Product Updates.

Server-First On-Premise Deployment

The on-premise editions install as one hardened container on the customer's own Linux host, provisioned on first boot from a sealed profile: the tenant, its platforms and its named people are established without an operator typing configuration, and a tampered profile is refused at install time rather than discovered weeks later.

Signed releases: each delivery carries a cosign signature over the image digest, SHA-256 sums across every file in the delivery kit, a CycloneDX SBOM and an Ed25519-signed release manifest. IT-run updates: upgrades are executed by the customer's own operations team against a pinned digest — no updater daemon runs on the host, and no inbound access to the estate is required. A pre-answered change request accompanies each release for internal approval. Detail on the deployment & updates page.

CIS Contractor Returns (Preview) and a Dedicated UK AI Governance Page

Construction Industry Scheme: the CIS300 contractor monthly return is now available in preview within the MTD platform. Deduction rates (0%, 20% or 30% of the payment after materials) are computed per subcontractor, UTR checksums and HMRC verification numbers are validated against each subcontractor's payment status, and nil returns and inactivity periods are supported. Returns are prepared and validated behind a named approval, then filed through HMRC's CIS online service. CIS authorisation is compartmentalised: enabling it does not touch existing VAT or ITSA configurations.

UK AI Governance: the UK framework introduced in July now has a dedicated product page, Qgentic AI Governance (UK) — the PRA SS1/23 model inventory with risk tiers computed from declared materiality, complexity and decision autonomy, and Algorithmic Transparency Recording Standard (ATRS) records for public bodies. The page states plainly that the UK has not enacted an AI Act and which instruments therefore actually apply.

The Practice Cockpit: One Sign-In Across a Client Book

Practices carrying many clients previously moved between per-client sign-ins or drove the platform through the API. The console now opens on a client roster ordered by what needs a person first — clients with an approval waiting, then anything overdue, then the rest — alongside counts of clients awaiting an approval and clients with an obligation past its date.

Deadline board: every obligation falling due across the whole book within 30, 60 or 90 days, soonest first, computed from each client's configured dates. Batch runs: one platform's cycle is started for a selected set of clients in a single action; each client still stops at its own approval gate, and a client is offered only where the person holds the submitter role and the subscription is active. Opening a client switches the console into that tenancy — every membership check continues to apply, so per-client isolation is unchanged.

Platform Availability: OpRes, AI Act, and ITSA Modules

The OpRes, AI Act, and ITSA (Income Tax) modules are now generally available, after full validation.

ITSA Module Update: Full-year support is now active, including the end-of-year final declaration functionality. The system automatically reconciles annual figures against submitted quarterly data, enforcing strict chronological continuity (rejecting overlapping or gapped periods). Final declarations are validated directly against HMRC's intent-to-finalise calculations. The live API adapter dynamically selects the appropriate HMRC endpoint (cumulative or period) based on the target tax year. Module authorisation remains compartmentalised; activating ITSA does not impact existing VAT configurations.

OpRes Update: Regulatory mappings have been synchronised with the latest FCA (PS26/2) and PRA (PS7/26) rulesets for unified operational incident and third-party reporting. The compliance deadline of 18 March 2027 has been automatically populated in all applicable tenant calendars. Additionally, the optional FCA Financial Services Register verification tool is now live, operating as a non-blocking diagnostic check.

AI Act Update: Two major capabilities have been introduced. First, duty sets for General-Purpose AI (GPAI) models are now algorithmically assigned (baseline Article 53 duties, scaling to Article 55 duties for systemic risk models based on Commission designation or FLOP thresholds [Article 51(2)]). Second, Article 27 Fundamental Rights Impact Assessment requirements are now automatically triggered for relevant high-risk use cases (e.g., credit scoring, insurance pricing) regardless of public/private sector status. Note: Article 54 (Authorised Representatives for non-EU providers) remains out of scope, though the system will flag when it applies.

Operational Notice: OpRes, AI Act, and DORA modules remain in prepare-only mode, as the respective regulatory bodies do not currently expose automated submission APIs. MTD modules await final HMRC Developer Hub listing prior to official "HMRC-recognised" status.

New Module Release: AI Governance (EU/UK)

Qgentic AI Act provides structured governance for organisational AI estates. EU Framework: Supports deterministic risk categorisation (overrides contradicting systemic data are rejected), Annex IV technical documentation validation, Annex VIII registration formatting, and automated 15-day incident reporting trackers. UK Framework: Aligns with existing UK regulatory structures (e.g., PRA SS1/23), providing model inventory management, algorithmic tiering, validation tracking, and ATRS record generation. Both frameworks run on the standard Qgentic architecture — the shared deterministic engine, approval workflows, and cryptographic audit trails.

Automated Compliance Calendars

Tenant dashboards now feature integrated statutory deadline tracking. MTD deadlines (VAT/ITSA) are algorithmically derived from published schedules and automatically sync with live HMRC API data upon credential integration. DORA and OpRes deadlines are configurable by the tenant. Automated email notifications trigger at T-14, T-7, and T-1 days (configurable distribution lists). The system can automatically pre-stage returns upon the opening of a filing window; however, manual authorisation by a designated approver remains mandatory for all submissions.

Consolidated Audit Exports

Execution runs can now be exported as complete, encrypted ZIP archives containing the exact regulatory payload, cryptographic audit chains, and a hashed manifest identifying the authorising user. A formatted PDF run report is also generated. Bulk export gives full tenant data portability.

Persistent Execution History

Execution records are now fully persisted across service restarts and updates. Active runs interrupted by a system event are flagged as "interrupted" and require manual review; the system will never auto-approve in a degraded state.

ITSA Module Capability Expansion

The ITSA preview module has been expanded to support quarterly updates for self-employment and UK property income, alongside retrieval of HMRC tax calculations, on the shared Government Gateway architecture.

Identity-Bound Approvals

Identity Access Management (IAM) integration ties every console action to a specific named user. Unattended or automated self-approval workflows are strictly prohibited; every export or API submission mandates an explicit, cryptographically logged user authorisation.

MTD for VAT: Module Availability

The core validation logic, preparation pipeline, and live HMRC API adapters are complete. Direct API transmission capabilities are activated post-HMRC enrolment per tenant. Pending completion of the HMRC software directory listing.