Neologik Platform release notes

Neologik Platform v5.1

November 2026

Neologik Platform v5.1 shows each customer the value of their Neologik agents and Apps. Neologik agents can now answer email from genuine senders, with a person ready to take over. The release supports the transparency duties of the EU AI Act. Every environment can keep itself patched and up to date.

A customer receives these features when the customer’s environment moves to v5.1.

Contents

• Highlights
• New features
• Platform and security
• What your administrator needs to do
• Improvements
• Good to know

Highlights

• See the return on your investment. The Neologik Admin Tool shows return, cost and ROI for every App, MCP server and Neologik agent.
• A trusted email channel. A Neologik agent answers genuine senders only, and a named person takes over when needed.
• Transparent AI. The web chat tells users they are talking to an AI, and every reply carries an “AI generated” label.
• Always current. An administrator picks a weekly window, and the platform installs Neologik updates in that window.
• The latest models. A Neologik agent can run on the GPT-6 family of models.

New features

Value

• Return on investment for every App, MCP server and Neologik agent. The Admin Tool shows return, cost, ROI and ROI % for the last 30 days.
• User feedback in the web chat. Thumbs up and down now work in the web chat as well as Teams.
• Feedback triage. Each Neologik agent’s page lists every rating beside the question and the answer. A poor answer can become a test case.

Trust

• EU AI Act transparency. The web chat tells users they are talking to an AI. Every reply shows an “AI generated” label and marker.
• AI-generated documents and tasks are marked. Word documents record “AI-generated” in their properties, and Planner tasks carry an “AI generated” line.
• A published data statement. The statement lists what the platform reports to Neologik, the retention period and how to ask for erasure.
• Delegated provisioning mode. The customer’s own Global Administrator makes every directory change, and the platform holds no Microsoft Graph application permission.

Always current

• Automatic platform updates. The customer’s administrator picks a weekly window, and the platform installs Neologik updates in that window.
• Security patches that always apply. Kubernetes patches install automatically, and node security patches apply even on clusters that stop overnight.

Channels

• An email channel that answers genuine senders only. The channel checks Exchange’s record of each mail, so a forged sender gets no reply and a person is told.
• A second check on every email reply. A second Neologik agent can approve each reply before the reply goes out.
• Hand-off to a person. After a set number of failed attempts, or when the Neologik agent asks, a named person takes the thread for 14 days.
• Try on live mail first. Draft mode saves each reply as a draft for a person to read.
• Replies from the customer’s own address. Replies can come from the customer’s shared address, with a copy in that mailbox’s Sent Items.
• The customer’s brand in the web chat. The web chat takes the customer’s font and colours, on the hosted page and in an iframe.
• A file upload switch. Each web chat channel can allow or block file upload.
• A check before a public channel. The Admin Tool asks for confirmation before creating a channel that needs no sign-in.
• WhatsApp usernames. Users who hide their phone number behind a username are served as before.
• A more responsive WhatsApp channel. Users see a typing indicator, and button replies reach the Neologik agent.
• WhatsApp set up from the Admin Tool. The first WhatsApp channel of an environment installs the WhatsApp bridge.

Apps and blueprints

• Edit an App component. Administrators change a component’s settings in the Admin Tool without redeploying the component.
• Change an App’s settings in the Admin Tool. Administrators change the settings an App declares on the App’s page, and apply them without a new App release.
• Apps hosted elsewhere, in one list. Components that run outside the cluster, such as a voice agent, appear beside the other Apps.
• A version check before install. The Admin Tool refuses a blueprint that needs a newer platform version, and says why.
• Outstanding tasks on the home page. Deployment steps that wait for someone, such as a consent or a licence, show as tasks to do.
• Apps that know who sent the mail. An App tool can rely on the sender the email channel verified, out of the model’s reach.

Better answers

• Long PDF documents read whole. Parts of a PDF over 100 pages now overlap, so a table that crosses a boundary is read whole.
• GPT-6 models. A Neologik agent can run on the GPT-6 family, with the reasoning setting in the Admin Tool.

Platform and security

v5.1 is stronger by default, with no action needed for the items in this section.

• Current foundations. The platform runs on Kubernetes 1.35 and Python 3.14.
• Microsoft Entra ID sign-in for monitoring. The Log Analytics workspace accepts Microsoft Entra ID sign-in only. Application Insights follows once every sender signs in the same way.
• More private endpoints. On a Private Endpoint environment, the Video Indexer account and the deployment storage account now sit behind private endpoints.
• Tighter defaults. Public and key-based access is closed wherever Azure allows. The internet-facing chat component holds only the rights the component uses.
• Exact roles for every channel. Every deployment sets each channel identity to the declared roles, and removes any other role.
• No registry passwords. Container registries on Standard environments refuse a password.
• Key Vault purge protection. Purge protection is on, so a deleted Key Vault can be recovered for 90 days.
• E-mail addresses masked. The platform masks e-mail addresses in the log patterns that the platform reports to Neologik.

