CHANGELOG

What's New in SecuryxAI

Release notes for every version of the platform. Latest: v0.9.0 — July 1, 2026.

NEW

v0.9.0Major ReleaseLATESTJuly 1, 2026

Customer Experience Sprint — TTFV improvements across the platform

A focused sprint on Time To First Value: enhanced onboarding wizard with progress tracking and 'why it matters' guidance, real Plan & Usage dashboard widgets, activation funnel analytics, 8 new email templates, and the Help Center.

HIGHLIGHTS

✦Onboarding wizard now shows estimated time remaining, per-step 'Why This Matters' explanations, and a celebration completion screen

✦Dashboard now shows real Plan & Usage data: AI queries, storage, and questionnaire counts vs plan limits

✦New Help Center at Admin → Help with search, 18 articles, and framework guides

NewOnboarding wizard: persistent progress header showing step X of 10, % complete, and minutes remaining

NewOnboarding wizard: 'Why This Matters' box on every step explaining the compliance/audit reason

NewOnboarding wizard: 'What You'll Unlock' preview showing value of completing each step

NewOnboarding wizard: OPTIONAL badge + intentional skip on team/vendor/asset steps

NewOnboarding wizard: AI recommendations panel on results screen with profile-specific copy

NewOnboarding wizard: celebration completion screen with confetti, what-you-built summary, and top 3 next actions

NewDashboard: compact 'Plan & Usage' panel showing AI queries, storage GB, and questionnaire counts vs plan limits

NewDashboard: 7-day trial expiry warning banner with upgrade CTA

NewHelp Center: full-page help at /admin/help with search, 5 categories, 18 articles, keyboard shortcuts, and contact support

NewDocs: public documentation page at /docs sourced from the same article library

NewWhat's New: release notes page at /whats-new with version history

NewActivation tracking: ActivationEvent model for analytics funnel (onboarding_started, onboarding_completed, first_framework, etc.)

NewPlatform Admin: Activation Funnel page showing milestone completion rates and drop-off per org

NewEmail delivery: createNotification() now fans out best-effort emails with emailNotifications user preference gate

New8 new transactional email templates: verify-email, team-invite, trial-started, payment-succeeded, payment-failed, subscription-updated, support-reply, quote-ready

ImprovedVerify email flow is non-blocking — login never gated on email verification

FixedSupportTicket org relation TS error resolved by querying Membership separately

FixedEmail notification null-guard: users without email addresses are skipped silently

v0.8.0Major ReleaseJune 15, 2026

Platform Stabilization Sprint — auth, seed data, admin cleanup

Tier 0 stability sprint: fixed critical login regression, added forgot-password flow, seeded realistic test data, and swept dead/placeholder pages from the admin.

HIGHLIGHTS

✦Fixed critical login regression caused by session.user wipe in JWT callback

✦Built complete forgot-password and password-reset flow with rate limiting

✦50 companies, 250 users, realistic vendor/evidence/finding seed data

Fixedsession.user invariant: never set session.user to undefined in JWT callback — caused complete auth outage

NewForgot password: email-based reset flow with secure token, rate limiting (3 req/15 min), 1-hour token expiry

NewEmail verification: sends on signup, non-blocking, banner in admin when unverified

NewSeed script: 50 companies, 250 users, 200+ vendors, 500+ evidence items, realistic findings and risks

ImprovedSwept all Coming Soon / placeholder / dead-end pages from admin sidebar

ImprovedAdmin sidebar reorganized: removed duplicate nav items, logical grouping by workflow

FixedREGRESSION.md Tier 0 checklist added — login, signup, forgot-password, billing webhook smoke tests

v0.7.0Major ReleaseMay 28, 2026

Business Operations Phase 2 — Company/User admin, RBAC, Support, Entitlements

Complete business operations layer: Company admin actions (archive, merge, Stripe sync), User management with real MFA, Employee RBAC for platform staff, Support Desk, and plan entitlement enforcement.

HIGHLIGHTS

✦Company admin actions: archive, merge, Stripe sync, staff assignment, risk tagging

✦Real MFA: TOTP via authenticator app with encrypted secret storage

✦Platform RBAC: SUPER_ADMIN/ADMIN/SUPPORT/BILLING employee roles gate the platform console

NewCompany 360: actions row with archive, merge, Stripe sync, staff assignment, risk tag management

NewReal MFA: TOTP setup/verify/disable flow with AES-256-GCM encrypted secret storage

NewEmployee RBAC: Employee and EmployeeGroup models with SUPER_ADMIN/ADMIN/SUPPORT/BILLING roles

NewPlatform Admin support desk: tickets, notes, internal vs customer-visible replies, escalation

NewStorage and AI credit entitlement enforcement: checkPlanLimit() blocks uploads/queries at plan limits

NewTrust Center white-label gate: custom domain requires paid plan

ImprovedUser detail page: admin force-reset password, lock account, revoke all sessions

SecurityMFA_ENCRYPTION_KEY env var required for production; dev key must not be reused in Vercel

v0.6.0Major ReleaseMay 10, 2026

Revenue Operations Phase 1 — Visitor-to-customer-to-renewal lifecycle

Full revenue lifecycle: single pricing source of truth, quote-to-checkout flow, Stripe promotion sync, customer org linked to company/billing, and renewal visibility.

HIGHLIGHTS

✦Single pricing source of truth in lib/pricing.ts — eliminates hardcoded plan data across 12 files

✦Quote → Stripe Checkout conversion with promo codes and configurable terms

✦Payment failed notifications with in-app + email alert to org owners

Newlib/pricing.ts: single cached source for all plan data, limits, and feature flags

NewQuote builder: line items, discount, tax, seats, term, validity — generates Stripe Checkout session

NewStripe promotion sync: coupon/price creation on Promotion save, stripe_coupon_id stored

NewOrg↔Company link: signup creates Company record and links it to the Org for billing ops

NewBilling webhook: invoice.payment_failed and invoice.payment_succeeded notifications

ImprovedRetired duplicate Sales CRM — all opportunity/lead data consolidated in unified pipeline

v0.5.0Major ReleaseApril 22, 2026

GRC domain MVP — control graph, questionnaires, trust center, AI

First complete GRC functionality: the control graph data model, questionnaire import/match/export, evidence management, policy drafting, risk register, and the public Trust Center.

HIGHLIGHTS

✦Control graph: controls map to framework requirements via ControlMapping — implement once, satisfy all

✦Questionnaire AI: import CSV/XLSX, match questions to controls with confidence scores, export answered

✦Trust Center: published page with NDA-gated document support

NewControl graph: Control, ControlImplementation, AnswerNode, FrameworkRequirement, ControlMapping models

NewQuestionnaire import: CSV/XLSX upload, AI question-to-control matching, human review queue, export

NewEvidence management: upload, link to controls, expiry tracking, 30-day advance alerts

NewPolicy drafting: AI-generated drafts from org profile + framework context, approval workflow

NewRisk register: risk creation, scoring, treatment workflow, finding escalation

NewTrust Center: branded public page, framework badges, policy titles, NDA-gated documents

NewISO 27001 SoA: Statement of Applicability with all 93 Annex A controls, applicability toggles

Have a feature request or found a bug?

Submit Feedback →