Security Changelog

Platform hardening · 2026

• 2026-08-16

  Hardware-backed device trust with sliding renewal

  Trusted devices now wrap unlock material under a non-exportable key held by the operating system's key store, renew automatically while in use, and fall back to a password prompt instead of a weaker path if the browser evicts the key.

• 2026-08-10

  Strict per-account isolation of local caches

  Profiles, avatars, transcripts and previews cached on a device are now cryptographically bound to the account that produced them and discarded when the vault changes, so no artefact from one account can surface in another session on the same machine.

• 2026-08-02

  Zero-access mailbox with in-browser search

  Incoming mail is sealed to the recipient's keys on arrival, mail search runs entirely client-side, and mailbox addresses are isolated on a dedicated sending domain kept separate from the corporate domain.

• 2026-07-31

  Encrypted media streaming and resumable uploads

  Large media is decrypted chunk by chunk during playback instead of being downloaded whole, and interrupted uploads resume from an encrypted local checkpoint with post-transfer integrity verification.

• 2026-07-28

  Automated security test suite reaches 226 tests

  Continuous integration now runs an expanded suite covering row-level-security isolation and randomized (fuzzed) checks of server functions and triggers, plus a dedicated gate that fails the build if any code path would let unencrypted content leave the browser.

• 2026-07-15

  Scoped API keys and signed webhooks

  Public API keys can now be limited to specific scopes and are stored hashed. Outgoing webhooks (including Zapier/Make integrations) are signed with HMAC-SHA256 so subscribers can verify authenticity and retry safely.

• 2026-06-30

  Per-channel roles enforced in Rooms

  Viewer, creator, moderator, admin, and owner permissions for DRIVUNO Rooms channels are now enforced directly at the database layer, not just in the interface.

• 2026-06-12

  Session geo-anomaly detection

  A sign-in from a country not previously associated with an account now raises an alert and is recorded in the audit log.

• 2026-05-28

  Immutability triggers and identity-anchored policies for collaboration data

  Row-level security policies across teams, rooms, and shared-folder tables were extended to anchor strictly on the authenticated identity, and database triggers now block tampering with protected audit and history records.

• 2026-04-22

  Hardened account recovery

  The recovery flow now verifies recovery proofs on the server before any master-key material is released, with tightened rate limiting to slow down abuse attempts.

• 2026-04-05

  Password-protected public links with a 24-hour maximum lifetime

  Public share links can now require a password; the server verifies an Argon2id-derived proof without ever learning the password itself. All public links now expire automatically after 24 hours at the latest.

• 2026-03-02

  Resumable, chunked uploads

  Large file uploads are now split into chunks and can resume after an interrupted connection instead of restarting from zero — most useful on mobile networks.

• 2026-01-19

  Streaming encryption for large files

  Large files are now encrypted and decrypted in a continuous stream of small chunks rather than all at once, so the full file is never held in memory in one piece — improving both reliability and device memory usage.