weekly-2026-w25
Week 25: Multi-Location Support Launches with Branding and Access Improvements
Jun 15, 2026 - Jun 21, 20268 releases
This week's release introduces full multi-location support for practices with more than one clinic, along with location-specific branding, clearer client status displays, and stronger permission controls across the admin portal.
- Locations: Practices can now manage multiple clinic locations from one account, each with its own hours, staff, services, and brand colours, with the sidebar and client portal reflecting the active location automatically.
- Client Portal: Client status is now split into clear Account and Verification columns, and location assignments are grouped together for easier management.
- Access and Security: Role permission dependencies are now enforced automatically, admin invitations require an explicit choice of location access, and several security-relevant dependencies were updated.
- Webhooks: A delivery failure affecting manual and scheduled webhook sends has been fixed, and new webhook signing secrets are now shown immediately after creation.
Features
- Multi-location management: Practices can run multiple clinic locations from a single account, each with its own opening hours, staff assignments, services, contact details, and display colour.
- Location branding: Each location can have its own logo, display colour, and brand colours in the sidebar, client portal, and admin portal.
- Client portal clarity: Client status is now shown in separate Account and Verification columns, and location and access settings are grouped together on client records.
- Admin invitations: When inviting an admin, you can now explicitly choose whether they get access to all locations or only specific ones.
- Webhook secret visibility: New webhook signing secrets are shown immediately after creation for easy copying.
- Navigation and consistency: The Configuration section now groups API Profiles, Webhooks, and General settings together, and status badges, filters, and detail pages share a consistent look across the portal.
Fixes
- Webhook delivery restored: Manual and scheduled webhook sends that were failing with a network address error are now delivered correctly.
- Location data repair: Practices whose data had ended up without any configured location are now automatically repaired.
- Staff and client location assignment: Staff and clients without an assigned location are now automatically linked to the correct location when a practice has only one.
- Status badge colours: The Active account badge and Verified status badge no longer use clashing colours in the client list.
- PDF export: Document exports to PDF now correctly resolve fonts, preventing export failures.
Security and reliability
- Permission hardening: Role changes are now rejected if the requesting admin lacks authority over both the current and new role, closing a privilege-escalation gap.
- Location access boundaries: Additional safeguards ensure admins with access to specific locations cannot view or modify data from locations outside their permitted scope.
- Support access limits: Read-only support sessions are now consistently enforced across all areas of the admin portal.
- Dependency updates: Multiple security-relevant dependency updates were applied throughout the week, including a fix that brings the project to zero known vulnerabilities in its dependency audit.