Tighten billing, messages and document boundaries across payers and changed account links, with clearer company-portal sign-in and hosting-owner recovery.
Access protection
Data isolation: Filter payer billing, messages and notices against current links; unverified historical contract drafts cannot grant building access.
Access protection
Documents and permissions: Withhold a previous owner’s management agreement from a replacement owner; test private files, receipts and internal notes across independent identities.
Improvements and fixes
Company sign-in: Remove email-based administrator bootstrap and block the known hosting-owner password reset from the portal, with a Google sign-in alternative.
No production account, CEO binding, fee or balance changes. Isolated tests do not replace actual signed-in session acceptance.
Latest release references on this page (1)
The full history is retained. Browse updates, search a version, or open the reference pages within each update to reach every original.
2026.10.17-r38 · Owner and tenant isolation protections ·
For signed-in accounts, New lasts seven days from the first visit after release, capped at thirty days from release. Visitors see it for seven days from release.
