Changelog

2026

5 August 2026 — continued

5 Aug 2026SecuritySecurity

Form submissions with an empty security token are rejected

Every form in the workspace carries a token that proves the submission came from a page we served, and that token is checked against one held for your session. Both sides must now be present before the comparison happens, so a request with no token is refused. The only case this changes is a request that carries no token and has no stored token to compare against; normal submissions, including ones made after a session has lapsed, behave exactly as before.

5 Aug 2026FixedSecurity

Remember me now lasts the full 30 days

Choosing "Remember me" at login was meant to keep you signed in for 30 days, but the session behind it still expired after an hour without activity. The browser kept the sign-in for a month while the server had already let it go, so you were asked to log in again far sooner than expected. The chosen length is now recorded with the login itself and is respected for the full 30 days. Sessions that are already open are unaffected and keep the length they were created with.

5 Aug 2026AddedSecurity

A warning before an idle session signs you out

A normal login lasts an hour of inactivity, and until now it ended without notice, which looked like being signed out at random. For the last two minutes you now get a countdown with two choices: stay signed in, or log out. If the countdown runs out, the login page explains that the session timed out rather than leaving you guessing. Moving the mouse is not enough on its own to keep a session alive, and that is deliberate: the page confirms with the server only while you are genuinely working, so an unlocked machine left alone still times out. Sessions started with "Remember me" are unaffected and get no countdown.

5 Aug 2026AddedSettingsGroups

Settings • give a whole group access to a module

The access list on a module used to be one person at a time. Searching now returns groups and subgroups next to people, and choosing one grants access to every eligible member in a single action. Typing the name of a parent group also brings up its subgroups, and a top level group covers everyone beneath it. Before anything is saved, a confirmation tells you how many people will be granted access, how many already have it, and how many were skipped and why. Access is given to the people who are in the group at that moment, so someone who joins the group later does not inherit it automatically. The selection control itself has been rebuilt on the same picker used elsewhere in the workspace, so it behaves and looks the same as assigning someone to a shift.

29 Jul 2026UpdatedSchedulingStatistics

Schedule statistics • the understaffed marker is explained

The staffing chart marks any period covered below 80 per cent with a red strip along the baseline, which is usually the most useful thing on the chart, and it was the only mark with no entry in the legend. Understaffed is now listed in the legend on the dashboard widget, on the Statistics page and in the PDF export. The PDF legend was in English regardless of your language and is now translated like the rest of the document, and the red is the same shade on screen and on paper.

29 Jul 2026FixedSchedulingStatistics

Schedule statistics • the exported PDF fits the page

Tables in the Statistics PDF were laid out in columns narrower than their contents, so numbers were drawn on top of each other, location names were cut in the middle of a word, and headings ran together. The export is now landscape, columns are sized to what they actually hold, names break at spaces only, and the header row repeats when a table runs onto a second page. The chart is larger to match the wider page.

28 Jul 2026UpdatedLegal

Legal pages have their own address in each language

The privacy policy, terms and the other legal pages served all four languages from a single address and picked one based on your current session. Each language now has its own address: /privacy is English and /privacy/no is Norwegian, with Swedish and Danish alongside them. A given address always returns the same language, so a link you send to a colleague or a customer opens in the language you meant, and search engines can find all four. The consent line under public forms and signup links now points to the reader's own language as well.

27 Jul 2026FixedClockwork

Clockwork • opening the live view from a bookmark shows the full page

The Clockwork live view refreshes itself in the background, and the address it uses for that refresh could be bookmarked or shared by accident. Opening it directly returned the bare contents without the page around it. Those links now take you to the full Clockwork page, keeping the tab, search and page you were on. The background refresh itself is unchanged.

