monthly-2026-05
May 2026: Portal controls, onboarding upgrades, and stronger account security
May 202616 releases
May brought more control over patient portal access, a smoother guided setup for new practices, and stronger account security including mandatory two-factor authentication for admins.
- Client portal: You can now choose exactly which sections and fields each patient sees, and portal emails carry your practice branding.
- Onboarding: The checklist was redesigned with collapsible sections, a clearer next-task view, a mobile-friendly layout, and a new step for inviting your first client.
- Administration: Business details now live in a new Organisation section with custom fields, and IBAN entries are checked for validity before saving.
- Security: Admins can now enforce mandatory multi-factor authentication, and sensitive actions like inviting an admin require a fresh authentication code.
Features
- Patient portal profiles let you decide exactly which sections and fields each patient can see.
- Portal emails now carry your practice branding.
- The client portal access profile editor now has collapsible, reorderable sections for personal information, appointments, and documents.
- The onboarding checklist was redesigned with collapsible sections, a next-task preview, mobile-friendly layout, and a new step for inviting your first client.
- A new in-app feedback button on every portal lets you report bugs, request features, or leave comments, with screenshot capture, annotations, and status update emails.
- A new Organisation section lets you manage business details as custom fields, including your own organisation-level fields.
- Custom fields with an IBAN preset now verify the full checksum to catch incorrect bank account numbers.
- Practice administrators can now enforce mandatory multi-factor authentication for all admin users.
- Refreshed client and appointment detail screens, dashboard activity panel, and sidebar navigation make everyday work clearer.
- Starter content is now available for physiotherapy, dentistry, and hairdressing practices so a new practice can begin with relevant sample data.
Fixes
- Appointment summaries now show more accurate timing.
- Password-recovery messages and the signup and setup screens are clearer and more reliable.
- Client activity is now recorded correctly again.
- Trial data reset is no longer incorrectly blocked for practices on a trial plan.
- Saving practice settings no longer silently overwrites changes made by another user at the same time.
- Sidebar labels now update immediately after renaming a custom entity, and login redirects in the client portal are more reliable.
Security and reliability
- Mandatory two-factor authentication can now be enforced for all admin users, with sensitive actions such as inviting an admin or resetting a password requiring a fresh authentication code.
- IP restrictions for the team portal add an extra layer of access control, and two-step login boundaries have been hardened.
- Feedback attachments are now encrypted at rest, access to file storage has been tightened, and attachments are automatically deleted after two years; feedback submissions are anonymized after one year.
- Audit records are now protected against tampering, and background integrity checks run automatically after each release to catch unexpected changes early.