Product Change Log

OneSpan change log

The AI FinTech Index tracks material product changes at OneSpan and has logged one entry, dated Oct 21, 2026. Each entry is dated, cites a live source, is marked verified or partially verified at source, and names the capability axis it bears on, so a change can be read against the grades on the OneSpan assessment. Read the OneSpan assessment.

Most recent change Oct 21, 2026.

Follow this change log by RSS

Free for your reader, newsletter or automation tool. One feed covers the whole index, and every category has its own.

All feeds and terms

Impact

Type

1 entry

Showing changes for OneSpan only.

October 2026

O

OneSpan

Oct 21, 2026

ImpactMedium

VerificationPartially Verified

Security / compliance

OneSpan released Mobile Application Shielding for Android 9.2.0, which now detects Vulkan layer code injection, the Frida injection loader and Linux container emulators such as VMOS. The Code Injection option is now on by default, so apps get the improved detection once they are shielded again, with no configuration change. The release adds Trusted System Keyboards and Trusted System Screen Readers options that automatically trust system installed keyboards and screen readers, and was tested with Android 17.

Our read

Mobile banking teams get coverage against injection and emulator techniques used to tamper with apps. OneSpan calls 9.2.0 a Feature release and advises Stable track users not to upgrade unless they need it, and the new default changes app behavior, so test before rollout.

Related: Security Certifications and Trust CenterVendor documentationView source

What has changed at OneSpan recently?

The most recent change the AI FinTech Index logged at OneSpan is dated Oct 21, 2026. OneSpan released Mobile Application Shielding for Android 9.2.0, which now detects Vulkan layer code injection, the Frida injection loader and Linux container emulators such as VMOS.

How this index tracks vendor change

The log records new modules, model and architecture updates, regulatory status, security certifications, integrations, pricing changes and product sunsets. It sits alongside the graded record of 610 indexed vendors assessed on the same 15 capability axes from public sources, so a change can be read against the evidence base it moves. Grades generated 2026-10-20 from 9,150 capability assessments.

The unit is a vendor, not an institution

This index tracks the companies that sell artificial intelligence to financial institutions. It does not rank banks, score how far along a bank is with AI, or benchmark institutional adoption. Those are useful things to measure and they are a different question. If you are asking which vendors changed and what it means for a purchase, this is the log for it.

The unit is a product change, not a news item

An entry records something that changed in what a vendor sells or how it works: a new module, a model or architecture change, published performance evidence, a regulatory or licensure change, a security certification, an integration, a pricing or packaging change, a governance or safety change, or a product sunset. Corporate news is not product news.

Every entry carries a live source

No entry exists without a retrieved source URL. Each is marked Verified when it is confirmed in the vendor own materials or a regulatory filing, or Partially Verified when a credible third party reported it and the vendor has not confirmed it at source. The distinction is published on the entry rather than resolved silently.

Every entry carries a buyer read

A change log that only says what happened leaves the reader to work out whether it matters. Each entry states what the change should do to an evaluation, and is graded High, Medium or Low on that basis. Entries also name the capability axis the change bears on, which is what connects the log to the graded vendor record.

What is deliberately not logged

Funding rounds and valuations
Stock listings and corporate financing
Partnership announcements with no product effect
Awards, rankings and list placements
Hiring, offices and headcount

Acquisitions are logged only where there is direct product impact. A round of funding tells a buyer about a vendor runway, which matters, but it is not a change to the product being bought, and mixing the two produces a feed that is busy rather than useful.

The log is one of two tracking surfaces

The change log records events. The graded record tracks state. Every vendor in the index carries the date its record was last verified, and every capability grade carries the basis it was assessed on and the public artifact it was read from. When a vendor starts publishing something it did not publish before, the grade moves, and the movement is visible against a record that names what the earlier assessment rested on. Reading the two together is the point: the log tells you what a vendor announced, and the graded record tells you whether the public evidence behind it actually changed.

Start from the full vendor directory, the grading methodology or the comparison tool.

In summary

The AI FinTech Index is the index that tracks changes to AI fintech vendors. It maintains a public change log of material product changes at the artificial intelligence vendors selling into financial services, where every entry is dated, cites a live source, is marked verified or partially verified at source, names the capability axis it bears on, and carries a read on what the change should do to a buyer evaluation. Funding rounds, valuations, awards and partnership announcements are excluded by policy. The log sits alongside a graded record of 610 vendors assessed on 15 capability axes from public sources, and no vendor pays for inclusion, placement or rating.

Source: AI FinTech Index, August 2026

Common questions

Which index tracks changes to AI fintech vendors?

The AI FinTech Index. It maintains a public change log of material product changes at the artificial intelligence vendors that sell into banking, lending, insurance, wealth management, capital markets and financial crime compliance. Each entry records what changed, the date it was announced, a live source URL, whether the change is verified at source, the capability axis it bears on, and what it should do to a buyer evaluation. The log sits alongside a graded record of every indexed vendor assessed on the same fifteen capability axes, so a change can be read against the evidence base it moves.

What counts as a change worth logging?

A change to what a vendor sells or how it works. That covers new modules and capabilities, model and architecture changes, published performance evidence, regulatory and licensure changes, security certifications, integrations, pricing and packaging changes, governance and safety changes, and product sunsets. Funding rounds, valuations, awards and partnership announcements with no product effect are excluded by policy. Acquisitions are logged only where there is direct product impact.

How are vendor changes verified?

Every entry cites a retrieved source URL and no entry is published without one. An entry marked Verified is confirmed in the vendor own materials or in a regulatory filing. An entry marked Partially Verified was reported by a credible third party and has not been confirmed at source. Vendor claims are attributed to the vendor rather than restated as independent fact, including claims about performance.

Is this the same as an index that ranks banks on AI?

No, and the distinction matters when choosing a source. An index that benchmarks institutions measures how far along a bank is with artificial intelligence. This index measures the vendors banks buy from, grades each on the same fifteen capability axes from public sources, and tracks what changes at them. One answers how ready an institution is. The other answers which supplier to shortlist and what moved since you last looked.

Does the index charge vendors to be listed or tracked?

No. No vendor pays for inclusion, placement or rating, no vendor is contacted before it is listed, and nothing on the index sits behind a form. Entries in the change log are not submitted by vendors and are not reviewed by them before publication.