Release Notes 27-10-2026

Filter documents by public share link - You can now filter the Site Documents list by public share link (Shared or Not shared), so you can see at a glance which documents are currently shared publicly.

Longer shared document previews - Shared document links now preview up to 300 pages of a PDF. Longer documents show a notice asking the reader to download the file to read it in full, instead of stopping silently at page 50.

Share links switch off with Not Required - Marking a shared site document as Not Required now warns you and, once you confirm, switches off its public share link in the same save.

Share dialog shows names correctly - Document names containing quotes or angle brackets now display correctly in the Share dialog instead of showing HTML codes.

Key management API key hidden - A site's key management API key is no longer shown on the site page. It now shows as Configured or Not set, and editors can leave the key box blank when saving to keep the current key.

Optional documents shown separately - Hovering over a supplier's status on the Suppliers list now shows optional documents in their own Optional Documents section, including optional documents that are still pending or expired on compliant suppliers. Optional documents still do not affect the supplier's status.

Re-inviting suppliers - Re-inviting a supplier who was already invited, or who was removed before registering, no longer shows an error. The invitation is sent again and the supplier is shown on the list as Invited.

Worker login email already in use - When staff change a worker's login email, an email address already used by another account is now refused, matching the check workers already get when editing their own details.

Supplier name in Additional Request emails - Additional Request emails for forms, and the matching resolved emails, now show the supplier's name in the email and at the end of the subject line, so reviewers can see which company the form belongs to without logging in.

Clearer review buttons when feedback is open - When a form section still has Action Required feedback that the applicant has not resolved, the main button on the review page now reads "Save & Request More Information". "Save & Submit (Approve)" is shown greyed out in the drop-down menu with a short note explaining why. Messages about blocked approval now appear as an on-screen notification instead of a browser pop-up.

Long text answers saved in full - Long text answers on forms are now saved in full, so the saved answer and its change history match what was entered.

Full checklist category titles - Checklist category titles in the inspection view are no longer cut off at 40 characters. The full title now shows, and the progress count stays visible beside it.

Worker name in Last Activity - The Last Activity badge on the Inspection Action List now shows the name of the worker who completed an action instead of leaving it blank.

No duplicate file after a rejected upload - When adding files while starting an inspection, on a checklist item or in Additional Details, choosing a file type that cannot be uploaded no longer adds the previously uploaded file to the list a second time.

Clear message for non-staff users - Contractor and worker logins that open the Inspection Management page now get an access denied message instead of an error.

Delete custom fields that hold values - Custom fields that already hold values can now be deleted after two confirmations that show how many risks are affected and suggest exporting first. The misleading no permission error no longer appears when the real reason is something else.

Older incidents open for editing - Fixed an error that stopped some older incidents from opening for editing.

Staff photos at the kiosk - When photo capture at sign-in is turned on, the Live Access kiosk now asks staff without an approved photo to take one, and the photo goes to photo approval like a dashboard upload. Kiosk photos for staff and workers now show correctly on their profiles, the Sign In Book and its PDF.

Site induction for visitors - Visitors signing in by QR code or kiosk are now always shown the site's online induction, even if they completed it before. Workers and staff with a valid completion still skip it.

Clear induction error messages - In Site Inductions, saving an induction with a problem, such as a duplicate name, now shows the actual error message instead of an Error Undefined popup.

Local Compliance Profile locations - Changing the location on a Local Compliance Profile now replaces the previous location instead of leaving both linked, and saving without a location now shows a clear message.

Contact Tracing and geofence maps - The Contact Tracing heatmap and the geofence map on Settings, Locations load again, Contact Tracing search and CSV export no longer return an error, and deleting a geofence now asks for confirmation.

No unexpected session expired message - Fixed an intermittent issue where the app could show Your session has expired straight after logging in.

Redesigned Training Online page - The Training Online page for suppliers and workers has a new filter panel, an Action Required filter that shows expired and not done training together, clickable summary cards, and clearer red Expired badges that show how many days overdue the training is.

Dismissed alerts come back when needed - A dismissed document alert on the dashboard now becomes active again when that document is later rejected, expires or is replaced by a new upload.

Clear message on unlinked clients - Opening the details page of a client your company is not linked to now shows an access denied message instead of a blank page.

Ampersands in category names - Category names containing an ampersand (&) now display correctly in the Assigned To column on the Document Categories page and in its CSV download.

Email change verification - Opening an email change verification link while logged out no longer shows an error for staff whose only profile is inactive. The email is updated and the success page shows.

Shorter questions in AI Logs - Long questions in the AI Logs list are now shortened to keep the table readable.

Security improvements - This release includes a large number of behind the scenes security improvements across the Client App, the Contractor App and the mobile apps. There is no change to how features work for normal use within your organisation, and no action is needed.

Site induction shown to every visitor - Visitors signing in by QR code or kiosk are now shown the site's online induction every time, even if they completed it before. Workers and staff with a valid completion still skip it. Sites with frequent repeat visitors may notice longer sign-in times.

Staff asked for a photo at the kiosk - Where photo capture at sign-in is turned on, staff without an approved photo are now asked to take one at the kiosk, as workers already are. The photo goes to photo approval before it is used.

Supplier name in Additional Request emails - The subject line of form Additional Request emails, and of the resolved emails, now ends with the supplier's name. Any email rules or filters that match the exact subject may need updating.

Password reset links on branded sites - Password reset emails now always link to the main ComplyFlow address, including for users who requested the reset from a branded address. After setting their new password, users can continue to sign in from their usual address.

Unassigning workers from sites - Unassigning a worker from a site now needs worker edit access for that site. Staff with view only worker access can no longer remove workers from sites. Ask your administrator to adjust permissions if this affects your team.