Changelog

What we shipped recently.

Most-recent first. Roadmap items at the bottom show what's coming next.

May 6, 2026
v2.4

Marketing site v2 + cron worker

  • New marketing site design with Mona Sans typography and brand-green palette
  • Three flagship animated diagrams: automation flow, traceability graph, multi-tenant CP topology
  • Cron worker (azora-cron PM2 process) for scheduled jobs: snapshots, sprint auto-start, automation engine
  • Automation engine in dry-run mode (Phase 1.C of rollout)
  • TOTP secrets now AES-256-GCM encrypted at rest with HKDF key derivation
May 5, 2026
v2.3.1

Security audit follow-ups

  • Closed 11 findings (2 critical, 5 high, 3 medium, 1 low)
  • Username enumeration response normalization
  • Rate limiting via X-Forwarded-For with TRUSTED_PROXY_DEPTH
  • Read-audit logging on tenant-scoped reads
  • Defense-in-depth on JWT revocation watermark
  • Deploy script syncs scripts/ from prefixed path (was missing migration scripts)
May 4, 2026
v2.3

Automation engine + History tab

  • Automation rule engine: trigger → optional condition → action (every 5 min)
  • 5 action types: update_status, update_priority, reassign, add_label, notify (in-app + email stub)
  • QC gate respected by engine (won't auto-Done past Under Review)
  • History tab in Automation panel surfaces engine runs
  • Per-rule action cap (100/tick) to prevent runaway rules
April 23, 2026
v2.2

Project_id backfill (PM-6.4)

  • Added project_id text column to tasks + bugs (currently nullable, NOT NULL after May 7 soak)
  • Verify-script (verify-project-id-backfill.mjs) for safe NOT NULL flip
  • Per-project P&L roll-up in Reports panel
  • Fixed Gantt drag-to-resize regression on long bars
April 10, 2026
v2.1

QMS module GA

  • CAPA, NCR, Change Control, Audits, Risk Register all in production
  • Traceability matrix (4-column graph) with chain highlighting
  • 21 CFR Part 11 e-signatures on change control
  • Document control with versioning + approval workflow
  • Training records with completion tracking
March 15, 2026
v2.0

Multi-tenant Control Plane

  • Multi-tenant architecture: account_id NOT NULL on every customer-data table
  • Vendor Control Plane (CP) for provisioning + billing + suspension
  • Per-tenant isolation enforced at query level via tenantDb() helper
  • ON DELETE CASCADE for full data purge on tenant cancellation
  • JWT revocation watermark per user (jwt_issued_at)

What's coming next

  • Q3 2026: MDSAP cycle tracker (3-year audit cycle for multi-country medical device)
  • Q3 2026: EU MDR support deepening (currently limited)
  • Q3 2026: Lottie animations on flagship diagrams
  • Q3 2026: SSO / SAML / SCIM (Enterprise tier)
  • Q4 2026: Self-host installer for VPS deployments
  • Q4 2026: Mobile app (React Native, read-only first)
  • Q4 2026: Public API GA (currently beta)
Try it

Get the latest version free for 14 days.

Request access