v1.3.0

What's Changed

• Change trisa.io to travelrule.io everywhere by @chris-okuda in #343
• [FEAT] Add Blockpass Logo by @bbengfort in #345
• Modernization by @bbengfort in #346

Full Changelog: v1.2.0...v1.3.0

v1.2.0

Release Notes: v1.2.0 with Envoy Audit Log!

Release Date: September 2025

Overview

We're excited to announce the release of the Envoy Audit Log feature, a comprehensive compliance audit logging system that provides cryptographically immutable records of all activities within your Envoy instance. This customer-requested feature is designed to help compliance teams maintain verifiable activity reports for regulatory requirements.

What's New

🔒 Compliance Audit Logging

• Cryptographically Immutable Records: Every transfer state change, user event, API key activity, and counterparty update is now captured in a tamper-proof audit log
• PKI-based Verification: Audit logs are signed using your node's private certificate, allowing external verification using the public certificate
• Comprehensive Activity Tracking: Captures "create/update/delete" user actions, such as API key changes, sunrise email activities, transaction lifecycle changes, and counterparty and contact changes

🖥️ Audit Log User Interface

• Dedicated Audit Log Dashboard: New "Audit Logs" section under Utilities in the main navigation
• Advanced Filtering: Filter audit entries by:
  • Actor Type (user, API key, sunrise email, etc.)
  • Resource Type (transaction, user, counterparty, etc.)
  • Time Range (Before/After filters)
  • Actor ID and Resource ID
  • Limit to a certain number of records
  • See "Documentation -> API Reference -> Audit Logs" on your Envoy node for full OpenAPI endpoint documentation
• Detailed Entry Views: Click through to see complete audit entry details including timestamps, signatures, and action metadata
• Enhanced Navigation: Links to related resources

🔌 API Integration

• REST API Endpoints: New endpoints for programmatic access (see "Documentation -> API Reference -> Audit Logs" on your Envoy node)
• PyEnvoy Support: Full Python client library support for audit log retrieval and verification
• OpenAPI Documentation: Complete API documentation for integration with external compliance tools

Technical Highlights

• Immutable Design: Each audit entry is cryptographically signed to prevent tampering
• PKI Verification: Uses your existing TRISA certificates for signing and verification
• Performance Optimized: Efficient storage and retrieval designed for high-volume environments
• Standards Compliant: Built with compliance and regulatory requirements in mind

Breaking Changes

None. This is a new feature addition that doesn't affect existing functionality.

API Changes

New Endpoints Added:

• GET /v1/auditlogs - List compliance audit logs with query filtering (see "Documentation -> API Reference -> Audit Logs" on your Envoy node)
• GET /v1/auditlogs/{id} - Retrieve a specific audit log entry

Getting Started

1. Access the Audit Log: Navigate to Utilities > Audit Logs in your Envoy dashboard
2. View Records: Browse the chronological list of all system activities
3. Filter Results: Use the filter dropdown to narrow down entries by time, resource, or actor
4. Export Reports: Generate compliance reports for regulatory purposes using data from the REST API endpoints (see "Documentation -> API Reference -> Audit Logs" on your Envoy node)

---

Questions or Issues? Contact our support team or check the API documentation.

Version Compatibility: This release is compatible with all existing Envoy installations. PyEnvoy has been updated to v1.2.0 to maintain version alignment.

Historical Records: Please note that no audit logs will be created for previously created records, and will only be created for activity after your node is updated to v1.2.0.

Full Changelog: v1.1.0...v1.2.0

v1.1.0

This release brought a whole bunch of behind-the-scenes improvements including better testing, mock stores, and compliance logging - but most importantly, we finally squashed a couple pesky bugs that had been flagged by our users! 🐛

