closed in the past
v4.0.0
Released: 7th May 2023
Major release implementing the Information Request Module (FOI)
- Information Request Module implemented
- New User Type added – FOI Manager
- New Information Request Menu screen
- New Information Request Management screen
- Updates to Incident Reporting menu to allow 3rd Party Request, Data Breach and Data Subjects Risghts to be selected separately
- New Information Request emails added
v3.2.002
Released: 30th January 2023
Minor changes to support NHS clients
- Vendor / Organisation field extended to 75 characters
- Options added to ‘Who are the data subjects’ to support NHS
- Options added to ‘Data Usage’ to support NHS
v3.2.002
Released: 1st November 2022
Implemented changes to the Knowledgezone module
- Provided access to all ProvePrivacy users to the Knowledgezone tutorials section
- Provided access to all ProvePrivacy users to the Knowledgezone knowledge base section
- Changes to button colours to match ProvePrivacy platform
- Restructure of Knowledgezone landing page
- Restructure of My Courses page
- Restructure of Videos page
- Minor changes to Knowledgezone email format
v3.2.001
Released: 26th June 2022
Improvements and new functionality added into the Controls module
- Implemented ISO 27001:2002 Controls in Controls Module
- Changes to Evidence Description in Controls Module
- Resolve issues in assigning courses with Knowledgezone
- Resolve issue with reporting containing limited records
- Improve password security options
- Enabled users to re-open incidents
- Enabled clickable URL’s in location fields
- Applied changes to ensure consistency across Attachments screens
v3.2.0
Released: 25th March 2022
Additional Feature Release
- New development to allow Risks to be linked to Controls
- Implement data retention rules relating to company deletion, user deleteion and client file deletion
- Improve management of user passwords by a ProvePrivacy administrator
- Implement a demonstration platform
- Implement a Client trial platform
- Cosmetic changes to menu options
v3.1.0
Released: 13th October 2020
Additional Feature Release
- Added functionality to the Data Sharing screens to allow multiple vendors
- Allowed sharing of vendors across multiple activities
v3.0.0
Released: August 2020
Major implementation of New Module:
- E-Learning module
- E-Learning available as a separate system
v2.1.0
Released: May 2020
Improved Functionality Release
- Group Company functionality added with the ability to add subsidiaries
v2.0.0
Released: January 2020
Major implementation of new modules:
- Risk Module
- Data Breach Module
- Data Subject Requests Mosule
- Policy Module
- Technical and Organisational Controls Module
v1.0.0
Released: October 2018
Initial Release, minimal viable product:
- Record of Processing Activities Module