What's new

• Notifications inbox — new bell icon in the dashboard header surfaces change-request approvals, score changes, policy updates, and flagged vendors. Daily or weekly email digest, plus granular per-type preferences.
• Privacy Report PDF — one-click branded export for claimed companies. Cover page, executive summary, score breakdown, subprocessors, international transfers, AI practices. Stored in S3 and re-downloadable from the Reports tab.
• API Costs dashboard — new /admin/api-costs page with stat cards, daily trend, per-service / per-model / per-operation breakdown, and a pricing catalog with OpenRouter sync. Historical recalc command included.

Improvements

• Gemini cost calculation now uses the correct provider rates (previously misreported as OpenAI).
• extract_policy_dates uses a regex fast-path before falling back to AI — 94% token reduction on that operation.
• Per-operation token budgets for data purposes, retention, transfers, and deletion difficulty (40–98% reduction).

Fixes

• TypeScript errors breaking Forge deployment.
• Admin tab crash when cost_usd arrived as a Laravel decimal cast string.

Action Items

The company dashboard now converts score-breakdown red flags and negative factors into trackable compliance tasks:

• Priority, status, assignee, notes per item
• Auto-resolve on re-crawl when the underlying issue disappears
• Re-open when an item re-appears
• Manual items never auto-change

Change Requests

All write actions on claimed companies (profile edits, policy URL updates, subprocessor add/edit/remove, correction requests, re-crawl requests) now flow through a review queue visible at /admin/requests. Admins can approve or reject with notes, and the requester is notified via bell-icon and email.

Other

• Vendors tab split into "linked" (with domain) and "other" (generic) cards
• Policy version history modal in both the dashboard and admin views
• Sprint 3 permissions seeded: action items, report export, notifications

We're live.

Core features

• Directory of 1,400+ companies with privacy scores and risk signals
• Deep analysis across 17 extraction operations (data collection, sharing, retention, rights, AI practices, and more)
• Company claiming so verified owners can manage their profile
• Public API with score, search, and company lookup endpoints
• Chrome extension for quick privacy checks while browsing
• Developer dashboard with API keys, usage quotas, and billing

Under the hood

• Multi-provider AI pipeline (OpenAI + Gemini compatible)
• Firecrawl-based policy fetching with version history
• Spatie activity log on all write operations
• Stripe Checkout + webhook-driven subscription management

Welcome — and thanks for being here early.