What’s new

Complete product documentation and safer, more useful workflow webhooks.

• New
  Launched the NeuDocs documentation site and linked it from the main navigation and footer.
• New
  Webhooks can now cover request sends, reminders, staff replies, request completion, item approval, and uploads.
• New
  Optional recipient details let trusted automations relay client-facing events through Zapier, Make, n8n, or a custom service.
• Security
  Webhook signing secrets are shown once at endpoint creation, signatures are documented end to end, and secure portal URLs remain opt-in credentials.
• Improved
  Updated the application framework to the latest patched Next.js 16 release used by the project.

Clearer subscription management and a more consistent settings experience.

• New
  Billing now shows subscription details and pending cancellations.
• Improved
  Settings now use one consistent sidebar instead of competing navigation rails.

More resilient sign-in, checkout, and message delivery infrastructure.

• Fixed
  A temporary Supabase Auth failure no longer takes down the whole site.
• Fixed
  Checkout reuses an existing Paddle customer instead of deadlocking.
• Improved
  Client-message delivery is channel-neutral internally, preparing notifications for additional delivery channels.

A production-ready Paddle billing flow, faster upload scanning, and delivery-channel groundwork.

• New
  A public checkout page now supports Paddle payment links.
• New
  Past-due subscriptions receive a grace window, with transaction and customer events reflected in billing state.
• New
  Client-facing webhook events can relay request sends, reminders, and staff replies through Zapier, Make, or a custom endpoint.
• New
  Trusted endpoints can opt in to the client name, email, and portal link needed to compose a relayed message.
• New
  Notification settings now include a WhatsApp interest signal while email remains the active client channel.
• Improved
  Paddle customer and contact details are synchronized for live billing and retention workflows.
• Improved
  Uploads are scanned inline, and scheduled jobs are reduced to deployment-safe daily runs.
• Improved
  The evidence trail records which channel carried each request and reminder.
• Fixed
  Out-of-order Paddle webhook deliveries are discarded instead of rolling billing state backward.
• Fixed
  Checkout is allowed by the production Content Security Policy and functions run in one supported region.
• Security
  Client contact details and portal links remain disabled per webhook endpoint unless an administrator explicitly opts in.

Additional defense in depth for billing webhooks.

• Security
  Paddle webhook requests are restricted to Paddle’s published source IP ranges in addition to signature verification.

REST API, webhooks, Dropbox export, and accounting contact imports.

• New
  Public REST API with firm-scoped API keys for clients and document requests.
• New
  Signed outbound webhooks for request, review, and upload workflow events.
• New
  Completed requests can be exported to Dropbox.
• New
  Client imports from QuickBooks Online, Xero, and Karbon.
• Fixed
  Expired trials can no longer create clients, resend requests, or start bulk work.
• Security
  Webhook endpoint writes now enforce the complete tenant row-level-security policy.

Safer configuration, migrations, tenant isolation, and trial sign-up controls.

• Security
  Startup validation now checks encryption keys and critical environment variables before sensitive features run.
• Security
  The migration path verifies row-level-security guards and revokes unsafe public database grants.
• Security
  Disposable email domains are blocked from starting trials.
• Improved
  Deployment diagnostics now warn about incomplete site URL, email, browser-push, and hCaptcha configuration.

Stronger automated checks and patched security dependencies.

• Security
  Patched critical and high-risk multipart form dependencies and replaced the previous OpenTimestamps package.
• Improved
  The pre-push gate now runs type checking and linting, with property-based tests and coverage floors for security-critical logic.
• Improved
  Changelog entries now use exact release dates and focus on user-facing changes.

Document AI that verifies and reads your clients’ uploads, plus a practice-wide insights dashboard.

• New
  Document Correctness Engine — bring your own AI key and NeuDocs checks each upload is the right document (right type, right period, signed, legible, complete) before you review it.
• New
  Per-request and per-template controls: turn AI verification on, set what “correct” looks like, and choose advisory hints, a soft client nudge, or a hard gate (always with a client escape hatch).
• New
  Structured Capture — pull the fields you choose (tax year, totals, names, dates) straight off each upload, shown right in the review queue.
• New
  Partner Insight dashboard — completion rate, average cycle time, overdue work, bottleneck clients, and your document correctness pass-rate.
• New
  Clients can snap a photo of a document on their phone to upload it.
• New
  Evidence reports include a QR code that opens the public verifier with the report fingerprint preloaded.
• Improved
  Redesigned home page that shows the full picture — collect, verify, prove, capture.
• Security
  Bring-your-own-key AI: documents go only to your chosen provider, protected against internal-network requests, with your key encrypted at rest.
• Security
  Evidence verification now checks the OpenTimestamps proof against Bitcoin and binds reports to the evidence chain head.
• Fixed
  The public evidence verifier is reachable without signing in.

