Changelog

Initial Platform Release

Core Platform (neostra-core)

• Privacy Rights Manager (DSAR) with full request lifecycle
• Configurable no-code intake forms with identity verification
• Multi-stage workflow engine with auto-assignment
• Assessment framework with template draft/publish/import/export
• DPDPA readiness scanner with compliance scoring
• Privacy center with published policy pages
• Breach management with intake forms and type classification
• Multi-tenant architecture with RBAC and brand-level access
• AOP-based audit logging (114 audit actions)
• Materialized views for dashboard performance
• 58-language internationalization support

Consent Management (CPMP)

• Cookie consent modal (Svelte 5, CDN-hosted)
• Event-driven consent pipeline via Google Cloud Pub/Sub
• Immutable consent ledger with SHA-256 hash chain
• Selenium-based cookie and script scanner
• Preference center management
• Cookie dashboard analytics and reporting

Data Discovery

• Scan orchestration with PostgreSQL task queue
• Python PII detection worker (Microsoft Presidio + custom regex)
• Support for PostgreSQL, MySQL, MongoDB, AWS S3, DynamoDB
• AES-encrypted credential storage
• GDPR Article 30 RoPA data mapping

Governance (astra-core)

• Tenant provisioning and subscription management
• User management with role-based access
• Centralized authentication and 2FA support

Infrastructure

• Docker containerization for all services
• GKE deployment with Cloud Build CI/CD
• Multi-region storage (GCS + AWS S3 for EU data sovereignty)
• Aegis release automation tool