May 2026 Security Workspace Projects

May 2026 — Platform Update

API token controls, sortable list pages, project logs and a sustained round of security and reliability improvements.

May 2026

A broad update covering finer-grained API token controls, easier navigation of project, team, and member lists and a sustained round of security and reliability improvements across the platform.

New

  • Set an expiry time when creating or regenerating API tokens Area: API

    When you create or regenerate an API access token, you can now choose how long it stays valid. Each token in the access tokens page shows its expiry date so you always know which credentials are due for rotation.

  • Delete individual API tokens from the tokens page Area: Workspace

    A delete button is now available on each token in the access tokens list, making it straightforward to revoke a specific credential without affecting others.

  • OpenFisca version selector when creating a project Area: Projects

    When creating a new project you can now choose the OpenFisca version your project will run on from a dropdown. Available versions are maintained by Assemblic and updated as new releases are certified.

  • Sort, filter, and clear filters on Project, Team, and Member pages Area: Workspace

    The Project, Team, and Member list pages now support inline sorting and filtering, with a clear filters control next to the page actions so you can quickly return to the default view.

Improved

  • Project list now remembers which rows you had expanded Area: Workspace

    When the project list refreshes, any rows you had expanded stay open. You no longer need to re-expand a project after each refresh.

  • Loading state shown on main list pages Area: Workspace

    A waiting indicator now appears while the Project, Team, and Member pages are loading, so it is always clear when results are still being fetched.

  • More resilient project setup, archiving, and deployment Area: Projects

    Project creation, archiving, restoration, and deployment workflows now handle transient platform errors more gracefully and surface clearer messages when something does go wrong, including for git operations from the in-browser editor.

Changed

  • “Manage Branches” is now “Manage Environments” Area: Projects

    The branch management section inside each project has been renamed to Manage Environments. The underlying functionality is unchanged. The new name better reflects that each entry is a distinct, accessible runtime environment rather than a raw branch reference.

Security & compliance

  • Strengthened protection of session credentials and API tokens Area: Security & Compliance Tags: Security advisory

    We have completed improvements to how session credentials and API access tokens are protected across the platform. Existing tokens continue to work without interruption. Although no customer action is required, delete and recreate your tokens to take full advantage of these updates.

  • Tightened defences across the Assemblic workspace Area: Security & Compliance Tags: Security advisory

    Additional safeguards are now in place across the Assemblic workspace, including stricter handling of embedded content, sign-in flows, and webhook callbacks. The workspace continues to behave as before; no customer action is required.

  • Continued alignment with public-sector security expectations Area: Security & Compliance

    We have completed a sustained round of independent security assessment and hardening activity covering the Assemblic platform. Customers under formal compliance obligations can request a current statement through their account contact or the contact us form.