Softbooq
A record of new features, improvements, and fixes shipped to Softbooq.
A customer signed in to their account with you can now pay an invoice by card, if you take card payments online, download it as a PDF or as an e-invoice file, and see their credit notes, returns, payment plans and payment reminders. They can also order again, keep their delivery addresses and follow their parcels. The old client portal is part of this account now, and links to the portal take people there.
A customer can open a support request from their account, reply to one, and rate it once it is resolved. It arrives in your helpdesk like any other ticket, and a reply to a resolved request reopens it. While they write, matching articles from your public help centre are suggested.
Customers can save a card or set up a direct debit in their account, after confirming an emailed code. On the invoice you then press "Collect from saved payment method" and the amount still owed is charged. Nothing is taken automatically. If a debit fails or comes back, the invoice reopens and both you and the customer are told.
When you link a bank payment to one invoice in the reconciliation Workbench and the amounts differ, you say what the difference is. Paid too much: the invoice is paid and the rest is held as the customer's credit. Paid too little: leave it open as a part payment, or record it as a bank fee, tax withheld by the customer, a retention, an early-payment discount (offered only when the invoice's terms allow it) or a write-off. A write-off is offered only within the limit you set in Finance settings, Getting paid, as an amount and a percentage of the invoice; the stricter one decides, and it is off until you set both.
Turn it on in Finance settings, Getting paid. When a bank payment carries the invoice's RF reference and pays exactly what the invoice owes, in its currency, it is recorded on the invoice without waiting for you, after each bank sync or import and once a night. A payment is never recorded this way on a name, an IBAN or an amount alone, and never when it pays part of an invoice or more than it. Off by default, and every payment recorded this way is noted in the audit log with the rule that recorded it.
Cash tendered, the card part, a line's price or discount, the opening float, cash in and out, the counted cash and a custom tip now accept amounts the way you write them. In a German workspace a cashier types 12,50 and the register reads twelve euros fifty. Before, the comma was dropped and 12,50 became 1250. The empty fields show 0,00 or 0.00 to match your format.
Bank reconciliation now reads CSV exports the way banks write them: separated by semicolons, commas or tabs, with account details above the column names, amounts like 1.234,56 and dates like 01.10.2026. Columns are found by their names, in German, English, French or Spanish, and the payer's name and IBAN are picked up for matching.
Screens across the app now show dates and amounts in your workspace's number format, for everyone in it, instead of each person's browser default or language. A German business sees 01.10.2026 and 1.500,00, matching its invoices. Payslips, reports and expense exports follow it too, and so do the register, BI, Softbooq AI, Files, the workspace pages in Accounts and your shop. If your workspace never chose a format, it now uses your country's.
Set up a list with the search, filters, sort, period and columns you want, and save it as a view under a name. Keep it to yourself or share it with the workspace, and make one your default so the list opens that way. Available on invoices, sales, orders, products, purchase orders, customers, tickets and employees.
Invoices, bills, deals, products, tickets and most other records now have a comments section. Type @ to mention a colleague who can see that record, and they are told. Follow a record to hear about new comments on it; commenting or being mentioned follows it for you. Softbooq AI can find what was said in a comment, but only for people who can open the record.
Turn on tips in Sales settings, choose three suggested percentages, and decide whether the customer taps their choice or the cashier types it. Tips are kept apart from the sale, so your revenue and VAT do not change, and each tip is owed to the cashier who rang the sale. Sales > Registers shows what each person is owed, and someone with finance rights can record a payout.
Finance has a Books Health tab: one sentence on the state of your books, then a numbered list of fixes in the order an accountant would do them. Each step lists the documents behind it, linked so you can open them, and you can fix a whole selection at once. Every night it checks again and tells the people with finance rights about anything new. The profit and loss, balance sheet and trial balance are now worked out by the database, so they open quickly however much history you have.
Products can carry a batch number and expiry date when you receive them. Every sale takes the batch that expires soonest and is still good, and you can write off an expired batch. At the register, expired stock is either blocked until a manager approves it or needs the cashier to confirm, as you choose. "Who bought it" on any batch lists the customers and sales it went to, for a recall. WooCommerce orders now lower your stock in Softbooq too.
Settings > Business > Tax & VAT now has "Sending e-invoices". Where the law sets the route, as in Italy or Poland, it stays fixed. Elsewhere you can send over Peppol through your own Storecove account, and the file sent is exactly the one you can download from the invoice.