Role changes at the upgrade

The upgrade makes these changes itself, so nobody needs to act on them.

Identity	Change	Scope	Why
The platform’s services, and each Neologik agent’s engine and channel	Gains Monitoring Metrics Publisher	Application Insights	Telemetry signs in with Microsoft Entra ID
Each channel identity	Gains Cognitive Services OpenAI User	The environment’s Foundry account	The channel reads attachments through the environment’s models
Each channel identity	Loses any role outside the declared set	The environment’s resources	Each channel holds only the roles the channel uses
The Admin Tool’s service identity	Gains Cosmos DB Built-in Data Contributor	Each Neologik agent’s memory container	Edit, Delete and Forget user on the Memory tab
The start/stop Function App identity	Gains Storage Blob Data Owner and Storage Table Data Contributor	The schedule’s storage account	The schedule signs in with an identity, with no storage key
The deployment identity	Gains Storage Blob Data Contributor	The schedule’s package container	The deployment publishes the schedule
The test runner identity	Gains Monitoring Metrics Publisher	Application Insights	Test telemetry signs in with Microsoft Entra ID
The test runner identity	Gains Storage Blob Data Contributor	The container evals-qa-cache	Quality tests keep their results between runs

What your administrator needs to do

Neologik plans each upgrade with your administrator, and sends the scripts your environment needs.

Before the upgrade

Who	Step	What the step enables
An Owner of the subscription	Run Prepare-NeologikDeploymentIdentity.ps1, when Neologik sends the script for your environment	The deployment identity holds Role Based Access Control Administrator on the environment’s resource group, which the upgrade needs
The Cloud Solution Provider partner, for a customer billed through a partner	Set the customer’s Azure usage cost visibility policy to Yes	The ROI page shows compute cost and platform overhead
The owner of any component outside the platform that sends logs or telemetry to the environment	Move the component to Microsoft Entra ID sign-in, with Monitoring Metrics Publisher on Application Insights	The component’s logs and telemetry keep arriving
The developer of any .NET App on the environment	Pass a ManagedIdentityCredential for AZURE_CLIENT_ID to UseAzureMonitor	The App’s telemetry keeps arriving

After the upgrade

Who	Step	What the step enables
An Owner or a User Access Administrator of the subscription	Run Enable-NeologikCostReporting.ps1, which Neologik sends	The ROI page shows compute cost

When you use these features

Who	Step	What the step enables
The developer of a page that draws the chat with the Web Chat SDK	Show “AI assistant. Replies are AI generated.” above the chat, and an “AI generated” label under each reply	The page gives users the same disclosure as the hosted page. An iframe or the chat button shows this already
An Exchange Administrator or Global Administrator	Run the mailbox grant script from the email channel’s card, then select Confirm grant	The channel reads the mailbox and replies. Exchange can take up to two hours to apply the grant
An administrator	Turn on Auto Update on the Admin page, and pick a weekly window	The platform installs Neologik updates in that window

What to expect during the upgrade

• The cluster moves to Kubernetes 1.35, which takes 30 to 60 minutes.
• On a Private Endpoint environment, the deployment storage account accepts connections through the private endpoint only. An upload from a workstation outside the network is refused.

Improvements

• A clearer email channel. An unavailable mailbox is shown as unavailable, and the channel checks the mailbox less often until the mailbox answers.
• Quicker answers in Teams. A question asked during a silent sign-in is answered in the background, so the chat responds quickly.
• New models appear at once. Refresh models reaches every part of the platform, so a request that names a new deployment finds the deployment.
• Memory changes apply directly. Edit, Delete and Forget user on the Memory tab write to the Neologik agent’s memory.
• App updates always move forward. App provisioning never moves an App to an older release.
• Clear messages for channels. A channel number or mailbox already in use gets a message that names the holder.
• A clearer blueprint preview. The import preview names each channel’s type and access mode, and the next steps come from the import plan.
• Cluster metrics on every environment. Private Endpoint environments now receive Prometheus metrics.

Good to know

• Mailboxes. The email channel works with Microsoft 365 mailboxes.
• Monitoring endpoints. The Log Analytics workspace, Application Insights and the Azure Monitor workspace keep public endpoints by design. Every request must sign in with Microsoft Entra ID.
• Azure Maps. On a Private Endpoint environment, the Azure Maps account stays on a public endpoint in v5.1.
• Chunking. Common is now the one chunking style, and an index set to the contracts style reads as Common.
• Removing an App. Let an App finish installing before you remove the App.
• Patch window. A cluster on a start/stop schedule runs about seven node-hours more each week, for the Kubernetes patch window.
• Telephone channel. The Telephone (voice) option on the Channels tab prepares for a later release, and takes no calls in v5.1.

Your Neologik contact can answer any question about these notes.