What has changed, and when.
Every change to the clause library, the engine and the product, with the date it shipped. Currently at version 1.8: 129 clauses across 4 documents, selected from 22 questions.
- 1.8Craft
New identity
A geometric mark and wordmark, one green used as a surface rather than as hairlines, and a single sans across the product — with the serif now reserved for the documents themselves, so the artifact reads as a different object from the software that made it. The generated PDF and Word files are unchanged apart from the accent colour: same structure, same wording, same clause references.
- 1.7Product
Published how this is built, and this changelog
A page answering the questions a client security review would ask about us — what is stored, what we never see, what the engine does to stop a document claiming a control you do not have, and plainly what has and has not been professionally reviewed. Plus this record, so you can see what the clause library said when you generated your set and what has changed since.
- 1.6Craft
Motion, and a demo that shows its working
The homepage engine demo now names the clauses an answer selects, by reference, as they arrive — and reports the ones it removes the same way. The intake became fillable from the keyboard: number keys pick an answer, Enter advances, Backspace goes back. All motion respects the operating system’s reduced-motion setting, and every word on the page remains readable with JavaScript disabled.
- 1.5Craft
Typesetting pass across the product and the documents
Every contraction and possessive in the generated PDF and Word files was being set with a typewriter apostrophe. All 284 were replaced with typographic quotes, and two automated checks now fail the build if one reappears — one over assembled document output, one over every public page. The page frame was unified so the masthead, content and footer share a single measure.
- 1.4Clause library
Guidance notes and segment pages
Plain-English explainers on what a WISP is, what the FTC Safeguards Rule asks of a small firm, and what cyber insurance applications actually ask — plus pages for the three situations that send people looking: a tax or accounting practice, a clinic, and a firm answering a client security questionnaire.
- 1.3Clause library
US regulatory clauses corrected and a review pack prepared
A pass over the HIPAA and FTC Safeguards clauses corrected several statements of scope: the covered-entity test is electronic transmission rather than simply treating patients, the business associate agreement requirement excludes pure conduits, and the Safeguards Rule’s relief for firms holding information on fewer than 5,000 consumers was missing entirely. A complete review pack was generated from the live library for a US attorney to work through.
- 1.2Engine
US focus, and a regulatory layer
The product now serves US businesses specifically. Pricing moved to USD; UK-tailored content was removed rather than left dormant. New clause families cover state breach-notification duties, HIPAA roles, the FTC Safeguards Rule and PCI DSS — each stating what a regime asks of a business in scope, never asserting that holding a document makes anyone compliant. Two documents were added: an Acceptable Use Policy including rules for public AI tools, and a Business Continuity Plan.
- 1.1Product
Entity details and navigation
Full trading disclosure in the footer of every page, section navigation on the landing page, and layout fixes across the intake, checkout confirmation and dashboard.
- 1.0Engine
Intake expanded after security and legal review
The question set grew to cover the controls cyber carriers actually underwrite on — patching, training, multi-factor authentication beyond email, unsupported software, and who runs IT — so the library stops asserting controls the intake never verified. Remote-access method is asked only of businesses running a local server. Honesty violations found in review were fixed, and the automated invariant suite was written to stop them recurring.
Entries describe work that actually shipped, on the date it shipped. The clause library remains draft pending review by a qualified US attorney — see how this is built for what that means.