During a tax audit, a dispute or a lawsuit, an administrator can place a legal hold in Settings > Legal & Compliance, with a reason. While it is on, nothing in the workspace is deleted or anonymised on a schedule, and a customer's erasure request waits until the hold is lifted. Bank lines are now kept for the legal keeping period and anonymised after it.
An entry in the audit log has "Open record". The sources under a Softbooq AI answer open the record they came from. In BI, a row behind a figure opens its invoice, bill, expense, product or deal. Each one checks you are allowed to see it first.
Every module's settings page now uses the same layout. On a wide screen, an "On this tab" panel beside the settings lists each section with its current setting in plain words, and points out anything that needs your attention. Click a line to jump to it.
After a page reload, invoices, quotes, purchase orders, credit notes, receipts and payslips could show a grey "LOGO" box or no logo at all. Every document now fetches your logo when it is drawn, so it always appears.
Tapping a notification about an overdue invoice, a bill waiting for you or a ticket now opens that invoice, bill or ticket, on your computer and on your phone, instead of the list it sits in. Deals, tickets, payroll runs, credit notes, candidates and production runs open from a link too, where before the link stopped at the right screen and left you to find the record yourself.
A supplier bill now goes to the people its approval chain names, such as the cost centre owner, and they approve it without needing to be an administrator. Once everyone has approved, someone with finance rights books it into the accounts. If nobody in the chain can do that, a finance review step is added for you, so an approved bill always ends up booked.
People who buy from your shop can sign in with an emailed code and see their orders, invoices, bookings and the documents you choose to share with them. You can invite a customer from their record, and a customer can ask for their data to be deleted, which reaches you as a request to approve.
When a colleague adds a task, logs a call or updates a contact, it now appears on your screen straight away, without a reload. Deliveries update the same way.
Adding or editing an employee no longer needs an administrator. Anyone whose role includes managing HR can do it. Salaries stay visible only to the people allowed to see pay.
Pick a default team in IT settings, and any ticket that matches none of your routing rules goes to that team instead of waiting with nobody. Tickets raised by staff outside IT are routed and their technician is told, on the phone as on the desk.
Downloading an employee's data pack or a full copy of your workspace now asks you to confirm who you are first, as deleting personal data already did. If someone else has your laptop open, they cannot take everyone's personal data with one click.
A salary used to be stored without saying what period it covered, and payroll assumed monthly, so a yearly salary could have been paid as a monthly one. Every salary now carries its period. Worth a quick look at your employees' pay to confirm each one is right.
Reloading could briefly show "Set up your workspace" to someone who already had one, while their workspaces were still loading. It now waits for them, so you land where you were.
Column headings across the product now sort, and every sortable column can be filtered from the same menu rather than only the one search box at the top. You can hide the columns you do not use, and a table can be worked entirely from the keyboard. This came from moving 153 lists onto one shared table, so a list behaves the same way wherever you meet it instead of depending on when its screen happened to be built.
Your clients can sign in at your own address and see the invoices you issued them, the projects you are running for them and their support tickets. The sign-in page carries your name, your logo and your colour rather than ours. They can raise a support ticket from it too, and it arrives in your helpdesk like any other. Signing in is passwordless: an emailed code, or the Google or Microsoft account your client already has.
Ask how many people are in a department, what tickets are open, what has run low, what is in the pipeline or how a project is tracking, and you get an answer from your own figures instead of a refusal. Every number it gives you came from a tool that actually returned it, so anything it could not source is said to be an estimate rather than presented as your data.
Revenue had three different definitions in different corners of the product, and gross profit subtracted costs from sales that its own revenue figure had excluded, so the margin could not be reconciled against either number printed beside it. There is now one definition, and the phone and the desktop read it from the same place rather than each working it out separately.
Eight lists had rows that highlighted when you hovered over them and then did nothing at all. They open the record now. A line on a debtors statement opens the document it came from, so you can see what was actually sold, and on a phone, tapping a customer opens that customer.
A status could mean different colours on different screens: Refunded was green in one place, red in another and purple in a third, which makes a colour worth nothing at a glance. Every status now takes its colour from one map, so the same word looks the same wherever it appears.
Books health would find 24 unposted invoices and then ask you to confirm the repair 24 separate times, which is a repair nobody performs. A problem affecting many documents is now put right in a single action, and you see the full list of what will change before you confirm it.
