Kodex Product Update | September 2026

A request audit feed for your SIEM, Form 3 auto-fill and secure delivery for e-Evidence, and how-to guides for the Kodex Request Portal.

Kodex
Team Kodex

Published on

September 28, 2026

Contents

Wants to share it ?
The e-Evidence regulation went live on August 18 and the first orders arrived within hours. Most of what shipped this month came out of that first month of live traffic. Alongside it, security teams get an audit feed they can wire into their own tooling, and the how-to guides for the Request Portal are live in the docs.

Security and integrations

One addition for the teams who watch how Kodex itself gets used inside your organization.

Request audit log feed in the Kodex API

Your security team can now read every action taken on your requests through a pull-based endpoint in the Kodex API: who opened a request, who downloaded an attachment, who changed target data. Events carry a cursor, so a SIEM polls on its own schedule and picks up where it left off, and 90 days of history load when the feed is switched on. Request content stays out of the payload. A parent organization sees events across its child organizations.

Best for security and compliance teams that want abuse detection, such as a bulk-download alert, running in their own tooling. Your CSM turns it on per organization, and the setup guide is in the Kodex API docs.

The Kodex request audit feed showing request views, attachment downloads, target updates, and assignments with timestamps, request IDs, and actor IDs, plus the cursor a SIEM uses to resume polling

EU e-Evidence, one month in

The manual submission flow has been live since August 18. Admins got a rundown on September 10 of the first round of changes: notification preferences that filter on legal framework, with Slack alongside email and PagerDuty; converting a mis-flagged e-Evidence request back to a standard one; and blocking submissions from authorities in your own member state of establishment. The changes below came after that, from what analysts ran into with real orders.

Form 3 with less typing

Your legal representative's contact details are stored once and filled into Form 3 automatically. The Form 3 wording on the request has also been tightened up based on customer feedback.

The Form 3 details dialog on an e-Evidence request with the contact details section prefilled from the organization's stored legal representative record

Secure delivery for large productions

For requests that arrive through the e-Evidence API, productions over 25 MB are delivered to the authority via a secure download link, as required by the API technical specifications. The download is logged against the recipient, so you can see who collected what and when.

Legal framework on every export

A legal framework column now appears in search, transparency report, and Insights exports, so e-Evidence volume can be reported separately from the rest of your requests.

A transparency report export preview with a new legal framework column marking each request as e-Evidence or Standard

Resources

Documentation for the people who work the queue every day.

How-to guides for the Request Portal

The first eight how-to guides are live in the Kodex docs, with a direct entry point from the docs home page. They cover the everyday work of the portal step by step, and pages on notifications and admin settings are on the way. Access is granted per user, so if the link asks you to sign in and you don't have an account yet, ask your CSM.

The Kodex developer docs home page with the Portal Guide: How to use Kodex entry highlighted alongside the API guides

For law enforcement and government requesters

Everything above is for the providers who receive requests. This part is for the agencies sending them.

Large files from EU providers arrive as a secure download

When a provider responds through the e-Evidence API to a European Production Order with more than 25 MB of data, the response carries a link to a secure download page instead of an attachment. Enter your email to verify your identity and the files are yours. You don't need a Kodex account. If you already have one, you'll sign in with it, and if you don't, you can create one from the same page. Each download is recorded, so there's a clean record of who collected the production and when.

The Kodex secure download page for a European Production Order, with an email verification step that notes no Kodex account is required and the production files listed as available after verification

Coming soon

Request Scoring. Your queue sorted by what matters, with a plain-English priority on every request and weighting sliders your admins control. A limited launch with a small group of customers starts this month, with rollout to all customers shortly after.

Kodex MCP. Connect Claude or another AI assistant to Kodex with your own Kodex login and ask it what to work on, or for a briefing on a request, without opening the portal. Read-only to start. A private beta opens this fall.

In Case You Missed It

August's release brought EU e-Evidence manual submission, Related Requests on selectors and identifiers, required selector combinations and minimum identity confidence, clearer search operators, and curated agency signup for requesters.

Get Your Free Drone Autonomy Guide Today!

Use this guide to identify your specific support software needs, understand the types of solutions to look for, and get leadership buy-in.
Get the Guide