Release notes

Improvements and fixes

• Security records now have set retention periods: sign-in history for 1 year, the user management log for 180 days and password reset requests for 30 days, after which they are deleted automatically.

New features

• The sign-in page now has "Forgot your password?". Set a new password from the link we email you.
• Two-step verification is available with a 6-digit code from an authenticator app. Company admins can make it required.
• A new "Security" item in the account menu shows recent sign-ins and lets you sign out everywhere else.
• Company owners can hand over the owner role to another user.
• When an admin resets a user's password, the user receives a link by email to set a new one. Admins never see the new password.
• The user management log shows who added users or changed roles, and when.

Account protection

• Signing in from another place signs out the earlier session (companies can allow concurrent sign-ins in settings).
• Passwords must be changed every 180 days, and a temporary password must be changed at first sign-in.
• Common passwords and passwords containing your email or company name are not accepted.
• You are signed out automatically after a period of inactivity (8 hours by default, adjustable per company).
• We email you when your password is changed or reset, or when you sign in from a new device.

New features

• Attachment storage is now available. Documents, PDFs and STEP files can be up to 100 MB each (more on higher plans), and photos are resized automatically before upload.
• Your data is kept for 30 days after you cancel. During that time you can ask for a full export, and every deletion is recorded.
• Before you sign up, one screen shows the plan, user limit, retention period and other terms for you to review and accept.
• Company settings have a new notice contact field, so each company can choose one email address for service notices.

Improvements and fixes

• Evidence search now offers example questions, and the screen names in the evidence list are shown correctly.
• On narrow screens such as phones, the summary fields at the top of a record no longer get cut off.

We strengthened security.