diff --git a/.github/release-please/release-please-manifest.json b/.github/release-please/release-please-manifest.json
index 8baa1b1ac8..bef6d5edd9 100644
--- a/.github/release-please/release-please-manifest.json
+++ b/.github/release-please/release-please-manifest.json
@@ -6,5 +6,5 @@
   "otdfctl": "0.35.0",
   "protocol/go": "0.39.0",
   "sdk": "0.27.0",
-  "service": "0.20.0"
+  "service": "0.21.0"
 }
\ No newline at end of file
diff --git a/service/CHANGELOG.md b/service/CHANGELOG.md
index 27a6d73a42..76748f51e2 100644
--- a/service/CHANGELOG.md
+++ b/service/CHANGELOG.md
@@ -1,5 +1,34 @@
 # Changelog
 
+## [0.21.0](https://github.com/opentdf/platform/compare/service/v0.20.0...service/v0.21.0) (2026-07-22)
+
+
+### ⚠ BREAKING CHANGES
+
+* **policy:** GetPC does not respect manager field. ([#3752](https://github.com/opentdf/platform/issues/3752))
+
+### Features
+
+* **core:** Update fixtures ([#3766](https://github.com/opentdf/platform/issues/3766)) ([9ac1640](https://github.com/opentdf/platform/commit/9ac1640df7d8447cdaaa540d0eacc98daa3c832d))
+* **policy:** add entitleable namespace field and narrow-read-API doc corrections ([#3727](https://github.com/opentdf/platform/issues/3727)) ([0fc2f01](https://github.com/opentdf/platform/commit/0fc2f01fbb0d75b04d2a5dcb94e5acdea9f62b6f))
+* **policy:** Add name and manager lookup ([#3753](https://github.com/opentdf/platform/issues/3753)) ([bfbc65d](https://github.com/opentdf/platform/commit/bfbc65d6f56a7d28144379f535bd82ce61e62bdd))
+* **policy:** Add UnsafeUpdateKey implementation ([#3731](https://github.com/opentdf/platform/issues/3731)) ([cd47518](https://github.com/opentdf/platform/commit/cd475182d1e4bc90673d71234d7a175b7aeed3d8))
+* **policy:** Add UnsafeUpdateKey rpc. ([#3728](https://github.com/opentdf/platform/issues/3728)) ([c89b193](https://github.com/opentdf/platform/commit/c89b1933e3931bc1984711f2268c8adedd786db4))
+* **policy:** create subject mappings with attribute values ([#3741](https://github.com/opentdf/platform/issues/3741)) ([718320b](https://github.com/opentdf/platform/commit/718320b2bbe1a03041ed70bb3b20eb3c30cf64fa))
+* **policy:** deprecate GetAttributeValuesByFqns in favor of narrow read APIs ([#3745](https://github.com/opentdf/platform/issues/3745)) ([baba709](https://github.com/opentdf/platform/commit/baba70913cfe615448ab05b465ecdaf037791889))
+* **policy:** dynamic attribute value entitlement mappings ([#3568](https://github.com/opentdf/platform/issues/3568)) ([21e95e0](https://github.com/opentdf/platform/commit/21e95e04c9f5903dc4c437d12ea790bbbf20bbb1))
+* **policy:** populate entitleable definition namespace ([#3737](https://github.com/opentdf/platform/issues/3737)) ([3f32839](https://github.com/opentdf/platform/commit/3f32839689e257338babb91903298b3b0256385c))
+
+
+### Bug Fixes
+
+* **authz:** use standard Keycloak token exchange ([#3754](https://github.com/opentdf/platform/issues/3754)) ([de9ae0d](https://github.com/opentdf/platform/commit/de9ae0dde552267470b44c4e09854034cbc70e84))
+* **core:** Pass the platform logger to the authz role provider factory ([#3732](https://github.com/opentdf/platform/issues/3732)) ([9c32554](https://github.com/opentdf/platform/commit/9c32554958aef3572728c0465a047c7779a06d95))
+* **core:** prevent OpenTelemetry resource schema conflicts ([#3769](https://github.com/opentdf/platform/issues/3769)) ([4a0c41c](https://github.com/opentdf/platform/commit/4a0c41c9e7ca14291b4bed4e02a0a0cae59f2444))
+* **deps:** bump github.com/opentdf/platform/protocol/go from 0.38.0 to 0.39.0 in /service ([#3764](https://github.com/opentdf/platform/issues/3764)) ([8d430f5](https://github.com/opentdf/platform/commit/8d430f5f1944c754c74b055b1366351ab43fa72b))
+* **ers:** coerce attempted_strategies []string to []interface{} for structpb ([#3645](https://github.com/opentdf/platform/issues/3645)) ([71d6e90](https://github.com/opentdf/platform/commit/71d6e906ef46409f64b032230c0081e9c6337ce8))
+* **policy:** GetPC does not respect manager field. ([#3752](https://github.com/opentdf/platform/issues/3752)) ([0d3c0a0](https://github.com/opentdf/platform/commit/0d3c0a0e49de669b0c4bb691d51ff0abef787693))
+
 ## [0.20.0](https://github.com/opentdf/platform/compare/service/v0.19.0...service/v0.20.0) (2026-07-07)
 
 
diff --git a/service/cmd/version.go b/service/cmd/version.go
index 5c634e0ffd..07f2e0dbe4 100644
--- a/service/cmd/version.go
+++ b/service/cmd/version.go
@@ -2,7 +2,7 @@ package cmd
 
 import "github.com/spf13/cobra"
 
-const Version = "0.20.0" // Service Version // x-release-please-version
+const Version = "0.21.0" // Service Version // x-release-please-version
 
 func init() {
 	rootCmd.AddCommand(&cobra.Command{