25 Jul 2026FixedPayrollScheduling

Payroll and reports • periods now follow your workspace calendar

Reports and exports worked out where a day or a month starts and ends in UTC, while showing every time in your workspace timezone. On a workspace one or two hours ahead of UTC that put the wrong sessions in the report: a July export included the last hours of 31 July that are already August locally, and left out the matching hours at the start of the month. Totals hid it, because a session added at one edge and a session dropped at the other can produce the same number of hours while the list of sessions is wrong. Payroll exports, the monthly session report in PDF and CSV, the Sessions tab on a user, the group and project session exports, and the group sessions view now all resolve the period in your workspace timezone. Each edge is worked out separately, so months where the clocks change are exact at both ends.

24 Jul 2026UpdatedClockworkScheduling

Clockwork • one rule for matching a clock-in to a scheduled shift

Clocking in without naming a shift now follows the same rule everywhere. Previously each entry point had its own: the PIN terminal looked one hour either side of now and picked the closest shift, while the manual clock-in form in the workspace looked two hours either side and picked the earliest. Two people clocking in at the same moment could be attached to different shifts depending on where they clocked in from, and when two shifts were equally close the result was not stable. From now on every automatic match uses one window, two hours before to two hours after, takes the earliest shift that starts inside it, and resolves a tie the same way every time. QR clock-in and a shift picked explicitly by a manager are unchanged, since those name the shift directly rather than searching for one.

23 Jul 2026FixedPower

Power • CSV export follows the period you selected

Exporting power analytics to CSV ignored the period on screen and produced today's data instead. Every selection other than today was affected: the 24 hour chip exported today rather than the rolling 24 hours, the phase chip exported today rather than the project phase, and a manually entered range exported today rather than the range you chose. The file looked valid, so there was nothing to signal the mistake. Both the CSV and the PDF export now cover exactly the window shown in the toolbar, including ranges opened from a shared link.

22 Jul 2026FixedPayroll

Payroll • sessions are never silently left out of an export

If a worked session belongs to someone whose membership can no longer be resolved, for example a person who was removed or never fully joined, that session used to disappear quietly from a payroll export. The export preview now stops and names the affected workers, showing how many sessions and hours are involved, and refuses to generate a file until the memberships are corrected, so a payroll bundle can never be produced with hours missing. Group session reports keep those sessions in both the rows and the totals and mark them clearly instead of dropping them, in the workspace, in CSV and PDF exports, and in the emailed report.

22 Jul 2026UpdatedForms

Forms • forms with submissions are archived instead of deleted

A form that has received submissions can no longer be deleted, because deleting it would also destroy every registration submitted through it. Those forms now offer Archive instead. An archived form closes to the public and leaves the active lists, while its submissions stay readable and exportable, and you can reopen it at any time from the Active setting in the edit dialog. Forms with no submissions can still be deleted as before.

22 Jul 2026AddedScheduling

Scheduling • move an exported schedule to new dates

A shift export can now be shifted in time as it is generated, so last season becomes the starting point for the next one. The default moves the whole schedule to the same week and weekday next year. If you need something else, the adjustment panel lets you set it three ways: type the new date an example shift should land on, or enter the number of days to move, and the other fields follow. A live note tells you whether your chosen shift keeps weekdays intact or moves them, and the preview shows exactly which dates the first and last shift will land on before you download.

22 Jul 2026AddedScheduling

Scheduling • decide what happens to unknown roles when importing shifts

When a shift import contains a role that is not configured in your workspace, you now decide what happens to it before anything is created. Each unknown role is listed once with the number of shifts behind it, and you can map it to an existing role, create it as a new role, import those shifts as drafts keeping the original text, or leave them out. The import cannot be confirmed while an unknown role is still undecided, and a running summary shows how many shifts will be configured, drafted, or excluded. Shifts that still carry an unresolved role stay drafts: they are marked Needs role in the schedule, cannot be published, and cannot be assigned until a role is chosen. A role that is still used by shifts can no longer be deleted.

