Platform release notes

Sign-in: Confirm a fresh sign-in with a short-lived, single-use code before opening portal data; plaintext codes are not stored.

My devices: Review your own registered browsers and sign out one device or all other devices.

Session expiry: End sessions after 30 days without authenticated activity; background polling does not extend them.

Design and performance: Use the shared portal header styling on security screens and reuse the trusted request snapshot instead of repeating the same session read.

Verification controls: Keep verification-channel radios and browser-registration checkboxes at their intended size so email details fit on desktop and mobile.

Contract history: Consolidate repeated monthly rows while preserving sources and linking private drafts to the unit, tenant and saved landlord context.

Building sources: Coverage for all thirteen buildings, with prepared contracts, exceptions, unit history and links to original source documents.

Installments and collections: Show extracted installment schedules as drafts and record them only after Accountant verification. Duplicate collection observations are consolidated without posting paid rent.

Person matching: Exclude vacancy and owner-reserved labels from customer profiles and contract groups while retaining original source rows and unit history.

Building register review: Month and unit targeting, working copies and row histories, with batch preview before saving or preparing private contract drafts.

Contract payment follow-up: Independent Accountant review of official reference, tenant identity and email, and installment schedule; receipts under review pause repeated payment requests.

Notifications and email: Links open the exact source row or installment. Arabic company-branded email includes the official reference and current installment balance. New milestones require CEO approval.

Loading: Use one read snapshot per request, bounded parallel state-part reads and one simultaneous session request; permissions are not cached between requests.

Building coverage: Show saved building count and buildings represented by source rows, with an explanation of unmatched-file review.

Opening building reviews: Load source rows alongside the session check, waiting for successful readiness before displaying records.

Person profiles: A building-scoped private registry preserves source history and flags missing email, mobile, relationship and source exceptions.

Registration invitations: The CEO prepares batches of up to 25 for SAHRECO email or WhatsApp drafts sent by the company team. Personal links expire after seven days.

Identity and permissions: Verified email is required. The Accountant checks identity, then the CEO approves the record link. Private records and internal notes are not exposed before approval.

Consistent account approval: The legacy user editor cannot bypass review for an imported profile. Existing linked-account updates retain their saved permissions.

Clearer reviews: Counts and requests follow the selected building; reported unit numbers are visible, with explicit field labels and mobile-sized review forms.

Navigation context and send outcomes: Language switching retains building, category and result page. The CEO resolves uncertain email submissions using Sent Items evidence before replacement, without automatic retries.

Access approval detail: Registration reviews show the canonical record, category, buildings and source units before approval, retaining multiline internal notes separately from invitee-facing messages.

Identity-check sequence: The Accountant records the invitee identity match, then the CEO approves access; Super Admin approval does not replace the selected Accountant check.

Data review: Building-scoped reviews include evidence, resolution status and history. Historical reports stay separate from current prices, availability and posted receipts.

Owner intake: A JSON template supports preview and private drafts without creating accounts or access. Document, authority and user-binding reviews remain separate.

Permissions and evidence: Reviews are restricted to the authorised Accountant and CEO within their building scope, preserving sources and requiring a closing reference.

Access guidance: The intake screen explains the customer-account access limit and offers a return to the account instead of an inappropriate sign-in prompt.

Consistent results: Building results follow the latest selection, cancelling older reads and showing clear loading and retry states.

Navigation context: Language switching retains building, view and result page. Evidence is ordered by the latest filename period without treating that period as confirmed.

Public pages: Privacy and licences use the same legal-document typography, colours, contents, headings and print layout as Terms, with shared Arabic/English links across public pages.

Privacy review: A proposed privacy edition reviews data categories, purposes, rights, retention and providers. It remains inactive until an explicit CEO decision, with the existing published notice preserved.

Edition integrity and approval: Privacy review uses draft, submission and decision controls with an edition fingerprint, preventing direct activation or retrospective acceptance changes.

Update highlights: A red New badge marks the release’s declared features, their links and the release entry, following the displayed Arabic or English language.

Saved visibility window: The window starts once at the first authenticated visit after release and ends seven days later or thirty days after release, whichever comes first. Signing in again or changing devices does not restart it.

Search and help: The shared header now opens searchable help for accounts, contracts, payments, buildings, rentals, maintenance and administration.

Permitted guidance: The server selects guidance using saved roles and page permissions; search does not index customer data or internal notes, or send queries to an external service.

Account and private rehearsal: The account page waits for rehearsal admission before loading data; its obsolete public test-script reference has been removed.

Deployment history: This update is recorded as a separate release, preserving the previous release notes and verification receipt.

Contracts: Contract forms, finance and rental journeys use the same core checks for references, dates, rent and overlapping active leases.

Private rehearsal: Rehearsal role controls load only after server verification of an authorised account; synthetic records remain isolated.

Releases: Release history is available from your account menu, with the current version, changes, deployment verification time and check result.