Drawing a single sparkline used to read every invoice in the workspace eight times over, in the browser. Those figures are now worked out by the database and fetched once, so the dashboard opens at the same speed on a workspace with years of history as on a new one.
When the calendar loads other people's bookings to show you what time is taken, it now asks only for the times. A booking somebody marked private appears as a busy block with no title, customer or notes attached, so you can schedule around it without being shown what it is.
A sale of a service posts to the revenue account you nominate for services rather than to the one used for goods, and it applies from a date you choose, so changing the treatment does not quietly rewrite what you have already filed.
The monthly job now posts operating leases as an operating lease should be posted, rather than in the shape used for a finance lease. If you hold both kinds, the two no longer land in the ledger looking alike.
A customer on a business's public site can enter their email address, receive a code, and sign in to an account page showing the invoices they were issued and the orders they placed. No password to choose or forget. They see only their own records, the code expires in minutes, and revoking someone's access takes effect on their very next click rather than whenever their session happens to end. A business can switch customer sign-in off entirely.
MFA enforcement, the inactivity lock, domain-restricted joining and SSO now open on a phone, and they sit in User Management alongside the rest of your access rules. Changing the policy asks you to confirm it is you first, on a phone exactly as on a desktop, so the control that protects every other control is not weaker on the smaller screen.
Your account lists the devices and apps currently signed in, where each was last used, and lets you end any one of them or every other one at once. Administrators can additionally see the sessions used in their own workspace. Ending a session stops it renewing straight away; a page already open keeps working until its current token expires, which is minutes rather than days.
Sending a quote requires an expiry date, and the date now decides what the customer can do: a quote past it can no longer be accepted. Previously the date was printed on the page and governed nothing, so a quote stayed acceptable indefinitely. Accepting is also once only, so a forwarded link cannot accept the same quote twice.
Knowledge-base articles marked Public are readable by anyone on your public site, with no account needed, so you can point customers at your own instructions instead of attaching them to every email. Articles that are not Public stay internal, and both are findable from search inside the app.
Invoices, contracts, quotes, sales, expenses, leave requests, employees, projects, knowledge-base articles, sales returns and RFQs all carry Copy Link, and the link opens that exact record rather than the module it sits in. A shared link names the workspace it belongs to, so somebody who works in two is not silently taken to the wrong one.
The per-notification opt-out can be set, and it is read when the notification fires. Until now the preference existed on the screen and nothing consulted it.
A reporting app that answers questions about your own figures. Nine data sets to start from - ledger, sales, purchases, expenses, stock, movements, cash, projects and your deal pipeline - and every figure drills through to the documents behind it, so a total can be taken apart rather than taken on trust. Build a board, print it, share it, or have it emailed on a schedule. BI shows only what a role already permits, so it cannot answer something the ERP would refuse. Beyond the nine, a catalogue opens every table your workspace owns.
The assistant does not only reply, it rearranges the screen: ask it to group by a different field and the report regroups, ask for the top ten and the limit changes. It works from the rows already in front of you, so it explains a figure rather than inventing one, and it says plainly when something cannot be done instead of pretending it has done it.
A customer who has lost their confirmation email can enter their address in your shop and be sent a link to every order they have placed with you. No account and no password: the link is short-lived and goes only to the address that placed the orders. The form never reveals whether an address has ordered before, so it cannot be used to discover who buys from you.
A role that cannot open Finance can no longer be answered finance records by the API or an integration either. Reading the ledger, bank records, invoices, bills and expenses requires the same View permission the role editor already shows, checked by the database rather than by the screen - while what belongs to a person stays theirs: their own expense claims, an invoice they raised, a bill they approve.
Raise a change request against a project, and approving it writes the new baseline in the same transaction, so the approved plan and the record of who approved it cannot drift apart. Variance is then measured against the plan that was actually approved rather than the first estimate, which is the difference between a project that legitimately grew and one that overran.
Projects carry checkpoints with their own dates. A milestone that passes without being met surfaces while there is still time to do something about it, instead of the slip only becoming visible at the point somebody moves the end date, which is usually too late to be a decision.
Record risks against a project with an owner, a likelihood and an impact, and see when each was last reviewed. A register nobody has opened in months says so on its face rather than presenting stale entries as current assessment, which is the failure mode of every risk log kept in a spreadsheet.
A project shows where the people on it are committed to other work over the same dates. The conflict is visible while the assignment is still being made, rather than being discovered later by the person who turns out to have been promised to two places at once.