21 Jul 2026AddedSchedulingPayroll

Export shifts and sessions ready for re-import

Export shifts and Export sessions are now available under Settings then Export. Both files use exactly the same columns the matching importer expects, so you can export a schedule or a set of sessions, edit it in a spreadsheet, and import it straight back with no reformatting. Shift export is scoped to a project and can be narrowed by period, role, and location, where a parent location includes everything beneath it. The preview tells you how many rows and how many staffing slots the file will contain before you download it.

19 Jul 2026Added

Printable QR posters for your venue

You can now create printable QR posters under Settings then Print materials. Each poster carries a large QR code that takes staff or the public straight to an action with no login, such as clocking in and out, reporting an incident, or submitting a risk assessment. Choose one, two, or three actions, pick the language, and download a print ready A4 PDF. Posters are laid out to stay on a single page even when the workspace name is long.

18 Jul 2026AddedRisk

Risk assessments • permanent public intake link

Public risk assessment intake now lives at a permanent address for your workspace, so the QR poster and the link you share keep working without being tied to a single generated code. You can open or close public intake directly from the Risk assessments page, independently of the shared link. Closing intake no longer removes the shared link, and rotating the shared link no longer closes intake. Accounts that already had an active public form stay open; every other account starts closed until you turn intake on.

12 Jul 2026Updated

Improved legal terms for optional third-party integrations

Added clearer Terms of Service and Privacy Policy language explaining how optional third-party integrations are handled, including customer-provided integration credentials and the availability of external services.

12 Jul 2026Updated

Improved Swedish and Danish language support

Swedish and Danish now provide complete coverage across the workspace, matching English and Norwegian. This includes the risk assessment confirmation flow, file upload messages, and many other areas that previously displayed untranslated text.

9 Jul 2026UpdatedVehicles

Vehicles • scan the QR pass at the gate, or search by name

The gate scanner now reads the vehicle QR pass instead of reading the number plate through the camera. It uses the same square scanning frame as the clock in scanner, so the experience is consistent across the platform. Point the camera at the vehicle QR pass and the access decision appears, together with the driver, the required control, the category colour, and the access and parking result. A permanent search by registration, driver, or company sits below the scanner for when a pass is not available. The green and red access verdict is unchanged.

9 Jul 2026AddedVehicles

Vehicles • QR pass for every vehicle

Every registered vehicle now has its own QR pass. Scanning the pass, or opening its link, shows the vehicle and its current access and parking status for the active project, with no login required. The pass is a single long-lived code per vehicle and is revoked automatically when the vehicle is archived. This is the foundation for scanning vehicles at the gate.

8 Jul 2026AddedVehicles

Vehicles • set a default accreditation type for submitted vehicles

On a public vehicle request link and on a supplier vehicle request configuration you can now set a default vehicle accreditation type and a default control requirement under Vehicle access. Vehicles submitted through the request inherit these defaults, so submissions are classified consistently without extra work. The person submitting still chooses only the body style, never the operational category, and a manager can change the category per vehicle later.

8 Jul 2026UpdatedVehicles

Vehicles • gate check and scanner show driver and required control

The gate check and the scanner result now show the driver and the control the operator needs to perform, for example Check driver or Check cargo, alongside the vehicle category colour. The effective control is the vehicle override when set, otherwise the accreditation type default. This means an operator can decide at the gate without opening the vehicle record. The green and red access verdict is unchanged.

8 Jul 2026AddedVehicles

Vehicles • operational categories with badge colours and control

Vehicles can now be classified by an operational category, the Vehicle Accreditation Type, separate from the physical body style (Car, Van, Truck). Categories such as Internal, Supplier, Artist, VIP, Catering, Security, Media and Contractor come ready to use, and you can recolour or disable any of them for your account or add your own under Vehicles then Accreditation types. Each category carries a badge colour and a default gate control requirement. The colour shows as a small indicator on vehicle cards, the gate check and the scanner result, and it never replaces the green and red access decision. A vehicle can override its category control requirement, and internally owned vehicles such as production or logistics no longer need a supplier or a person set.