What's Changed

• Store Transaction Interface by @bbengfort in #318
• Implement Mock Store by @bbengfort in #319
• Write tests for and complete store/mock by @chris-okuda in #320
• Tests for store/models by @chris-okuda in #321
• Tests for scanning models by @chris-okuda in #322
• Fix a few calls in store/sqlite/auth.go by @chris-okuda in #324
• Various fixes found while writing tests by @chris-okuda in #325
• Tests for store/sqlite by @chris-okuda in #323
• Fix national identifier in customer account bug by @bbengfort in #326
• Compliance Audit Log (model and store implementation) by @chris-okuda in #328
• Ensure the 'Counterparty.Website' field has a protocol attached by @chris-okuda in #327
• Modify the compliance audit log model by @chris-okuda in #329
• Web test suite by @chris-okuda in #330
• Investigate Localparty/GDS Sync Bugs by @bbengfort in #331

Full Changelog: v1.0.0...v1.1.0

v1.0.0

We’re excited to announce the launch of Envoy v1.0 Long-term Stable Release (LSR), facilitating secure messaging and eliminating interoperability barriers in Travel Rule compliance.

Key Features:

✅ Improved UI and workflows for secure messaging

✅ Sunrise email messaging to reach counterparties outside TRISA and TRP

✅ Daybreak contact database, a curated database of 1,500 VASPs for counterparty discovery and communication (not available for open source users)

✅ Enhanced customer and counterparty management features

✅ Updated API

TRISA Envoy remains the only open-source, secure, and peer-to-peer Travel Rule messaging solution under active development.

Visit https://trisa.io/getting-started-with-trisa/ to learn more, view Envoy in action, and schedule a demo!

What's Changed

• New Templates and Reskin by @bbengfort in #274
• User Profile by @bbengfort in #275
• Account Settings Reimplementation by @bbengfort in #276
• Node Info Refactor by @bbengfort in #277
• Create API Keys by @bbengfort in #278
• Edit API Keys by @bbengfort in #279
• Create and Delete Users by @bbengfort in #280
• Transaction List by @bbengfort in #281
• Send Transaction Form by @bbengfort in #282
• Humanize Relative Time Deltas by @bbengfort in #283
• Lookup Account by Crypto Address by @bbengfort in #284
• Archive and Unarchive Transfers by @bbengfort in #285
• Send Transfer Preview by @bbengfort in #286
• Transaction Detail by @bbengfort in #288
• Transaction Reject by @bbengfort in #289
• Routing API by @bbengfort in #290
• Fix Counterparty Search Bug by @bbengfort in #292
• Better Customer Account Management by @bbengfort in #291
• Show 502 Errors to User by @bbengfort in #294
• Fix Counterparty Update Error by @bbengfort in #295
• Daybreak backend and import command by @chris-okuda in #293
• Search Counterparties by Domain by @bbengfort in #298
• [Docs] "sunrise" is the proper enum string for an email-based counterparty by @chris-okuda in #299
• Similarity Threshold in Counterparty Search by @bbengfort in #300
• Webhook Compression by @bbengfort in #301
• Webhook Authentication by @bbengfort in #302
• Update DNS for Directory and VASPBots by @bbengfort in #304
• Add Daybreak counterparties to UI by @chris-okuda in #297
• Forgot Password Workflow part 1 (verification token package refactoring) by @chris-okuda in #303
• Allow CounterpartyID for all transactions using "prepare" and "send-prepared" by @chris-okuda in #305
• Transfer Accept and Complete Workflow by @bbengfort in #296
• Disable Protocol when not Available by @bbengfort in #307
• Update contacts when possible during daybreak:import command by @chris-okuda in #309
• Sunrise Dashkit Pages by @bbengfort in #308
• Sunrise Pages Reimplementation by @bbengfort in #310
• Reset password workflow (part 2) by @chris-okuda in #306
• Use Cookie for Reset Password Token by @bbengfort in #312
• Webhook mTLS Authentication by @bbengfort in #313
• Finalize Accept and Repair Workflow by @bbengfort in #314
• Send Transfer Link from Counterparty by @bbengfort in #315
• Add the daybreak:retire command by @chris-okuda in #311
• Expired Sunrise Tokens and Vero by @bbengfort in #316
• Better Transaction Detail by @bbengfort in #317

New Contributors

• @chris-okuda made their first contribution in #293

Full Changelog: v0.30.1...v1.0.0

v0.30.1

What's Changed

• Document Counterparty Travel Address API by @bbengfort in #272
• Add Direction Query to Latest Payload by @bbengfort in #273

Full Changelog: v0.30.0...v0.30.1

Envoy v0.30.0

Announcing the release of 🌅 Email for Sunrise Beta 🌅 , providing users with the ability to send a Travel Rule transaction to another VASP that does not implement either TRISA or TRP

• The VASP will collect the email address of the counterparty compliance officer, then create a new counterparty with just the email address, the VASP name and the protocol set to "email".

