July 2026 Release Archive

Historical release notes: plan prices and quotas below describe the release at that time. For current Elite allowances, see Plans and Limits.

← Back to the latest release

July 30, 2026: Privacy, product platform, and installed-app foundationCopy Anchor Link

Y2 strengthens its privacy terms, simplifies product analytics and feedback, and lays the foundation for installed desktop and Android applications.

Clearer data-processing termsCopy Anchor Link

• The Data Processing Agreement now defines customer and Y2 processing roles. It covers US provider restrictions, security, breaches, deletion, audits, and international transfers.
• New processing, subprocessor, and security schedules explain the data involved, each provider's purpose, and Y2's technical and organizational safeguards.
• Customers now receive at least 30 days' notice before a new subprocessor materially processes Customer Personal Data.

One consent-controlled product platformCopy Anchor Link

• Y2 removed Statsig and UserJot and consolidated product analytics, masked session replay, surveys, and in-app Support in PostHog.
• Optional browser analytics remain consent-controlled. Session replay masks visible text and form inputs, and reviewed product events exclude user-authored report, profile, and investigation content.
• The Privacy Policy, DPA subprocessor schedule, and internal data-privacy audit now describe the same current processing.

Platform and installed-app foundationCopy Anchor Link

• The web application and backend now use a shared Bun and Turborepo workspace, with common translation and desktop contracts.
• Electron and Android shells add secure renderer boundaries, scoped device permissions, update and packaging checks, and shared application behavior. Native signing and store distribution remain separate release gates.

---

July 24, 2026: Projects, Automations, and workspace governanceCopy Anchor Link

Y2 added private Project workspaces and durable Agent Y2 Automations with plan-aware access, workspace isolation, and Elite governance.

Projects on Lite, Pro, and EliteCopy Anchor Link

• Projects organize chats, reports, profiles, graph boards, generated images, evidence, and private documents around one objective.
• Graph, Timeline, Situation, Evidence, Knowledge, and Overview views keep related intelligence connected without publishing Project content to Global Knowledge.
• Projects are bound to the active workspace and their owner. Switching workspaces cannot expose another workspace's Project chats, resources, evidence, or private knowledge.
• Project sharing was not included in this release. Elite members did not automatically gain access to another member's private Projects.

Follow the Projects overview or create your first Project.

Automations on Pro and EliteCopy Anchor Link

• Automations run bounded Agent Y2 instructions daily, weekly, monthly, or after a selected InfoOps profile completes a report.
• Pro includes up to 10 Automation definitions and Elite includes up to 50, shared across the active workspace. Free and Lite do not include Automations.
• An Automation can write to a workspace-bound output thread or stay inside an active Project.
• Live admission checks stop stale, overlapping, cross-workspace, downgraded, or inaccessible Project runs before paid work continues.
• Run history records trigger, definition revision, output, status, and billing settlement. Owners can safely pause or archive definitions after a downgrade.

See Automations and the Automation reference.

Workspace governance and language supportCopy Anchor Link

• Elite audit records bind material Project and Automation changes to the acting user and workspace without changing owner-private content access.
• Project and Automation navigation, plan guidance, upgrade states, forms, run history, and landing explanations are available in English and Spanish.
• Plan, workspace, report-workflow, and profile documentation reflects the same enforced entitlement boundaries.

---

July 21, 2026: Global coverage, Chat updates, and Pro API keysCopy Anchor Link

Y2 expanded global intelligence coverage, simplified active research, and tightened API-key access.

IntelligenceCopy Anchor Link

• New Situation Room visitors start with all 27 map layers enabled. Existing preferences stay unchanged, and mobile markers are easier to select.
• Discover adds monthly digests for 72 cities and 39 industries. Chat and onboarding now recommend a matching public digest before creating a duplicate custom brief.
• News Terminal expands to 40 global topics across geopolitics, markets, industries, regions, AI, and crypto. High-signal items join Y2's ontology with deduplication, entity links, and source provenance.
• Incident enrichment and corroboration now run together, with automatic recovery for interrupted work and protection from stale retries.

Explore News Terminal, OSINT sources, or the News API.

ChatCopy Anchor Link

• New chats default to GLM 5.2 using Zero Data Retention routing. Existing threads and saved model choices stay unchanged.
• Featured models now include Nemotron 3 Ultra, Grok 4.5, GLM 5.2, DeepSeek V4 Pro, and Kimi K3. They also include Qwen 3.6, GPT-5.6 Luna, Claude Sonnet 5, Gemini 3.6 Flash, and Mistral Small.
• Tool activity now uses a compact, auto-scrolling panel with clearer progress and failure states.

See Chat Features for model selection and privacy details.

API accessCopy Anchor Link

• New API keys require Pro (5 keys, 30 requests/minute, 5,000/day) or Elite (25 keys, 120 requests/minute, 50,000/day).
• Existing Lite keys keep their historical limits (10 requests/minute, 500/day) and can still be rotated or revoked. Lite cannot create more keys, and future downgrades are not grandfathered. Webhooks remain available on Lite, and x402 access is unchanged.

