Product Documentation
Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Back to homepage

4.1

Release notes - Data Breach Response - 4.1.0

Release Date: November 24, 2025

Epic

Metadata Search Enhancement

We’ve added 5 new and updated processing fields in the Document List column of the Documents module. These fields provide deeper insight into your documents, making it easier to understand your data at a glance and perform more precise searches.

The new fields include:

  • Family ID: The ID of the first file in the file family: email or loose file (word, ppt, pdf, etc.). This file will never be a container file.

Search syntax for this field is family_id:"family id", e.g., family_id:2FG2G55FGF.

  • Parent ID: The ID of the file from which a file was extracted. This can be an attachment, an embedding, or contained in a container file.

Search syntax for this field is parent_id:"parent id", e.g., parent_id:2FG2G55FGF.

  • All Family IDs: A list of all the Family IDs for every duplicate of the file, separated by semicolons.

Search syntax for this field is all_family_ids:"family ids", e.g., all_family_ids:2FG2G55FGF.

  • All Parent IDs: A list of all the Parent IDs for every duplicate of the file, separated by semicolons.

Search syntax for this field is all_parent_ids:"parent ids", e.g., all_parent_ids:2FG2G55FGF.

  • All Source Paths: A list of all source locations (“Source Paths”) for every duplicate of the file, separated by semicolons.

Search syntax for this field is all_source_paths:"source path", e.g., all_source_paths:"/User/Documents/FileName".

  • Reviewed Date/Time: The date/time when the document’s review status was officially set to Reviewed by the designated reviewer.

Search syntax for this field is reviewed_datetime:"datetime", e.g., reviewed_datetime:2019-12-13.

  • QA Date/Time: The date/time when the document QA’s status was officially set to either QA Approved, QA Rejected or QA Complete with Changes by the QA officer.

Search syntax for this field is qa_datetime:"datetime", e.g., qa_datetime:2019-12-13.

For more information, please refer to Fields and Field Search documentation.

Backward Incompatibility: These new and updated fields are not available in Projects created with Version 3 or earlier.

All-Fields Metadata Post-Processing

To give you better visibility into all-fields metadata post-processing, we’ve added a new trackable job in the Job Manager and Activity History. This job monitors the population of fields, including All Family IDs, All Parent IDs and All Source Paths.

all-fields_ah.png

You can now use the Field columns in the Documents page to filter and refine your search results. To provide a clean user experience, we have removed the redundant Review Status option from the Advanced Search menu.

DBR-11077 Enhanced Upload & Processing Performance & Tracking

We’ve significantly improved the stability of file uploads and added activity logs for key upload activities:

  • Automatic Upload Retries: Uploads now include automatic retries to handle instances where the browser loses connectivity with the server or when TUSD restarts.
  • Session Management: A session token is automatically generated during an active upload, ensuring that uploads do not fail due to session expiration.
  • Activity History: We’ve added detailed activity logs to monitor actions such as when users close the browser tab, refresh the browser page, attempt to log out of the application during processing, and when uploads resume or restart.
  • Efficient Data Distribution: Data-intensive spreadsheet and CSV files are randomly distributed across the population to prevent resource exhaustion and eliminate bottlenecks.

DBR-14206 Security Update: Enhanced Input-Text Protection

We’ve implemented HTML Sanitation across all areas in our application that accept user-input text. This update enhances security, prevents malicious code from attacking the application, and ensures overall stability.

Story

DBR-12886 New Look: Improve Readability and User Experience

Canopy has rolled out a new comprehensive visual designed to improve readability and providing a cleaner, more intuitive, and highly accessible experience.

  • Refreshed Typography: We have introduced a new font to enhance on-screen readability.
  • Updated Button Interface: Buttons have been redesigned for a cleaner look, clearer hierarchy and accessibility.
  • Review Management The previous Review Module has been split into two distinct, dedicated modules; Documents and Batches Modules; for better workflow and organization.

ui_change.png

DBR-14056 Updated Bulk Map: Flexible Sheet Name for the Spreadsheet

In Canopy, users can bulk map structured data from spreadsheets directly to documents for a quick document review and automated entity propagation.