• When new transactions are "sent" to this VASP, an email will be sent to the compliance officer notifying them of a new TRISA transaction. That email will contain a secure link that has a time sensitive expiration.

• When the compliance officer clicks on the link, they are taken to a secure page where they are verified and then presented the details of the transaction so they can accept or reject it (modifying it as necessary).

This is a beta version that has the accept/reject workflow and allows the counterparty to download a JSON copy of the travel rule data. More advanced features such as OTP and transaction confirmation are coming soon!

What's Changed

• Remove ULID Package by @bbengfort in #269
• Deliver Transaction and Convert by @bbengfort in #270
• Download JSON on Sunrise by @bbengfort in #271

Full Changelog: v0.27.1...v0.30.0

v0.29.0

What's Changed

• IVMS101 Validator API Endpoint by @bbengfort in #267
• Enable Archive Button by @bbengfort in #268

Full Changelog: v0.28.0...v0.29.0

v0.28.0

What's Changed

• Add select message type modal by @daniellemaxwell in #228
• Add send message page and form by @daniellemaxwell in #229
• Add verification page to view message data and verification forms by @daniellemaxwell in #230
• Add preview message modal for sunrise feature by @daniellemaxwell in #231
• Add resend confirmation link view by @daniellemaxwell in #232
• Add back button to send envelope page by @daniellemaxwell in #233
• Sunrise data page by @daniellemaxwell in #234
• Create sunrise not found page by @daniellemaxwell in #235
• Create scripts template, use sunrise layout, add divider by @daniellemaxwell in #236
• Add lock icon to verify page by @daniellemaxwell in #237
• Sunrise Enabled Config and Middleware by @bbengfort in #238
• Conditionally render secure message button, update add counterparty form by @daniellemaxwell in #240
• Create accept and reject partials by @daniellemaxwell in #241
• Sunrise Verification Token by @bbengfort in #239
• Add email templates by @daniellemaxwell in #242
• Apply style to email templates by @daniellemaxwell in #244
• Emailer Utility for Sunrise by @bbengfort in #245
• Update Counterparties to Store Compliance Contacts by @bbengfort in #248
• Sunrise Email Sends by @bbengfort in #249
• Live Email Tests by @bbengfort in #250
• Add GitHub and YouTube links, update README by @daniellemaxwell in #251
• Add hx-post request to send Sunrise form and handle data transformation by @daniellemaxwell in #252
• Update email style and add TRISA Docs link by @daniellemaxwell in #253
• Fix Database Errors on Sunrise by @bbengfort in #254
• Refactor Postman by @bbengfort in #256
• Sunrise Integration Test by @bbengfort in #257
• DBInfo Endpoint by @bbengfort in #259
• Save Secure Envelopes during Sunrise by @bbengfort in #258
• Better Sunrise Emails by @bbengfort in #260
• Validate Sunrise Verification Token by @bbengfort in #261
• Sunrise Authentication by @bbengfort in #262
• Sunrise Review Page by @bbengfort in #263
• Do not allow Sunrise access to Envoy pages by @bbengfort in #264
• Sunrise Reject by @bbengfort in #265
• Sunrise Accept by @bbengfort in #266

Full Changelog: v0.27.1...v0.28.0

v0.27.1

This release is a hotfix to mend a Counterparty REST resource validation bug.

What's Changed

• Fix Counterparty Requires IVMS101 by @bbengfort in #227

Full Changelog: v0.27.0...v0.27.1

v0.27.0

What's Changed

• Amend validation method to resolve account creation bug by @daniellemaxwell in #225
• Refactor API Key Update by @bbengfort in #226

Full Changelog: v0.26.0...v0.27.0