Changelog

Teams, roles & SSO

Multi-organization workspaces with owner/admin/member roles enforced server-side, single-use email invites, and a client-visible audit log. Sign in with your identity provider over OpenID Connect (OIDC), configured per team in the panel. OIDC today; SAML is not yet implemented, and the live sign-in round-trip needs your real IdP.

Wider DHL live tracking

TrackJet now lets DHL’s Unified Tracking API auto-route across DHL services (Parcel DE, Express, eCommerce) instead of forcing the parcel-de backend — so DHL shipments that moved to the new svb backend (after DHL retired post_de in February) show their live, source-labelled timeline again. DHL remains the licensed live feed today; every other carrier stays routing-only, and TrackJet never fabricates events.

Message unification

Every surface aligned to one honest description: TrackJet detects, routes, and builds source-labelled timelines where a real source exists — and never fabricates carrier events. Legal docs modernised in en/de/es.

Unified carrier taxonomy

One canonical, live-measured source for the directory figures — routing entries, active tracking surfaces, air-cargo airlines and the research catalog are counted from the production database, never frozen into copy. Current values always at /capabilities.

Feature-availability matrix

Every feature with its real status, plan and data source, generated from the live registry.

Per-event source labels

Each timeline event is badged by its real provenance (DHL UTAPI, Royal Mail, forwarded, manual); the verifiable badge states integrity, not delivery.

15 high-use products

Smart Links, revocable shares, returns guide, tracking chat, Delay Guard, customs reminders, trust badge, status embed, carbon at checkout, QR codes, branded email, WooCommerce plugin, Proof-of-Delivery API, white-label domains, SME panel.

Royal Mail live feed

Royal Mail API V2 wired into the same source-labelled timeline pipeline.

Carrier verifier

Automated probe + identity reconcile that proposes, never auto-edits, carrier records.

Public launch — multi-vertical tracking

Paste any number: air cargo (IATA MAWB), ocean container (ISO 6346), Bill of Lading (SCAC), postal (UPU S10) and parcel. Detection is tied to the format and routes to the official carrier surface.

DHL UTAPI licensed live feed

The first licensed live-event feed — real DHL Group events, source-labelled, with attribution and a 30-day retention contract.

Verifiable Timeline + transparency log

Every recorded history is sealed into a SHA-256 hash chain (tjvt1) and anchored in a public Merkle log (tjmt1); verify offline with the open-source tjverify CLI.

MCP server for AI agents

Read-only detection, routing, carrier lookup, carbon and verification exposed over JSON-RPC 2.0 — no PII.

REST API, webhooks, sandbox

Key-based API (early access), HMAC-signed webhooks and a deterministic TJTEST-* sandbox.

Privacy engineering

Cookieless analytics, a per-field PII vault with crypto-shredding, and Privacy Lens server-side field hiding.