One screen showing, for every project at once, what was budgeted, what has been spent, and what is already committed but not yet invoiced. Commitment is the figure that is normally invisible until it arrives as a bill, by which point it is no longer a number anyone can act on.
Send an approved template to a customer, chosen from a list rather than typed from memory, and see what actually became of it - delivered, read, or failed and for what reason. Replies arrive back in the conversation. Consent is checked before the message goes rather than after Meta objects, and opt-in is recorded at the moment it is given, which is the evidence that matters if the account is ever questioned.
Softbooq, the register, Files, AI and Accounts each install to a home screen or a desktop from a button, instead of depending on someone knowing their browser can do it. An installed app opens on its own launch screen rather than a blank white one, which is the difference between an app and a bookmark.
Define job grades with pay bands and see where a person sits within their band against its midpoint, so “is this person paid correctly” has an answer rather than an opinion. Changing a salary now keeps the one before it: pay history is a record, where it used to be a field that quietly overwrote itself.
Saving a record updates the screens that show it. Dozens of views previously held the old figure until you navigated away and returned, so a save that had worked perfectly looked like one that had not - and the natural response to that is to do it again.
Payment terms now cover the 7- and 14-day early-settlement windows that are ordinary in Germany and Austria, alongside the 10- and 15-day ones. They are not labels: they compute the due date and the discount deadline, and a payment run shows the discount while it can still be taken.
The public portal, storefront and shared documents use your logo and your brand colour rather than ours, so a customer following a link from your invoice arrives somewhere that looks like you.
A stock count can be entered from a phone in front of the shelf instead of transcribed later, and reporting a loss opens the form it always should have. A manager can approve their team's hours on a phone, not only their leave, so the approval that holds up payroll does not wait for someone to reach a desk.
The register now prints to a receipt printer over ESC/POS and sends the pulse that opens the cash drawer, so a counter with real hardware no longer needs a workaround. Where there is no printer, receipts still go out by native share sheet or a public link.
Money that is not in a bank is now somewhere the books know about. A safe or a drawer holds a balance, and it is verified by counting it rather than by trusting a running total: the count is what the books take as true, and the difference is recorded rather than absorbed. Banking the day's takings is one action that moves the money and writes the entry, instead of a journal somebody has to remember to post.
A statement file now produces the same rows a live bank feed does, so an account without a feed reconciles exactly like one with it. The tie-out proves the whole reconciliation rather than the matched lines alone: opening balance, what cleared, what is still outstanding, and the closing figure the bank shows.
A budget can now target a GL account and not only a cost centre, and every axis is managed from one Budgets panel instead of a screen each. Procurement checks the budget when someone raises a requisition, which is while a person can still change their mind, rather than when the bill lands.
A payment run now takes the early-payment discount it advertises, reading the terms off the invoice, and a bill can carry its own terms where a supplier's differ from the default. Fixed-sum Skonto sits alongside percentage terms, which could not be modelled at all before. On the sales side the invoice tells the customer what paying early is worth.
A run can pay part of a bill and leave the rest ageing, instead of all or nothing. Payments quote the supplier's own reference so the money is matched on their side, and the remittance tells the payer what to quote back. Suppliers who collect by direct debit are kept out of runs entirely, so nobody pays them a second time.
Accounts now carry reading translations: the name on screen is the one you think in, while the statutory designation stays on the files the tax office reads. Search finds an account by either. The chart can answer the coding question itself, and coding rules can be set in bulk and arrive seeded, so they work on the first day rather than after a setup session.
The General Ledger existed as a service, a drawer and a button that pointed at nothing. It is a screen now: every posting, both sides of it named, filterable by any dimension.
An employee's own profile and payslips now live in HR, where people look for them. A manager can approve their team's hours and their leave without being given HR as a whole. Pay has moved off the employee record onto its own table, so the permission around it is a boundary rather than a convention.
The shortcuts on your dashboard can be arranged, renamed and removed where you see them, on desktop and on mobile. Every module offers its own tabs to the picker, and the page you are on can be pinned directly, so the row reflects the work you actually do rather than what your job title was assumed to need.
Leave can be approved from the widget that already showed it was waiting. Who is away today appears on the screen you already look at. An integration that has quietly stopped syncing now says so, instead of going unnoticed until someone finds the data missing.
