Release notes
2 October 2026
The day the data boundary moved from a convention to something every query enforces, alongside a readiness program for clinics and a status page customers can read.
Written for: Evaluators tracking what the platform does today · Existing customers · Anyone reviewing what changed and when
Every read scoped, and a clinic-readiness program
Newer: 3 October 2026 · Older: 1 October 2026
The organisation boundary
- Every read of an organisation's records is now scoped to the reader's own organisation, and every write checks the caller's role - enforced in the database rather than in application code.
35552f00 - Inbound webhooks resolve which organisation they belong to before they are trusted.
35552f00 - User creation is restricted so that an account can only ever be created inside the organisation creating it, and onboarding is restricted to administrators.
6d12dca3 - Two-step verification is enforced for an organisation, and signing up with Google requires a verified domain - an unverified address can no longer join an organisation on the strength of an email address alone.
53840ed2
Clinical and scheduling
- Rehabilitation gained draft SOAP notes, note autosave, a single note per visit, and the ability to write a note from the schedule. Drafting with AI is off until an organisation turns it on.
3acef434 - Follow-up booking and digital check-in, so a patient can complete paperwork before they arrive.
1e8c91ce - Rehabilitation note fixes, AI provider keys encrypted at rest, and timeouts on AI requests so a slow provider cannot hold a page open.
79dadc0f
Honesty in the product
- Nineteen corrections from a documentation audit. Where a capability was not wired, it now says so instead of appearing to work: payments and voice messages refuse rather than pretend, statements report whether they were actually sent, and settings that are not enforced say that they are not.
6d12dca3 - Claims must have a billing facility chosen rather than guessed, and no billing or plan data is displayed that is not real.
53840ed2 - Patient consent, opt-outs and message pauses are honoured, and a change to an audit entry is detectable.
6d12dca3
Service and design
- A public status page: availability measured from probes rather than assumed, incident history, a release log, and service levels labelled with what each one means.
f8ac6fa0 - A documentation home page indexing every page, so the documentation can be browsed rather than searched.
6d12dca3 - A readiness program for clinics, and a documentation accuracy pass against the platform as it then stood.
dea819fd