A tamper-evident evidence trail for every client request — independently verifiable.

• New
  Client Deadline Evidence Ledger — a tamper-evident, hash-chained record of every request event (what you asked for, when it was opened, when each item arrived, and the verdict).
• New
  Evidence is anchored to the Bitcoin blockchain (OpenTimestamps) so the record can be proven to have existed at a point in time.
• New
  Public, independent verifier at /verify — anyone can confirm an exported evidence bundle is intact and Bitcoin-anchored, with a QR code on the printable report for a one-scan check.
• Security
  Verification is independent of the firm; the evidence ledger and audit log are append-only.
• Fixed
  Hardened how client magic links are issued and expire.

Premium polish across the app, scalable lists, and fully customizable notifications.

• Improved
  Redesigned sign-in, sign-up, and password-reset with a premium split-screen layout.
• Improved
  Refreshed dashboard with a personal greeting, quick actions, and richer at-a-glance metrics.
• Improved
  New header account card (avatar, name, role) and a cleaner sidebar that shows your firm’s branding.
• Improved
  Clients, Requests, and the Review queue now have search, filters, and pagination — built to stay fast with large numbers of records.
• Improved
  Faster, smoother navigation between pages.
• Improved
  Faster-loading, lighter landing-page hero.
• New
  Settings split into Settings, Profile, and Branding — with a custom firm logo and portal accent colour (owner/admin only).
• New
  Fully customizable email notifications: choose exactly which emails go to your clients and to your team.
• New
  Password-strength meter and image upload size limits on profile and branding uploads.
• Security
  Optional hCaptcha protection on sign-in, sign-up, and password reset.
• Fixed
  Profile photos and firm branding now display correctly.
• Fixed
  A single upload no longer sends one email per file — clients get one receipt per request.
• Fixed
  Team management is now reachable directly from the sidebar.
• Fixed
  The “Forgot password?” link now opens the reset page instead of bouncing back to sign-in.

App-wide redesign plus management, exports, and in-product bug reporting.

• Improved
  Premium redesign across the whole app and marketing site.
• New
  Profile, firm, and staff management, with billing-aware roles.
• New
  Firm branding — upload a logo and set an accent colour — plus personal avatars.
• New
  Password reset (“Forgot password”) flow.
• New
  Data exports for clients, requests, and the audit log.
• New
  FAQ page and an Enterprise plan tier.
• New
  Changelog page and an in-product “Report a bug” button with automatic page context.
• New
  Trial-ending reminder emails to the firm owner.
• Fixed
  Two-factor sign-in no longer hangs or wipes saved recovery codes on re-login.
• Fixed
  Sign-out works reliably, and the app degrades gracefully instead of showing a blank screen on errors.

A new premium look and a faster app.

• Improved
  Brand-new slate + emerald design system and a fast, server-rendered landing page.
• Improved
  Snappier app performance from cached sessions and fewer database round-trips.

Billing, trials, and published trust evidence.

• New
  14-day free trial — no credit card required — with plans and clear feature limits.
• New
  Subscriptions via Paddle: checkout, self-serve management, and automatic syncing.
• New
  Self-service two-factor recovery codes and security-alert emails for sensitive events.
• Security
  Published a Trust page, security.txt, and audit-log export, backed by automated security checks in our pipeline.
• Security
  Hardened database access controls.

Security and pre-pilot hardening.

• Security
  Malware scanning and quarantine of uploaded files before they can be reviewed or downloaded (fail-closed).
• New
  Configurable data retention with automatic deletion, plus permanent delete on request.
• New
  Copy-link sharing and client upload-receipt emails.
• Fixed
  Automated reminders now run reliably on schedule.

Initial release — secure document collection for firms.

• New
  Client document requests with reusable templates and an item checklist.
• New
  Secure client upload portal with short-lived signed links — no client account needed.
• New
  Review queue: approve or reject each submission with a reason shown to the client.
• New
  Automatic reminders for outstanding items, with pause/resume.
• New
  Dashboard with request health and one-click ZIP export of completed packages.
• New
  Team management with roles and invitations.
• Security
  Mandatory two-factor authentication for staff.
• Security
  Database-level tenant isolation (row-level security) so firms never see each other’s data.