Changelog

Organization administrators can now configure advanced settings including default model routing policies, organization-wide DLP enforcement levels, and session timeout durations directly from the cloud portal.

New test mode for DLP policies lets administrators validate detection rules against sample data before enabling enforcement. Simulation results show which rules would trigger, what actions would be taken, and confidence scores for each match.

Outpost deployments now emit full distributed traces via OpenTelemetry, covering request ingestion, DLP inspection, policy evaluation, and provider routing. Trace context propagates end-to-end for correlation with application-level spans.

New documentation guide covering notification configuration — webhook delivery setup, alert routing rules, notification categories, and integration with external alerting systems like PagerDuty and Opsgenie.

New case study showing how a 650-attorney AmLaw 100 firm deployed Arbitex Gateway across ChatGPT and Microsoft 365 Copilot traffic. Covers DLP enforcement for case matter numbers, attorney-client privilege indicators, and client PII — with ABA Model Rules 1.6 compliance attestation and tamper-proof audit trail evidence for ethics reviews.

New blog post for enterprise architects and IT security leads covering how zero trust principles apply to AI traffic. Covers identity verification on every request, provider-agnostic DLP enforcement, mTLS for outpost communication, and a practical 5-item implementation checklist.

New notification center in the cloud portal surfaces DLP enforcement alerts, policy update confirmations, and system health events in a unified feed. Configurable notification preferences by category and severity level.

DLP alert thresholds are now configurable per policy rule. Set custom trigger counts and time windows for escalation alerts, reducing noise for high-volume rules while maintaining sensitivity for critical data categories.

Outpost instances now complete in-progress DLP scans before shutting down during deployments and scaling events. Eliminates dropped requests during rolling updates and ensures every interaction is fully evaluated and logged.

New documentation guide covering role-based access control configuration — predefined roles, custom role creation, permission scoping, and integration with SAML group claims. Includes practical examples for common organizational structures.

New case study showing how a mid-market investment bank deployed Arbitex Gateway across ChatGPT and GitHub Copilot traffic. Covers DLP enforcement for financial identifiers (CUSIP, SSN, credit card numbers), M&A deal memo protection, and SOC 2 audit evidence from the tamper-proof audit log.

New case study showing how a 12-hospital network deployed Arbitex Outpost in air-gap mode to protect PHI in clinical AI documentation workflows. Covers ML-driven contextual validation for clinical narratives, HIPAA compliance verification, and audit trail evidence for 45 CFR 164.312 technical safeguards.

Refined role-based access controls in the cloud portal with granular permission assignments for DLP policy management, audit log access, and user administration. Organization admins can now create custom roles that map to their internal security team structure.

Audit log entries can now be exported in CSV and JSON formats directly from the cloud portal. Export filters support date range, user, policy rule, and enforcement action. Designed for compliance teams that need to attach enforcement evidence to regulatory submissions or internal audit reports.

New integrity verification endpoint for Outpost deployments validates the full tamper-proof audit trail on demand. Returns chain status, link count, and any detected gaps. Supports automated compliance monitoring workflows and pre-audit verification checks.