See API Authentication or x402 pay-per-request access.

---

July 17, 2026: Y2 Affiliate programCopy Anchor Link

Every Y2 user can review the Affiliate Program in Settings → Referrals. A personal FirstPromoter referral link is created and displayed only after the user explicitly accepts the current program terms. The enrolled dashboard keeps provider credentials and raw customer details server-side.

• The default Y2 Affiliate Program offers 15% recurring commission on eligible paid Lite and Pro subscription revenue.
• Referral attribution converts only after a new customer completes a verified non-zero Lite or Pro payment. A signup, 7-day trial, Free or Elite purchase, or fully discounted invoice does not create a commissionable referral.
• A promoter must maintain an active paid Lite, Pro, or Elite workspace. Their own Y2 payments must remain current during eligibility, review, and payout.
• Pending commissions remain subject to the 60-day payment, refund, fraud, and eligibility review.

See the Affiliate Program guide for enrollment, attribution, payout, and troubleshooting details.

---

July 10, 2026: Privacy-first Chat and connected intelligenceCopy Anchor Link

Y2 makes model selection clearer, keeps provider routing privacy-first, and connects Situation Room signals to the wider intelligence workspace.

What changedCopy Anchor Link

Privacy-first ChatCopy Anchor Link

• Y2 Chat and Agent Y2 route model requests through Zero Data Retention (ZDR) endpoints, with provider data collection disabled. See Chat Features and the Agent Y2 API guide.
• The model picker now shows readable names, provider filters, and search.
• GPT-5.6 Luna and NVIDIA Nemotron 3 Ultra are featured chat options, subject to current provider availability.

Situation Room and connected intelligenceCopy Anchor Link

• Shared layer controls and the source catalog now group orbital and satellite layers, surveillance, live media, and expanded infrastructure and military overlays.
• The monitor tool rail places Intel Findings, Network Intel, ontology Search, and API Query beside the map and loads each tool on demand.
• Live malware monitoring now includes relationship graphs for indicators, malware families, and related entities.
• Search the Y2 ontology directly from the Situation Room to explore entities and their live relationships.
• Map marker graphs now show richer source, confidence, time-range, and report context, with a direct link to the related historical report when available.
• Monitor controls and data panels now adapt to smaller screens and simplify navigation.

Reliable scheduled reportsCopy Anchor Link

• Scheduled report generation now detects interrupted runs, queues bounded recovery attempts, and keeps the profile active instead of delivering incomplete reports.
• Profile status and retry state are clearer when a report needs another attempt. See Scheduling.

Clearer plan guidanceCopy Anchor Link

• Plan and branding docs now match access rules. The full Situation Room requires Lite or higher. Reusable report branding requires Pro or Elite. See Whitelabel Branding.

---

July 8, 2026: Agent Y2 API, OpenAI-compatible Chat, and MCPCopy Anchor Link

Agent Y2 now supports API-key authenticated streaming and an OpenAI-compatible chat-completions route. A standalone MCP server supports agent clients. OpenAPI, integration, and endpoint docs are updated.

What changedCopy Anchor Link

Agent Y2 API and OpenAI-compatible ChatCopy Anchor Link

• Agent Y2 is now available through API-key authenticated streaming at POST /api/v1/agent-y2/chat/stream. See the Agent Y2 API guide and generated Agent Y2 reference.
• The OpenAI-compatible POST /api/v1/chat/completions route supports model: "y2-agent" for streaming clients that already consume OpenAI-style chat completion chunks.
• Both routes require agent:y2 and use workspace entitlements and chat budgets. Usage is attributed to the workspace, thread, endpoint, and API key.
• This release requires API keys for Agent Y2. Both routes share limits of 5/min and 100/day per key, plus 10/min and 250/day per workspace/user.
• OpenAI-compatible stateless chat calls preserve caller-provided transcript context when no Y2 thread is attached, while threaded calls validate ownership before reserving chat credits.

MCP, OpenAPI, and client documentationCopy Anchor Link

• New Y2 MCP docs cover the standalone @y2-intel/mcp stdio server for Claude, Codex, Claude Desktop, and other MCP-compatible clients.
• The MCP server exposes Y2 docs and OpenAPI resources, bounded report and news tools, an operation lookup tool, and y2_ask_agent for Agent Y2 access.
• The OpenAPI specification, Endpoint Reference, and client guides now match the Agent Y2 routes. They document agent:y2, schemas, responses, generated examples, and rate-limit headers.
• The API Workbench and docs navigation received sidebar, category, route, theme-state, and 404 handling improvements for the expanded API surface.

Agent reliability and synthesis safetyCopy Anchor Link

• The shared Agent Y2 executor now powers both app-authenticated and API-key routes, keeping the fixed Agent Y2 system prompt protected from caller override.
• Agent Y2 API responses hide internal reasoning chunks and align SDK examples to the canonical POST /api/v1/chat/completions path.
• Degraded Y2 synthesis now fails closed instead of completing reports from low-confidence output, with debugging documentation added for report-generation degradation triage.