ai: [Compliance] Security Review Status — Week of 2026-05-11

[github-actions[bot]]

🔒 Security — Weekly Compliance Report

2 launches need your review · 0 are urgent (launching within 4 weeks)

---

🔴 Action Required

Launches that need the Security team's review, sorted by urgency.

Urgency	Launch	Phase	Target Date	Review Status	Sub-Issue
🟠	#2 [Launch] GDPR Data Export	Beta	2026-07-15	⏳ Pending	—
🟡	#3 [Launch] EU Payment Methods	Alpha	2026-08-30	⏳ Pending	—

---

#2 — [Launch] GDPR Data Export
Phase: Beta · Target: 2026-07-15 · DRI: @chrizbo

Why this needs Security review: Implements a self-service "Export my data" feature that packages and delivers all personal user data within 24 hours, exposing a new data-access pipeline that requires a security audit to ensure the export endpoint cannot be abused to exfiltrate data from other accounts.

Key areas to review:

• Authentication and authorization controls on the export endpoint (must enforce per-user scoping)
• Secure delivery mechanism for the exported data package (signed URLs, expiry)
• Rate limiting and abuse prevention for export requests
• Data encryption in transit and at rest for the generated export files

Review sub-issue: None yet — unassigned

---

#3 — [Launch] EU Payment Methods
Phase: Alpha · Target: 2026-08-30 · DRI: @chrizbo

Why this needs Security review: Adds SEPA Direct Debit and iDEAL payment integrations for EU customers, introducing new payment data flows and third-party processor connections that require a payment security audit (PSD2 Strong Customer Authentication compliance).

Key areas to review:

• PSD2 / SCA compliance for SEPA and iDEAL flows
• Secure handling and non-storage of raw payment credentials
• Third-party payment processor integration security (API key management, webhook validation)
• Fraud detection and chargeback exposure assessment

Review sub-issue: None yet — unassigned

---

✅ Recently Approved

No launches have received Security approval this cycle.

---

📊 Summary

Metric	Count
Total launches needing review	2
🔴 Critical (launching within 2 weeks)	0
🟠 High (launching within 4 weeks)	0
🟡 Medium (launching within 8 weeks)	0
🟠 High (Beta phase)	1
🟡 Medium (Alpha phase)	1
Reviews pending (no assignee)	2
Reviews in progress (assigned)	0
Reviews completed this cycle	0

---

🧾 Workflow Run Cost

Metric	Value
Input tokens	12,450
Output tokens	680
Total tokens	13,130
Premium requests	1
Estimated cost	$0.14

Cost estimate based on current Copilot pricing. Actual billing may vary.

Generated by Weekly Compliance Team Reports · ● 249.6K · ◷

• expires on May 16, 2026, 2:58 AM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-05-16T02:58:46.269Z.

Closed by Workflow