← Back to EuroValidate Versioning policy →

Changelog

All notable changes to the EuroValidate API. We follow SemVer 2.0.0.

1.0.0-beta.1

2026-04-05 · Pre-release (public beta)

Added DELETE /v1/gdpr/data, GET /v1/gdpr/export, DELETE /v1/gdpr/account — self-service GDPR endpoints (Art. 15, 17, 20).
Added GET /v1/billing/usage, POST /v1/billing/checkout-session, POST /v1/billing/portal-session — programmatic billing management via Stripe.
Added Webhook signature verification: X-EuroValidate-Signature header with HMAC-SHA256 on all outbound webhooks.
Added Arq worker for async batch processing of jobs >10 items, plus weekly cron job that re-validates monitored entities.
Added IBAN bank registry extended to all 27 EU countries + UK (previously 10 countries).
Fixed VAT per-country length validation — malformed input (e.g. DE12345) now returns 400 locally instead of wasting a VIES quota call.
Fixed EC EORI endpoint timeout increased from 5s to 15s; structured error reasons (timeout, soap_fault, circuit_open) now surfaced in upstream_status.
Fixed GLEIF client now maps network errors to 502, not opaque 500 "Failed to fetch".
Fixed Company by VAT lookup — tries multiple candidate queries (full VAT, local registration number, digits-only) against GLEIF.
Fixed IBAN and Company cache TTLs corrected to match Privacy Policy (IBAN 1h, Company 7d).
Changed CORS now exposes X-Request-ID, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, Retry-After to browser clients.
Security Turnstile CAPTCHA verification now fails closed in production when secret is not configured (was silently bypassing).
Security API keys on deleted accounts are rotated to DELETED_* prefix and deactivated immediately.

0.1.0

2026-03-21 · Initial internal release

Added Core API: /v1/vat, /v1/iban, /v1/eori, /v1/company, /v1/validate, /v1/batch, /v1/monitor, /v1/status, /v1/vat-rates.
Added Per-country circuit breakers for all 27 EU VIES endpoints.
Added Dual-layer caching (Redis L1 + PostgreSQL L2).
Added Confidence scoring (HIGH / MEDIUM / LOW / UNKNOWN) on every response.
Added Stripe Billing Meters integration, four-tier plans (Free / Starter / Growth / Scale).
Added Auto-generated OpenAPI 3.1 spec, Swagger UI at /docs, ReDoc at /redoc.

Follow our blog or subscribe to release notifications at [email protected].