v4.3.17
2026-11-03
Fair use limits
- Where your plan includes a set number of staff logins, Users & Roles shows how many are in use once 80% are taken. When all are in use, a new staff login asks you to switch one off or ask your provider for more. Customer and portal logins are never counted, and nobody is ever switched off.
- Where your plan limits imports, one import file can carry up to 5,000 rows. A bigger file is refused before anything is imported, with a note to split it.
- Where your plan limits photo size, uploaded photos are saved at up to 1600 pixels on the longest side, turned the right way up, so pages load faster and use less storage. Smaller photos are kept exactly as sent.
v4.3.16
2026-10-14
Users screen and sign-in limits
- Adding or editing a user checks every field: an email another login already uses, or a name or phone that is too long, now gets a clear message instead of an error page.
v4.3.15
2026-10-13
Forms handle unusual input quietly
- Every form and filter reads each field as plain text, so an unusual value sent to a form no longer records a warning. Ordinary entries are saved exactly as before.
v4.3.14
2026-10-13
Settings are read in full during set-up
- While a new copy is being set up or its sample data rebuilt, the app now reads every saved setting. Before this update, saving one setting during set-up could make the others (such as message templates and number prefixes) read as blank until the next page load.
v4.3.13
2026-10-13
Search finds exactly what you type
- Every search box treats % and _ as ordinary characters, so a search finds exactly what you typed instead of acting as a wildcard.
- Search handles an unusual web address quietly instead of recording a warning.
v4.3.12
2026-10-12
Logo and favicon uploads use the shared image check
- Uploading a logo or favicon in Settings now goes through the same image check as the rest of the app: the file type is read from the file itself, the size is limited, and an SVG with scripting is refused.
- Nothing changes in how you upload.
v4.3.11
2026-10-12
Security fixes
- Limits on public lookups now apply per visitor, whatever code they try.
- The data API is for staff accounts only.
- The demo cannot change the demo sign-in or staff records.
v4.3.10
2026-10-12
Lists, search and forms handle unusual input
- A list opened with a very large page number now shows its last page instead of an error.
- Search boxes treat % and _ as ordinary characters, so a search finds exactly what you typed.
- When a form is sent back to correct a mistake, what you typed is shown on that form only. Before this update it could also fill in the next form you opened, even for a different record.
v4.3.9
2026-10-12
Security fixes
- Signing out now clears data the app saved on the device for offline use.
- Outgoing email checks the mail server address and cleans every header.
- Access checks for each role were tightened.
v4.3.8
2026-10-12
Security fixes
- Changing or resetting a password signs that account out on every other device.
- An account is locked for 15 minutes after 10 wrong passwords, whichever device they come from.
v4.3.7
2026-10-12
Security fixes
- A user you switch off is signed out at once, everywhere, instead of when their session runs out.
v4.3.6
2026-10-12
Sign-in sessions stay with this app
- A sign-in now only works on the app it was made on, and is cleared if it turns up anywhere else.
- Everyone is asked to sign in once more after this update.
v4.3.5
2026-10-11
A guided tour of the menu
- The first time you open the app, a short tour walks through the menu one item at a time: what each place is for, with Next, Back and Skip.
- Take the tour again from the foot of the menu. On a phone the tour opens the menu for you.
v4.3.4
2026-10-10
Clearer storage notices
- The storage notice in the admin now says how much is used of how much, for example "430 MB of 512 MB".
- The notice at 80% can be hidden for a day with "Hide". From 95% on it always shows.
- When an upload is refused because storage is full, the message names your provider and offers "Buy more storage" when they sell it.
v4.3.3
2026-10-09
Security hardening
- Browsers are now told to always open this app over a secure connection.
- Pictures in SVG format are shown safely: any script hidden inside one can no longer run.
v4.3.2
2026-10-09
Security and reliability update
- Signing in now issues a fresh security token for the new session, so a token from before you signed in can no longer be used.
- This app now runs on the same up-to-date core as every other app, so security fixes reach it at the same time.
v4.3.1
2026-10-08
Buy more storage from the app
- When the app is close to its storage limit or full, the notice now has a "Buy more storage" button that takes you to your provider's store, if they sell extra storage.
- The "storage full" screen leads with the same button, so more space is one tap away.
v4.3.0
2026-10-08
A clearer dashboard: what needs you today, first
- The dashboard now greets you by name with today's date, and opens with up to four bold tiles for what needs action today. Tap any tile to open the list behind it.
- Amber is used only for things that are overdue or need attention, so they stand out.
- Today's work is shown as a simple list with initials, status and time, and the other totals sit in quieter cards below.
- The side menu shows a small count next to lists that have work waiting.
v4.2.0
2026-10-08
Storage limit notices
- The admin shows a notice when the app has used 80% and 95% of the storage your provider gave it.
- When storage is full, new uploads and imports in the admin pause until more space is added. Everything else keeps working, and your website and customer pages are never affected.
