Changelog

What shipped, and what it changes for you

Every release that touches enforcement, residency or evidence, with the date it landed and the plans it applies to. Security reviewers can cite this page directly.

Releases
28 Jul 2026 New 20 Jul 2026 26 Jun 2026
Need a change documented for an audit? Ask for the release record.
2026-07-28
Compliance
Rolling out to all EU projects ahead of the August deadline.

AI transparency controls: disclosure statements and image watermarking

Article 50 of the EU AI Act (Regulation (EU) 2024/1689) applies from 2 August 2026: people must be told when they are interacting with an AI system, and AI-generated media must be marked as such. Both are now enforced in path, so no application team has to implement them separately.

Disclosure injection in agent conversations

A policy-defined statement is injected into the conversation so the person on the other side knows they are talking to an AI assistant. The wording is set per policy, per language and per jurisdiction, and the exact text plus the policy version is written into the request record.

Watermarking for AI-generated images

Images returned through the control plane carry a machine-readable provenance marker and optional visible mark, applied centrally rather than per provider. Coverage is the same whichever model produced the image, and the marking decision appears in the audit trail alongside redaction and routing.

Available on all plans Off by default, enabled per policy No application changes
2026-07-20
Availability
General availability. Preview accounts migrated automatically.

obstruo is live, hosted in France on OVH

The public version of obstruo is generally available and runs on OVH infrastructure in France. Policy evaluation, redaction and the audit trail all execute in-country, so organisations with French or EU residency requirements can put production traffic through the control plane without a transfer assessment.

French data residency

Redacted payloads, policy versions and evidence records stay in the French region. The processing region is written into every request record, so residency is something you can show rather than assert.

No migration work for preview users

Preview projects moved to the production environment with the same keys, base URL and policies. Nothing to redeploy.

EU regions only Paid plans open Sovereign deployment on Enterprise
2026-06-26
Release
Public preview, open to anyone.

Public preview opens for free registration

The first public build of obstruo is available to anyone who registers, at no cost. Connect a provider key, point one application at the control plane, and the organisation policy applies from the first request.

One key, one endpoint

Provider credentials move into the vault and applications hold a single obstruo key against an OpenAI-compatible base URL. Existing SDK calls keep working.

Redaction, routing and audit from day one

Preview projects include per-country redaction, model and routing rules, and the full evidence record, so teams can evaluate the controls against real traffic rather than a demo.

Free registration One project Superseded by general availability
Earlier work happened in private trials with design partners and is not published here.

Your AI. Your data. Your control.

Start with one project on the free plan, or bring the release history to your next security review.

See obstruo in action Read the FAQ