We now support flexible sheet names for all spreadsheets uploaded for bulk mapping. We will bulk map the first sheet of the spreadsheet regardless of the sheet name.

bulk_map.png

Bulk Map Best Practice

To use this feature successfully, please keep these two critical rules in mind:

  1. Spreadsheet Naming Convention: The entire spreadsheet file must be renamed to exactly match the Document ID of the target document in Canopy. This Document ID links the structured data in the spreadsheet to the correct document, enabling you to locate and verify the propagated entities within in.
  2. Sheet Restriction: Canopy’s bulk mapping is designed to map only the first sheet within each uploaded spreadsheet file. Therefore, if your spreadsheet contains multiple sheets, you must consolidate the relevant data into the first sheet or separate the sheets into individual files before uploading.

DBR-13062 Custom Entity Field and Consolidation

To prevent data inconsistencies, we’ve now added a confirmation modal that appears whenever users attempt to edit a Custom Entity Field after they had already run the consolidation.

This modal lets users know that any changes to the Custom Entity Field will not be reflected in the consolidated data until they take the following steps:

  1. Update the Consolidation Rule in the Field Conflict Setting
  2. Rerun the Consolidation

custom_entity_field.png

DBR-14116 Access Restrictions to Remove Support for IPv6

To ensure the continued security and stability of our access control mechanisms, we’ve removed support for the IPv6 address range from the Access Restrictions section under the Security Tenant Setting.

Bug

DBR-14292 Family ID for Nested Email Attachments

We’ve fixed an issue where the Family ID of a document embedded in a .zip file attached to an email pointed to the immediate parent document (the .zip file’s extracted contents) rather than the original email container.

The Family ID now correctly references the original email, ensuring accurate document family relationships when processing nested attachments.

Release notes - Data Breach Response - 4.1.1

Release Date: November 24, 2025

This release is a dedicated backend services deployment to support the 4.1.0 release. It contains no new features, but it is critical for the stability and performance of the feature you are currently using.

Release notes - Data Breach Response - 4.1.2

Release Date: November 25, 2025

Story

DBR-14294 New File Format Support: RTF Extraction

Canopy’s Processing engine now fully supports the extraction of Rich Text Format (.rtf) files. You can now confidently upload and process your RTF documents, ensuring comprehensive extraction for your Review.

Release notes - Data Breach Response - 4.1.3

Release Date: November 29, 2025

Bug

DBR-14334 Full Support for Uploading and Mapping Microsoft Access (.mdb) Data.

Fixed a bug that caused upload failures when mapping files in Document View for Microsoft Access Database files (.mdb). Users can now upload, review, and map .mdb files without any issues.

Release notes - Data Breach Response - 4.1.4

Release Date: December 8, 2025

Story

Security Patched: Systemic Vertical Privilege Escalation

During our regular penetration testing, we identified a potential security risk known as Vertical Privilege Escalation. This is a vulnerability in access control mechanisms that could allow a low-privileged user to access functions or perform actions that are intended only for users with higher privileges.

In this patch release, we have enhanced our access control mechanisms to strictly enforce the least privilege requirement. Tenant-level users, Project Creator and Users, who are configured with the ability to Add a User, can not assign a role with a higher permission than their own.

For example:

  1. Tenant Level: A Project Creator cannot add a user to be a Tenant Admin. A User role cannot add a user to be a Project Creator or Tenant Admin roles.
  2. Project Level: A Review Manager cannot add a user to be Project Admin

This strict verification process ensure a secure permission hierarchy across all tenants and projects, preventing unauthorized access to high-privilege functions.

Please refer to the Role & Permission documentation for details.

Bug

Password Bank: Leading Zero Preservation

We’ve fixed a bug in the password bank where leading zeros were incorrectly stripped from the original passwords (e.g., 012345 was stored as 12345). Leading zeros are now correctly preserved, ensuring that your passwords are accurately applied to documents during Processing.