Skip to main content

Update Policy

New attack vectors emerge constantly, and outdated SDKs are the primary surface for Injection and Liveness fraud. Staying on the latest Unico SDK version is the most effective protection available.

It is the client's responsibility to maintain a healthy SDK update routine. Unico commits to releasing updated versions in response to emerging threats and keeping clients informed of new releases.

Why do we have an update policy?

Fraudster techniques evolve rapidly. An SDK version that is secure today may be vulnerable within weeks. The only reliable defense is staying current. This policy defines the minimum timelines clients must meet to remain supported and protected.

Categories of updates

CategoryScopeImplementation deadlineSupport after deadline
CriticalAddresses active fraud attacks or security vulnerabilities5 calendar daysOlder versions are no longer supported; update is required before Unico provides assistance
Non-CriticalTechnological improvements and non-security enhancements60 calendar daysSupport continues, but technical assistance requires updating to the latest version

Critical updates are identified in the release notes with a Critical Update danger tag.

These deadlines apply uniformly to all clients regardless of capacity or usage volume.

How to update

Refer to the standard installation guide for your platform:

Best practice

Avoid updating the SDK simultaneously with other libraries or components. Isolating the SDK update makes it easier to identify the root cause of any issues. See Best Practices for SDK Implementation for details.

API contract breaks

API contract breaks are restricted to Major version releases and follow semantic versioning principles. Minor and patch releases do not introduce breaking changes to the API contract. Unico avoids Major version bumps whenever possible to minimize migration effort.

Release notes

Each platform publishes release notes detailing new features, bug fixes, and fraud mitigations included in every version:

Update notifications

Unico notifies clients of new releases via email:

Update typeNotification timingContent
CriticalImmediately upon releaseRelease details, 5-day deadline, Customer Success follow-up
Non-CriticalMonthly summaryList of key changes across all non-critical releases, 60-day deadline reminder