Blend Release Notes 9/25/26

Posted 1 day ago by Kelly Chen

K
Kelly Chen Admin

(Note: you can download the Release Notes PDF in the Release Notes PDFs section in Help Center)


For this release, we anticipate the following introductions in your environments. Major features are documented in the Blend Knowledge Base accessible at help.blend.com. If that resource does not answer your question, please reach out to Blend Support.


Announcements (2)


SAML Key Encryption Update Required

We are deprecating support for RSA 1.5 (RSA_PKCS1_PADDING) key encryption for SAML assertions, which will be fully removed by October 1st, 2026. This change is driven by a Node.js 22+ security fix for the Marvin Attack vulnerability (CVE-2023-46809), which removes support for RSA 1.5 padding in the decryption path, meaning any SAML assertions still using this method will fail to decrypt. IdP administrators must update their SAML key encryption method from RSA 1.5 to RSA-OAEP (xmlenc#rsa-oaep-mgf1p) in their Identity Provider's SAML integration or Service Provider (SP) connection settings by October to avoid disruption to borrower SAML-based authentication. This update is typically carried out by your institution's IT team. If you have questions or need assistance, please reach out to your Blend representative or open a support ticket.


Note: Update steps may vary depending on your IdP (e.g., Okta, Azure AD, PingFederate, OneLogin, etc.). Refer to your IdP's documentation or contact their support team for specific instructions.


Encompass Lower Environment Migration

ICE is in the process of migrating customers’ Encompass lower environments over a period of time. If you are scheduled for migration, please be aware of the following important steps to ensure continued connectivity with Blend:


What You Need to Do:

Notify Blend Support at least 10 days in advance of your scheduled migration. This lead time is necessary for Blend to prepare and reestablish connectivity between your Encompass Beta and Blend Beta environments.


If you have received a migration notification from ICE and do not intend to delay the migration, please notify Blend Support immediately to ensure your systems remain connected.


For additional details, please refer to ICE's official documentation here:

R2T to UAT Migration Details


Maintenance Announcements (4)


(New) Scheduled Network Maintenance: API Traffic Routing Update 

Blend is routing Public API traffic to api.blend.com and api.blendlabs.com through Cloudflare's web application firewall (WAF) to strengthen protection against denial-of-service (DDoS) and application-layer attacks. Your API endpoints, credentials, and request and response formats will remain unchanged. Please reach out to your Blend account representative if you have any questions.


Will there be downtime associated with this maintenance?

No downtime is expected.


What services or products are affected?

Any API calls being made to api.blend.com and api.blendlabs.com. This includes vendor integrations, inbound notification webhooks, and the Blend Lender mobile app. Home Lending applications, Documents, Disclosures, Follow-ups, Closings and Configurable Products are all reachable through these endpoints.


How will this impact the borrower app?

No impact. The borrower application is served on a separate path and does not route through the Public API. Borrower-facing traffic is unchanged by this migration.


How will this impact the lender app?

No impact. The lender web application is unaffected, as it does not route through the Public API.


Maintenance Windows

  • Beta: Monday 9/28, 12:00 AM - 2:00 AM Pacific

  • Production: Monday 10/12, 12:00 AM - 2:00 AM Pacific



(New) Database Upgrade for DCS, Search Ingest, and Purge Services 

Blend is upgrading the database engine powering the Document Content Service (DCS), Search Ingest Node, and Purge services.


Will there be downtime associated with this maintenance?

Yes. DCS-dependent requests may fail while the database is unavailable, and search indexing and purge processing will temporarily pause or fall behind during the upgrade window. Search indexing and purge processing will resume automatically after maintenance completes. Requests that fail in the borrower or lender application during the window are not guaranteed to replay automatically; users may need to retry those actions after maintenance is complete. No application data will be deleted or lost as a result of this maintenance.


What services or products are affected?

DCS, Search Ingest Node, and purge-related services will be affected during the maintenance window.


How will this impact the borrower app?

Borrowers may experience errors or be unable to complete certain application steps that depend on DCS while the database is unavailable. Newly created, updated, or deleted applications may also appear with a delay in search or pipeline views until processing catches up after the maintenance window. Purge-related processing may be delayed but will not result in loss of application data.


How will this impact the lender app?

Lenders may experience errors when loading certain workflows or viewing DCS-dependent information. Recently updated applications may temporarily appear with stale search results until processing catches up after the maintenance window. Purge and archival updates may also be delayed during the upgrade.


Maintenance Windows

  • Beta: There will be no impact to beta.

  • Production: Thursday 10/8, 12:00 AM - 2:00 AM Pacific



(New) Blend Signing Room (RON) Database Migration

Blend is migrating the Signing Room (RON) database from RDS PostgreSQL to an upgraded Aurora PostgreSQL cluster.


Will there be downtime associated with this maintenance?

Yes. RON closings will be unavailable for approximately 40 minutes while the database migration is in progress. Inbound events will replay automatically once the service recovers. The following actions will not retry automatically and must be performed again manually if initiated during the downtime window: RON sends, appointment schedule confirmations, draft room creation, and Title365 order pushes. No application data will be deleted or lost as a result of this maintenance.


What services or products are affected?

Remote Online Notarization (RON) closings will be affected during the maintenance window. Traditional and hybrid closings are not affected, nor are any other parts of the borrower or lender applications.


How will this impact the borrower app?

Borrowers will be unable to open the signing room or complete the pre-appointment device test. Any notarization ceremony in progress will be interrupted and will need to be rescheduled.


How will this impact the lender app?

Lenders will be unable to send a RON closing or make changes to an existing one. Notaries will be unable to confirm a RON appointment. Ops and notary users in Blend Bridge may see errors on any task list that contains a RON task.


Maintenance Windows

  • Beta: There will be no impact to beta.

  • Production: Tuesday 10/27, 12:00 AM - 2:00 AM Pacific



Scheduled Network Maintenance: Cloudflare Migration

Blend is updating DNS for customer-facing application URLs so that traffic is served through Cloudflare's edge network. This is a DNS and TLS-termination change only. The systems serving your application are unchanged. 


Will there be downtime associated with this maintenance?

No downtime is expected.


What services or products are affected?

The borrower app, lender app, admin console, inbound API and partner integrations calling your hostname, and branded or vanity URLs.


How will this impact the borrower app?

No user-visible change. No borrower data, in-progress application, or uploaded document will be affected.


How will this impact the lender app?

No user-visible change.


Maintenance Windows

  • Beta: Monday 9/28, 12:00 AM - 2:00 AM Pacific

  • Production: Monday 10/5, 12:00 AM - 2:00 AM Pacific


Please reach out to your Blend account representative if you have any questions.


Preview Environments (Test/Dev/Beta) (2)


Production Environments (Prod) (3)

0 Votes


0 Comments

Login to post a comment