For the complete documentation index, see llms.txt. This page is also available as Markdown.

Backend API 18.1.8

Released September 17, 2026

New Features

  • Classic-to-Nested Shared Folder Migration: Introduced seamless migration capabilities converting legacy records to the Nested Shared Folder architecture.

  • Concealed Field Audit Logging: Added dedicated audit tracking (copied_hidden_field) that logs an audit event whenever a user copies hidden or masked field values to their clipboard.

  • SIEM & Alert Governance: Added enterprise policy controls allowing administrators to lock SIEM and alert configurations against unauthorized modification or deletion.

  • Nested Shared Folders Off-boarding Support: Expanded enterprise account transfer workflows to fully inventory, re-encrypt, and migrate Nest Shared Folders folders and records during user off-boarding.

Improvements

  • KA-8739: Expanded enterprise account transfer capabilities to include Nested Shared Folders resources. Ensures all owned nested shared folders and root records are properly inventoried during user transfer preparation.

  • KA-8740: Enhanced user off-boarding workflows to securely transfer Nested Shared Folders assets to replacement accounts. Validates and reassigns encrypted nested shared folder and record access permissions during account removal.

  • KA-8741: Improved account cleanup processes when off-boarding enterprise users. Ensures associated nested shared folder resources and policy configurations are properly managed while preserving audit history.

  • KA-8929: Added comprehensive pre-conversion validation checks for record migrations. Verifies enterprise eligibility, record ownership, and permission states before converting records to the new folder structure.

  • KA-8930: Implemented automated legacy permission cleanup following record conversion. Ensures outdated access associations are safely removed once a record has migrated to the new sharing model.

  • KA-8931: Enabled end-to-end transactional migration for record conversion. Seamlessly converts record placements, permissions, linked items, and attachments in a single atomic operation.

  • KA-8932: Integrated audit event logging for record conversion workflows. Provides full administrative visibility into record migration events within enterprise audit reports.

  • KA-8933: Introduced batch processing support for record conversion requests. Allows client applications to convert multiple records efficiently with detailed per-item status feedback.

  • KA-8934: Expanded automated end-to-end test coverage for record migration pipelines. Ensures reliable performance and data integrity across all record conversion scenarios.

  • KA-9006: Added validation safeguards for converting records with cross-user record links. Blocks conversion if linked parent or child records are owned by other users, protecting shared link integrity.

  • KA-9010: Added real-time removal signals when records transition to the new folder architecture. Notifies legacy client applications to update their views and prune converted items automatically.

  • KA-9034: Preserved direct user-to-user record shares during record conversion. Retains existing user access permissions and sharing roles seamlessly without requiring re-sharing.

  • KA-9058: Carried over Time-Limited Access expirations during record conversion. Ensures temporary access restrictions and scheduled expiration dates remain active after migration.

  • KA-9162: Hardened encryption key management for automated device and team approval endpoints. Ensures all communication with automator services remains fully encrypted across all request retries.

  • KA-9285: Introduced a new audit event for tracking clipboard copies of concealed fields. Generates an audit log entry whenever a user copies a hidden or masked field value on a record.

  • KA-9474: Added automatic sync notifications following record conversion. Prompts connected client applications to synchronize immediately when records are converted.

  • KA-9515: Added enterprise setting to prevent modification of alert and SIEM configurations. Restricts editing, pausing, or deleting active monitoring integrations to authorized support workflows.

  • KA-9532: Added support for disaster recovery regions, enabling services to continue operating reliably when the primary region is unavailable.

  • KA-9560: Updated health checks to remain available during temporary Redshift audit data interruptions, while still recording the service issue for follow-up.

Bugs

  • KA-8760: Added additional hardening around Nested Shared Folder APIs based on 3rd party penetration testing.

  • KA-8889: Resolved an issue where folder creation and move operations did not consistently enforce maximum folder depth. Ensures folder hierarchy limits are strictly maintained across all folder management actions.

  • KA-8944: Fixed an issue where record sharing states were missing during subfolder synchronization. Ensures consistent permission visibility across deeply nested folder structures.

  • KA-9019: Resolved an issue where record sharing states persisted after permissions were updated. Ensures record sharing status accurately reflects current access permissions.

  • KA-9024: Fixed a database query error during folder access expiration processing. Ensures expired temporary folder permissions and rotations are processed cleanly without errors.

  • KA-9037: Fixed an issue where deleting a nested child record failed to remove its associated link. Ensures record deletion completely removes record references and associated data.

  • KA-9062: Fixed an issue where users restricted from creating shared folders were incorrectly blocked from creating personal folders. Ensures folder creation enforcement policies only restrict shared folder creation as intended.

  • KA-9089: Fixed an unexpected permission error when record owners modified file attachments on drive records. Allows owners to add or remove files without encountering sharing restriction errors.

  • KA-9093: Resolved an issue preventing immediate deletion of newly created linked records. Allows users to delete newly created linked records without waiting for a full vault synchronization.

  • KA-9153: Fixed record classification errors during record conversion. Ensures records located within shared folders are correctly identified and converted to the new folder structure.

  • KA-9214: Fixed credential validation logic for external security logging connections. Ensures connection tests properly fail when invalid authentication credentials are provided.

  • KA-9277: Fixed an access control issue where explicitly denied users could perform record removal actions. Enforces strict denial checks on record management operations to prevent unauthorized record deletion.

  • KA-9278: Updated conversion validation to exclude application records. Prevents application records from being converted, preserving access management capabilities.

  • KA-9528: Fixed an issue where shared record status was lost during record conversion. Ensures shared record states and permissions remain intact throughout the conversion process.

  • KA-9404 Improved Managed Company Transfer support across international regions, allowing authorized support operations to work consistently in US, EU, AU, JP, and CA environments.

  • KA-9513: Fixed an issue where direct record shares could disappear or become inaccessible to sharees after a V3 record was converted to NSF. Shared records and permission details now remain available after conversion and synchronization.

Last updated