Settings hubs, and the Finance, Settings and Reports tabs, now write the open section to the address bar. A link you paste to a colleague opens where you were standing, instead of the module's front page with instructions to click twice.
A VAT number can be checked against the EU register, and if you accept the result it fills in the party's registered name and address. An IBAN says which country and bank it belongs to as it is typed. A signed mandate and the agreement a credit limit rests on can be held on the record, a business can trade under one name while being registered under another, and supplier documents can carry an expiry date and warn before they lapse.
Conversations can be given a retention period, set where the rest of the AI policy already lives. The audit record says what the assistant was used for rather than what it answered, which is the part that matters for a review and the part that does not need to store anybody's question.
Access can now be granted that ends by itself. An auditor gets a role scoped to what they need to see, with an expiry on it, so the clean-up is not something anyone has to remember.
A collections worklist under Finance groups every overdue receivable by customer, worst first, and shows what has already been tried: the escalation level reached, when they were last contacted, and how much is outstanding. Accounts the automated reminder schedule has run out of steps for are flagged as needing a decision, so a receivable can no longer quietly stop being chased. Pause reminders on a disputed invoice, record a date a customer has promised to pay, or write the invoice off, all from the same row.
Reminders can be paused on a single invoice when a customer disputes it, without sparing them for everything else they owe. Record a promised payment date and chasing stops until it passes, then resumes on its own the next day if the money has not arrived, so a broken promise needs no clean-up. Every pause, resume, and promise is written to the audit trail.
Correcting an issued invoice now raises a credit note and opens a replacement that references the original, on the document itself and as a link between the two. Whether an issued invoice may be edited in place or must be corrected this way follows your country by default, and can be set per workspace under Finance settings.
Folders and AI knowledge bases can now be shared with whole departments, not just named people or broad roles. Grant a folder or knowledge base to Finance, Controlling, IT, or any HR department and every member gets access - and it follows your org chart automatically as people join, leave, or transfer, with no per-file upkeep. Each team sees only the knowledge bases assigned to its department.
Files classified Confidential or Restricted are now never surfaced by Softbooq AI, even if they are dropped in a shared folder or reclassified after they were indexed. The rule is enforced at retrieval time, so a document downgraded to Confidential stops appearing in answers immediately, across the general assistant and every scoped knowledge base.
The register keeps selling when the connection drops: sales are queued on the device and replayed in order once it is back, with stock guarded against overselling on the server. Returns are handled at the counter by looking up the original sale and refunding in one tap, posting to a contra-revenue account and putting the goods back into stock. Receipts can be shared without a printer, by native share sheet or a public link.
Customers can be given a credit limit and sold to on account, with a per-customer override and an audited manager approval when a sale would exceed it. Overdue balances can block new credit automatically. Shoppers can also reserve online and collect in store, with the reservation held against real stock and released automatically if it is not picked up.
Prepare, file, and pay a VAT return from Reports, with the figures drawn from the ledger rather than re-keyed. Foreign-currency invoices and bills now carry both the transaction and base amounts, with realised and unrealised exchange differences posted automatically at period end.
Upload PDFs, contracts, and spreadsheets and Softbooq AI reads them. Documents are chunked, embedded, and made semantically searchable, so you can ask questions that are answered directly from your own files. Retrieval is permission-trimmed - the assistant only surfaces documents you are allowed to see - and your files are never used to train AI models.
Invoices can now carry multiple VAT rates across their line items via configurable tax codes, with each rate posting to the correct general-ledger account. This release also hardens the accounting core: accounts-receivable settlement, credit-note posting, and opening-balance carry-over for go-live migrations are all double-entry verified.
A single workspace toggle now governs whether Softbooq AI can read your business data, and it is honored consistently across every AI surface. Knowledge search is permission-trimmed per user, and an automation master switch gates all autonomous AI actions so nothing runs without explicit opt-in.
OAuth bidirectional CRM sync with Pipedrive. Persons sync to/from Customers (email-matched), deals round-trip with your quotes, and a won deal auto-creates an ERP invoice (Draft by default so your approval chain runs; opt in to immediate Sent). Activities and notes sync into the CRM timeline. Real-time webhooks reflect changes in seconds, with a 15-minute catch-up cron. Connect from Settings → Integrations → Pipedrive. Not included in this release: Leads Inbox and deal line-item/product sync (planned), and Pipedrive Projects/Campaigns/Smart Docs (out of scope - Softbooq Projects, email infrastructure, and Contracts are the system of record).
