PRODUCT RELEASE: Réunion 3.7.11 on iOS. - Various updates for the next server release - Lay out three Pulse attachments like the web client - Show Vivid call buttons only to users granted Vivid - Clear Pulse notifications read on another device - Keep Cancel and Done visible while searching room members - Show the live server version on the Server screen - Pulse: return the composer to the bottom once the keyboard is hidden - Pulse: show a video poster before the file is downloaded - Pulse: pin chats and rooms, shared with the web client - DataRoom - Module tab items

PRODUCT RELEASE: Reunion Web 3.1.112 Pulse - New: Pulse now caches your rooms and messages so they load faster. It is on by default for testing. You can turn it off in Settings > Experimental > Pulse Cache. New: Videos now get a preview thumbnail. When you upload a video, a thumbnail is created and shown as its preview. This works only for new videos uploaded from the web for now, and is coming to iOS and Android. New: Pinned rooms are now saved to the server. Improved: A new room is selected automatically after you create it. Improved: Group creation is easier to use. Improved: Attachments are shown in a new way. You can now right-click an image to download it. Fixed: Large attachments now upload correctly. Fixed: Downloaded attachments keep their original filenames instead of being renamed. EasyCrypt - New: Press Cmd/Ctrl + Enter to send a message. Fixed: Pressing Tab in the subject field now moves to the message body. Fixed: Scrolling now works on long messages. Fixed: The message reply icon is now correct. Data Rooms (Preview) New: An early preview of the Data Rooms module. Turn it on in Settings > Experimental > Data Rooms. General

Most compliance failures are classification failures in disguise. Access control, DLP, encryption, and audit logs only work if the system knows the sensitivity of the data it’s looking at. When a regulated file leaves as a normal attachment, you lose the audit trail, the jurisdiction, and the ability to prove control. Regulators increasingly treat incomplete classification as systemic non-compliance, not a documentation gap. Labeling is the quiet prerequisite. Get it wrong and the expensive controls become theater.

What actually gets organisations fined on ROPA: – Missing categories of data subjects or personal data – Incomplete lists of recipients or third-country transfers – Vague or outdated retention periods – No clear link between processing purpose and legal basis These are classification failures dressed up as documentation failures.

Geopolitical tensions don’t need a cyberattack to create real data risk. A sanctions regime can do it. A new data-transfer restriction can do it. A shift in foreign-investment rules can do it. A government access request can do it. Even a vendor acquisition can do it. The attack surface is now jurisdictional.

Spot on.

What regulators are currently signalling: Localisation where national security or critical infrastructure is involved Risk-based approaches elsewhere Increasing scrutiny of parent-company compulsion and cloud sub-processors Expectation that classification drives different controls for different data categories One-size-fits-all “EU only” policies are looking dated.

If your company uses a global login service (like a foreign-based sign-in tool) every time an employee signs on, a tiny piece of data travels abroad.

Corporations and public service government agencies need to use data classification for DLP when trusting sensitive communications to cloud services.

Data classification is imperative to protect corporate assets when communications are entrusted to 3rd parties.

PRODUCT RELEASE: Reunion APP on Android: The latest version of the Android app has been published to the store for everyone to use. Change log list: - Pulse: @mention people in chats, and tap a mention or a sender's picture to see their details - Pulse: attachments that are not photos or videos can now be opened or saved to your device - Pulse: a message sent on a weak connection is no longer delivered more than once - Pulse: fixed a crash when opening chats that have a large group picture - Pulse: long-press works again on messages that contain only an image - QR scan: the app now asks for camera access as soon as the scanner opens - Full telemetry support to enable debugging more easily for the reported issues - Tons of fixes and smaller improvements Have fun

Data residency ≠ data sovereignty. Residency is “the bits sit on a server in Country X.” Sovereignty is “which legal system can compel access, compel disclosure, or override your controls.” Regulators have been clear for years: location alone does not equal control.

When you send a message across your own city, the internet might automatically route it through a server in another country just because it's faster, accidentally breaking local data laws.

New European laws tell companies not to hand data over to foreign governments, but foreign courts can slap those same companies with heavy fines if they don't hand it over.

Even if your company stores its data on a local computer server in your country, if the company that manages the main system is based in a foreign country, foreign police can legally demand to see your data.