Changelog

What shipped, when.

Honest dates. No retroactive backfilling. Subscribe via the blog feed for major releases.

2026-05-02shipped

Labor & Employment forms · Document diff · Bulk import UI

Added 35 Labor Commission forms: federal DOL/EEOC/NLRB/OSHA + 25 state Labor Commission wage-claim and discrimination forms.
New /for-firms/labor-employment landing page with state-by-state filter chips.
In-app document version diff: word-level redline between any two regenerated versions.
Bulk import UI at /firm/import — paste/upload CSV from Clio / MyCase / PracticePanther.
Resend invite button on /firm/team for queued or failed seat invitations.
Public REST API expanded: time-entries, documents, document download.
Receipt PDFs auto-issued for every Stripe payment, surfaced on /firm/billing.
Time entry panel on each matter with one-click "push to Clio now".

2026-05-02security

Inbound email webhook: default-deny when secret missing; full-UUID matter token (no more prefix matching).
Receipt download enforces ownership (was IDOR-able).
API auth: empty scopes no longer grants wildcard access.
Cron routes (4) default-deny when CRON_SECRET unset.
firm/api-keys GET + DELETE now enforce firm_admin role for the key's org.
Receipt issuer UUID-validates path segments before storage upload.

2026-05-02fix

Integration statuses corrected: DocuSign / LawPay / Tyler now "beta" (routes exist), Clio sync clarified as push-only with inbound webhooks pending.
/for-firms/growth: removed unbacked claims (custom workflows, QBR call); replaced with the real public REST API + generic CSV import.
vs-MyCase compare table: client portal + time tracking columns now reflect what we actually ship.

2026-05-02fix

The "How it works" section used a 300vh sticky horizontal carousel that read as a freeze on Windows desktops with mouse wheels.
Replaced with a normal vertical layout that uses in-view reveals — same visual rhythm, no scroll lock.

2026-05-01shipped