Two-way sync your Asana projects, tasks, and nested subtasks with Softbooq Projects. BYOK Personal Access Token or OAuth, per-project sync direction (two-way / pull only / push only), bulk-link existing projects or create Softbooq projects from selected Asana projects, webhook for real-time updates, 15-min delta cron, and auto-pause on 3 consecutive failures.
Six accounting platform integrations ship in one batch. QuickBooks Online via OAuth with bidirectional contact and invoice sync. Lexoffice, Sevdesk, Moneybird, Pennylane, and Zoho Books connected via BYOK API key. Each integration pushes outbound invoices and pulls contact records on a configurable schedule. Connect any combination from Settings → Integrations.
Connect Salesforce over OAuth (production or sandbox) with bidirectional sync of contacts, leads, and opportunities. A closed-won opportunity auto-creates an ERP invoice, Draft by default so your approval chain runs. Connect from Settings → Integrations → Salesforce.
Zoho CRM joins the CRM line-up with two-way contact and deal sync and auto-invoicing when a deal is marked Closed Won, while Zoho Projects syncs into Softbooq Projects. Both connect through a single central Zoho OAuth app with multi-data-centre support (EU, US, and more), so there are no API keys to manage.
Four issue- and project-tracking tools connect to Softbooq Projects in one batch. Jira and Confluence bring enterprise issue and document sync, Linear adds OAuth 2.0 issue sync, and Trello connects via personal token with full board and card mapping. Each supports per-project sync direction and real-time updates.
Contracts and invoices can now be sent for electronic signature via a unique public verification link - no recipient account required. Signatories sign in-browser; the completed document is stored against the original record. Invoices also export in Factur-X (ZUGFeRD) format, embedding structured XML in the PDF for automated processing by accounting software.
Automated leave balance accrual in the HR module. Policies define accrual rate (days per period), carry-over cap, and reset date. Balances update on the configured schedule and feed directly into the leave request approval flow.
The entire platform (ERP, Accounts, Files, marketing site) is now fully translated into German, French, and Spanish. Zero missing keys across all four languages. Language is detected from browser preference and can be overridden per-user from account settings.
Payment terms (Net 30, Net 60, Due on Receipt, custom) can now be set at the invoice level and defaulted per customer in CRM. Due dates calculate automatically and feed the Accounts Receivable ageing report.
All 7 Planner edge functions migrated to the canonical resolveTenantContext pattern. Fixes a latent bug where members of multiple tenants could trigger cross-tenant Planner reads/writes when using the tenant switcher. CI tripwire now enforces this pattern for every new tenant-scoped edge function.
Softbooq AI is now its own surface at ai.softbooq.com - a dedicated workspace for the conversational assistant with its own Wallet, Top-up, Actions, and Admin Usage views. Same single sign-on, same tenant data.
console.softbooq.com - internal operator surface for managing tenants, AI credits, and platform admins. Code-complete with full RLS, deployed against the same shared identity layer.
Supabase backend now lives at db.softbooq.com via Supabase Custom Domains. Edge functions, Auth, and Storage all consolidated under one branded URL. Original supabase.co URL still resolves via CNAME alias for zero-downtime migration.
Unified cloud file manager for Google Drive, OneDrive, SharePoint, Dropbox, and Box - available as a progressive web app on desktop, tablet, and mobile. Multi-tab browser interface, native folder navigation, resizable sidebar, and per-user connector management backed by Supabase.
Softbooq AI now retrieves and reasons over your real business data - invoices, contracts, employees, projects, and stock. Answers are grounded in your tenant's records, not just general knowledge.
Token-based settlement replaces the flat 1-credit-per-chat model. Per-request hard caps (10 normal / 3 trial), tool-round and output-token limits, mid-loop abort with refund, and a CI guard preventing rogue Anthropic SDK imports outside the ai-chat function.
27 edge functions migrated to a shared resolveTenantContext + assert_tenant_admin_of pattern. Every privileged path now performs tenant ownership checks before any DB write.
All 8 Settings tabs now have purpose-built mobile variants. Banking (Stripe connect inline), Notifications (toggle groups), Preferences (native selects), Org Security (policy drill-ins), Legal & Compliance (textarea editing), and Email Templates (read-only with desktop notice) were each rebuilt for 375 px viewports with 44 px minimum touch targets.
