Release 2026.10.09-1
Single sign-on, the Agent Review step in Preview, and a choice of what Memory learns from.
- Cloud, United States
- Cloud, Australia
- Not in this release
- Self-hosted image
- Not in this release
Security
- A revoked or changed API key stops working at once on every server, not only on the one that made the change.
- A project’s production data set can no longer be deleted.
- Joining or leaving a group needs the authority to assign every organization-wide role the group holds.
- Google sign-in respects the setting that turns self sign-up off.
- Documentation and build tool dependencies updated.
New
- Single sign-on: sign your team in with Microsoft Entra ID, Okta or any OIDC provider, map groups to roles, and require single sign-on for the whole organization, with exemptions. See Single sign-on.
- Agent Review step (Preview): an AI reviewer, built in or your own, approves, corrects or passes on documents before people see them. See Agent Review.
- What Memory collects: choose whether Memory learns nothing, learns only after a person’s review, or learns from every correction. See Memory.
- Updated Terms of Service, Privacy Policy, Data Processing Agreement and Service Level Agreement, effective 2026-10-08: stored documents and OCR stay in your Region, and AI model inference runs on global model deployments unless your Order Form states a location. See Data handling.
Improved
- Groups can hold the Admin role, and Create Group assigns roles.
- Human Review has settings for work an agent has seen: whether Assistants may decide, and what happens when the agent made corrections.
- Evaluation compares results with ground truth without every field being confirmed first. Ground truth comes from a person’s review in an evaluation data set or from a copy of a reviewed transaction.
- Reporting loads faster over many days.
Fixed
- A failed or deferred processing task is retried instead of lost.
API
da admin sso: set up single sign-on for a whole self-hosted deployment from the command line. See Single sign-on for the whole deployment.