- If your provider uses a hard limit, 7 days after storage fills up the admin shows a "storage full" screen with their contact details and a way to request a full copy of your data. Report downloads keep working.
v4.1.2
2026-10-07
Payment confirmation refuses when the gateway is not set up
- A payment is now confirmed only when the payment gateway's secret key is set. If the key is missing or has been cleared, the confirmation is refused instead of being checked against an empty key, and the payment stays unpaid.
v4.1.1
2026-10-06
Deleting a user works again
- On a user's edit screen, the red delete button saved the form instead of deleting the user, and did not ask first. It now sits on its own row as Delete user, asks you to confirm, and deletes the user.
v4.1.0
2026-10-05
Report a bug and Request a feature, step by step
- Report a bug and Request a feature are now two separate guided forms, three short steps each.
- A bug report asks what happened, what you did just before and how much it affects you, and notes the screen you were on.
- Attach up to five screenshots: pick them, drag them in, or paste straight from the clipboard. Large images are shrunk for you.
- New help page: Bug reports & feature requests.
v4.0.1
2026-09-26
Empty optional fields no longer stop a save
- Saving a record with an optional date, time, number or choice left empty could fail with an error page. An empty value is now saved as blank or as the field's usual default, a value that is really needed is asked for on the form, and a date, time or number the system cannot store is sent back to the form with a clear message. Saving a record that repeats one that must be unique (the same code, time slot or login, for example) now says so on the form instead of failing.
v4.0.0
2026-09-11
Rebuilt around the website and the inbox
- THE PRODUCT IS NOW YOUR WEBSITE AND ITS INBOX. One scrolling homepage in the order the brief sets out — hero, the “what we do” ticker, twelve service cards, why us, contact — one page per service, and an admin panel where every callback request and enquiry lands. The back-office platform of earlier versions (engagements, permits, monitoring, carbon inventories, client portal) has been retired: it described a great deal and asked visitors for too much before they could reach a human.
- EVERY WORD ON THE SITE IS EDITABLE under Website → Site content, section by section: hero copy and buttons, the ticker phrases, section headings, the “why us” paragraph, contact details, footer, social links, the privacy notice and search wording. The twelve services — title, one-line description, summary, what we offer, key benefits, icon, photo, order, on/off — live under Website → Services; the four highlight points under Why-us points. Changes show on the website immediately.
- LEADS AND ENQUIRIES ARE TAGGED WITH THE SERVICE THEY CAME FROM. A visitor who writes from a service page, or picks a service in the contact form, arrives in the inbox with that service on the row, together with the page and the button that brought them and any campaign tags in the link they clicked. Filter either inbox by service, status or date; search by name, phone, email or company.
- CLICK ANY ROW FOR THE FULL RECORD in a dialog: contact details as tap-to-call and tap-to-email links, the message, the source, the device, status buttons (New → Contacted/Responded → Closed, each stamped with when), internal notes, and Delete. Delete is reserved for the administrator role; staff and managers can work a record but not erase it.
- EXPORT TO CSV from either inbox, honouring the current filter. Cells that a spreadsheet would read as a formula are neutralised, so a malicious “name” cannot run anything when the file is opened.
- GET EMAILED THE MOMENT SOMETHING ARRIVES (Settings → Inbox notifications) and, optionally, send the visitor an acknowledgement. Records can be kept forever or pruned automatically after a number of days you choose.
- BUILT FOR PHONES FIRST: a bottom tab bar with a raised Enquire button, a slide-in menu, forms that validate as you type and confirm in place, and animations that switch off for anyone who has asked their device to reduce motion. Ships with original artwork in the brand palette; upload your own hero and “why us” photographs under Site content → Images.
- PROTECTED BY DEFAULT: bot protection on both forms (a hidden trap field, a minimum fill time, an optional Cloudflare Turnstile challenge), a per-visitor submission limit, duplicate suppression, strict browser security headers on every page and a locked-down content policy on the public site, sign-in lockout after repeated failures, and a consent record for every submission.
v3.0.0
2026-09-08
Twelve services, no published prices
- The catalogue became the twelve practice areas the firm actually sells, one page each, with the firm’s own “what we offer” and “key benefits” lists.
- No price was published anywhere; every service took an enquiry that the practice quoted individually.
- The public site became an app shell with a persistent service rail on desktop and a bottom tab bar on phones.
v2.6.1
2026-09-07
Public report verification
- The public verify page checked issued reports as well as vault certificates, and said plainly when a report had been withdrawn or superseded.
v2.6.0
2026-09-07
Document downloads
- Every document download went through its own ownership-checked route with a domain-separated signature, closing a link crossover between two file stores.
v2.0.0
2026-08-30
Environmental consultancy back office
- Engagement workflow, permit register with renewal lead times, monitoring with chain of custody, GHG inventories with pinned factor sets, ESG reporting, client portal and empanelled-associate console.
v1.0.0
2026-06-20
- Initial release: service catalogue, enquiries, quotations and invoicing for an environmental consultancy.