CRM module rebuilt on Supabase with a Kanban pipeline view, deal stage automation, and bidirectional HubSpot contact sync. Contact records now aggregate invoice history, open quotes, and linked projects in a single timeline. Pipeline activity is logged to the platform-wide audit trail.
Fixed Supabase auth hook overwriting the PostgREST-reserved `role` claim. Custom role is now written as `userRole` so RLS policies and PostgREST role resolution work correctly side-by-side.
The entire data layer migrated from Firebase Firestore to Supabase (PostgreSQL + Row Level Security). 190+ migrations applied to production. All authentication, storage, real-time subscriptions, scheduled jobs (pg_cron), and edge functions now run on the Supabase stack under the custom domain db.softbooq.com. Firebase is fully decommissioned.
OAuth-based bidirectional contact sync with HubSpot CRM. Nightly cron keeps both sides aligned. CRM contact rows show a HubSpot badge when linked. Settings → Integrations → HubSpot for one-click connect.
Predictive stock depletion across all warehouses with AI-narrated recommendations. Nightly forecast cron, on-demand Gemini explanations per item, and a one-click "Create PO" path straight into Procurement.
New Profitability tab in Reports with 6 KPIs (gross margin, net margin, fulfilment cost, refund impact, channel mix, top/bottom orders) and a virtualised per-order table. Auto-COGS trigger backfills cost on every sale.
Batch outbound payments via bank file export (SEPA, BACS, ACH). Create a run, select invoices or payroll entries, export a signed bank file, and mark the run as executed. Full audit trail per run.
Bring your own Wise and Revolut API keys to send outbound payments directly from the ERP. Keys stored in Supabase Vault. Integrated into Settings → Payments with live balance and transfer history.
Support for Brevo, SendGrid, Microsoft 365, and Custom SMTP (including Google Workspace). M365 OAuth fixed with the admin-consent flow. Tenant mapper fully rewritten to eliminate cross-tenant routing errors.
Resolved recharts rendering crash on the Attendance dashboard. ClockInOutWidget now reflects live clock-in state. Grant Access flow patched for edge cases where the employee row was missing a linked user.
OAuth-based connection to Xero for accountants. Contact sync and ERP-to-Xero invoice push, fully automated. Reconciliation links Xero invoice IDs back to the source ERP record.
Self-hosted WordPress storefronts now sync via Consumer Key - no OAuth required. Full feature parity with Shopify: products, orders, inventory push, refund and fulfilment webhooks.
Three-pass bank statement matcher (HIGH / MEDIUM / LOW confidence) with a Reconciliation Workbench in Reports. Nightly pg_cron run keeps unmatched lines fresh. Manual override audited per match.
sales_channels table unifies Shopify, WooCommerce, POS, and direct sales as first-class channels. New Channels tab in Settings and a Channel Performance report in Reports - see revenue, margin, and fulfilment time by source.
196 end-to-end tests across the ERP, Accounts hub, and Files app using Playwright. Covers critical flows: authentication, invoicing, contracts, HR payroll, client portal, and storefront checkout.
Main JS bundle reduced from 539 kB to 350 kB (gzip). All 20 top-level modules moved to lazyWithRetry(). AuthenticatedApp extracted as a lazy chunk. Vendor-react chunk isolated to prevent cache invalidation on every deploy.
P0 fixes: Stripe webhook signature validation, auth session hardening, and row-level security policies across all tenant tables. P1 fixes: client portal token scoping, Edge Function JWT enforcement, and admin panel access controls.
OAuth flow, real-time webhooks (orders, fulfilments, refunds, inventory), two-way stock sync, fulfilment and refund push to Shopify, plus an outbound inventory queue with a 2-minute reconciliation cron. Date-range and per-entity import selection in the Integrations UI.
New Quotes tab in Sales - draft, send, and convert quotes into invoices in one click. Email templates, e-sign acceptance, and full audit trail.
Internal super-admin dashboard for managing tenants, subscriptions, feature flags, and billing. Includes Stripe customer lookup, plan overrides, usage metrics, and audit log viewer.
Built-in travel booking powered by the Travelpayouts API. Search flights, hotels, and car rentals within the ERP. Bookings linked to expense records and employee profiles.
Bill of materials, production orders, work-centre scheduling, and yield tracking. Integrates with Inventory for real-time stock deduction on production completion.
© 2026 Softbooq by Everbright & Co. - Germany, European Union