/ Changelog

What's new in Maditon

Material changes to Maditon — new features, regulatory updates, and improvements. Internal refactors and bug fixes that don't change behaviour are left out.

Maditon in German

  • New The app, its e-mails, both manuals and the PDF reports are available in German. Choose Deutsch under Settings → Language; e-mails follow the same setting. AI readings are shown in German with the regulations' own terms, while quoted passages stay in the language of the document.
  • New German questionnaires and German sub-processor names are read, and sanctions screening recognises German legal forms such as UG (haftungsbeschränkt), GbR and e.V. when it compares names.
  • New maditon.com in German at /de: the site, the AI Act pre-screen, the CRA scan, the Q&A knowledge base and 19 guides.
  • Improved Sign-in follows the language of the page you came from, and signing out lands on maditon.com in your language.

Questionnaires as CSV

  • New A customer questionnaire can be uploaded as CSV, including the semicolon-separated files German and Swedish Excel writes. "Export filled CSV" returns the same file with the answer column filled in, in the file's own delimiter and encoding.
  • Fixed An answer starting with "=" is no longer turned into a formula in an exported workbook.

Hosting in Frankfurt on UpCloud

  • Improved Since 23 October all production hosting — servers, database and file storage — runs on UpCloud in Frankfurt, Germany. Hetzner no longer processes any customer data; data never left the EU. The Privacy Policy and Data Processing Agreement were updated on 30 October and administrators were notified. From 7 December a second backup copy is kept with bunny.net in Stockholm.
  • Improved The foot of Settings shows which release of Maditon you are running.

Readings that open with what matters

  • Improved A document reading, a risk classification, the cross-check, a purchase and a questionnaire open as an overview — the verdict or where things stand, the findings that matter most, the first sentences of the summary — with the full text and the rest folded beneath.
  • Improved A changed document opens with a fact counted from the stored text, with no AI — the date and the paragraphs added, changed or removed — and the AI reading of the change follows under its own label. Findings moved by a related document's re-reading are reported in a section of their own.
  • New A supplier added to a purchase gets the same document scan as in the register, and the purchase page carries the report's summary table. A candidate's card opens the supplier's page inside the purchase.
  • Improved The SLA and contacts view shows the three service levels as tiles and groups support contacts by kind. Icons carry the colour of their meaning: blue neutral, amber risk, red error, green met.

Sanctions screening of suppliers

  • New Every supplier in the register is compared with the legal entities on the EU consolidated financial sanctions list and the UN Security Council consolidated list — by legal name, alias and registration number, with fixed matching rules, no AI. The lists are fetched every night; a supplier is screened again when its identity changes and on request.
  • New A possible match is shown in the register and on the supplier page with the reasons behind it. An owner or admin records whether it is confirmed or not the same, with a note; nothing is decided automatically, and new matches arrive in the daily change e-mail. Included on Starter, Growth and Scale.
  • Improved The privacy policy, DPA and Terms describe the screening and what it is: an aid, not a guarantee — it can miss a match or flag a resemblance, a clear result is not proof, and sanctions compliance remains your own responsibility.
  • Improved An organisation on an earlier plan can move to Starter, Growth or Scale from the plan button in Settings; a move to a smaller plan goes through support.

Supplier register, change watching, questionnaires

  • New Supplier register. Register a supplier and Maditon finds its published legal documents — privacy policy, terms, DPA, security page, sub-processor list, AI policy, SLA — reads them and returns findings, each quoting the passage it came from. Silence counts only where that kind of document owes an answer.
  • New Change watching. Watched documents are re-read on schedule; a daily e-mail says what changed, before and after, and whether it matters.
  • New Questionnaires. Upload a customer's security or privacy questionnaire (XLSX, DOCX, CSV, PDF) and get draft answers from your compliance profile, your register and previously approved answers; approve, then export the file back.
  • New Systems and services with SLA and contacts. Record which systems depend on which suppliers; SLA levels and support contacts in one view, read from documents or recorded by hand, each value naming its source.
  • New Private documents and PDF packages. Uploaded documents can be marked private — encrypted under a per-organisation key and never used for questionnaire drafts — and a system or the whole register exports as a PDF package.
  • Improved Maditon now describes itself as a compliance assistant with the EU AI Act as its first module; the legal pages, security page and manual say so.

Multi-stage AI quality pipeline

  • New Classifier → Verifier → Consensus pipeline. Every risk classification is now graded by three independent AI passes plus a mechanical citation validator.
  • New Expert-review flag — classifications with low verifier confidence, consensus disagreement, or phantom citations are surfaced for a closer human look.
  • Improved Async classification with live stage indicator. Close the tab and come back — the job continues on our servers.
  • Improved Clickable Article references inside reasoning text. Click any Art. 6(2) reference to read the full clause inline, with a link to EUR-Lex.

Swedish locale, full parity

  • New Complete Swedish translation of the application, including the AI-led interview, risk classification reasoning, and the audit-ready dossier (PDF/A-1b).
  • New EU AI Act corpus ingested in Swedish — risk classifications now reason in the language you selected.

EU database registration tracking

  • New Article 49 registration tab on every AI system. Track submission status, EU database ID, and registration dates ahead of the 2 August 2026 deadline.
  • Improved Compliance dossier now includes registration status per system.

Centralised Evidence vault

  • New Cross-system Evidence page in the sidebar — search and manage every uploaded file across every AI system in one place.
  • Improved 30-day soft-delete recovery window for evidence. Delete by mistake, restore with one request.