Changelog

This release lets you open and edit a form without ever leaving the Workflow Builder, makes inviting a new team member who signs in with Google or Microsoft more reliable, and keeps building toward a unified financial view on the contact profile — still not switched on for any organisation.

Workflows (Input Hub)

• New: edit a form straight from its workflow tile — every form tile in a workflow now has an Edit form button that opens the form builder in a slide-out panel, so you can tweak fields and publish without leaving the workflow page. Closing with unsaved changes prompts you to keep editing or discard.

Admin

• New: choose a sign-in method when inviting a team member — the Add User screen now has a Sign-in Method selector, defaulting to SSO, so a teammate who only ever signs in with Google or Microsoft won't hit an "account already exists" error the first time they log in.

Security and reliability (behind the scenes)

• Hardened the invite sign-in flow so a new account can only be linked to an invited teammate once its email address is verified, closing a narrow window where an unverified sign-up could have inherited someone else's pending invite.
• Continued building the unified financial view on the contact profile — a broker can now add or amend a client's income, assets, liabilities and living expenses by hand from the contact screen, and a new deal can prefill its Fact Find from the client's most recent financial position — still behind the scenes and not yet switched on for any organisation.
• Laid the groundwork for real GCP billing figures on the Kernel Cloud Resources page (still showing the labelled-resource estimate for now).

This release finishes off the PDF template editor's placeholder workflow: you can now bind a scaffolded placeholder to a field with a click, tick a checkbox automatically from a client's answer, and work through large forms without the lag that used to follow every click. We've also fixed a save-blocking error in the template editor and a display glitch in the "What's New" announcements.

Documents and PDFs (Input Hub)

• Fixed: a placeholder created by auto-detecting fields on a PDF template couldn't be bound to a field from the field picker — you had to delete it and re-add a field by hand instead. Selecting the placeholder and clicking a field in the picker now binds it directly, with a new Rebind option if you need to change it later.
• New: data-bound checkboxes — a checkbox on a PDF template can now be tied to a client's answer (for example, a Purchase / Refinance / Construction pick-one row) and will tick itself automatically when the document is generated, rather than only ever being tickable by hand.
• Fixed: selecting a placeholder in the field picker on a large, shared form (thousands of fields) could take several seconds to respond — collapsed groups no longer render their contents in the background while closed.
• Fixed: saving a PDF template annotation could fail outright with a server error if the bound field's path, type or label was long.

Product-wide

• Fixed: the "What's New" release announcements could show their Later/Previous/Next buttons pushed off-screen, or resize awkwardly between updates, when there were a lot of unread releases.

Security and reliability (behind the scenes)

• Continued building the automations "fire path": the message an automation sends now adjusts what it's allowed to name (deal, product) depending on whether the recipient is inside your organisation or an outside party such as a delegate — still not switched on for any account.

This release adds a Getting Started checklist to guide new team members through setup, makes deal PDFs render form answers and discovery card decks accurately, and gives organisations waiting on a dedicated SMS number an honest status instead of a vague "under review". Underneath, we've closed a run of data-loss and completion bugs in Input Hub and Collect, made reinstalling a workflow or form template pack safe to repeat, opened four more apps to every organisation regardless of billing tier, fixed a cross-tenant PDF data leak, and continued laying groundwork for automations and a unified contact financial view — both still switched off for every account.

Deals and workflows (Input Hub)

• A new Getting Started checklist — a progress ring in the navigation rail walks every team member through initial setup (connect your email, add branding, publish a Fact Find, create your first deal), with admin-only steps hidden from regular members and a "don't show again" option.
• Reinstalling or reinstating a previously removed workflow or form template pack no longer creates duplicates or disrupts deals already in progress; setup also gains a new Disclaimer Consent step for editing the privacy wording, checkbox label and scroll-to-accept requirement.
• Fixed: text typed into a field on an inline repeatable form (e.g. Liabilities, Private Health Insurance) could be silently lost if another field's save triggered a background reload before you clicked away.
• Fixed: editing a record through the drawer view could leave the inline list showing stale data until the page was reloaded.
• Fixed: a required form item with no fields of its own (e.g. "Income and Expenses") could never be marked complete, permanently blocking a deal from progressing.
• Fixed: a repeating section could be marked complete even though a newly added entry still had required fields left blank.
• Fixed: the order of questions could drift between the form builder and what was actually submitted, when two questions ended up sharing the same position — drag-to-reorder now reliably sticks.

Client intake (Collect)

• Fixed: Fact Find summary cards could show raw placeholder text instead of the real answer.
• Fixed: a Property asset could ask for its liability type before you'd said whether the property was owner-occupied or rented.
• Fixed: the shortcut that auto-fills a matching liability from an asset (e.g. a car loan appearing after a vehicle) only worked when a broker filled the form on a client's behalf — it now works the same way when applicants fill in Collect themselves.

Documents and PDFs

• Deal PDFs now render form answers faithfully — numbers show thousands separators, dropdown and lookup answers show their real label instead of an internal code, and property/asset-linked questions are grouped together under a clear heading.
• Fixed: a discovery card deck (swipe-style Yes/No questions) still in progress was left out of the PDF entirely; it now appears, captioned with how many cards have been kept so far.
• Fixed: an abandoned card deck could be wrongly marked complete, which then replayed the whole set from the first card the next time it was reopened.
• Fixed: broker-facing card thumbnails that failed to load now retry automatically instead of staying blank until the page was reloaded.

Protocol

• Requesting a dedicated SMS number now shows an honest status — "submitted" while ZiplineOS is preparing it, "pending" once it's with the carrier — instead of a vague "under review" that could sit unchanged for over a week with no visibility.

Admin and billing

• Broadcast, Telemetry, Logic and Protocol are now available to every organisation, regardless of subscription tier — access is controlled purely by your admin's feature-grant settings, not billing.
• Fixed: the admin Users page could wrongly tell an admin that a correctly assigned user "isn't assigned to an organisation yet".
• The catalog packs page in Kernel now shows published template packs alongside drafts.

Security and reliability (behind the scenes)

• Fixed a cross-tenant data leak where a dropdown or lookup answer on a deal PDF could show another organisation's list label.
• Fixed: a Gmail user invited to an organisation under a dotted or aliased address (e.g. j.smith@gmail.com vs jsmith@gmail.com) could fail to be recognised as invited and end up auto-provisioned into the wrong organisation.
• Began building a unified financial view on the contact profile — income, assets, liabilities and living expenses pulled automatically from submitted Fact Finds — not yet switched on for any organisation.
• Continued building the "fire path" for scheduled, rule-driven automations on a deal or workflow — still not switched on for any account.
• Invested in behind-the-scenes reliability monitoring — structured request logging and new service-level uptime checks — with PII kept out of the logs by design.

This release changes what a client sees when a deal or input email lands in their inbox — it now comes from the broker's own connected mailbox with their signature, not a generic sender. Signing up now asks for your name so team invites greet people properly, and the admin Users list shows when someone was last active. Underneath, we've closed a long run of reliability fixes across scheduled reminders, workflow automation and Collect's co-applicant flow, plus a batch of NDIS-specific fixes covering phone numbers, PDF text and quote assignment notices.

Deals and workflows (Input Hub)

• Client emails now send from your own inbox — deal and input emails (magic links, co-applicant invites, reminders, delegate invites) now send from the deal owner's own connected mailbox where one exists, with their email signature appended, falling back to your organisation's verified sending domain otherwise.
• New rule-builder date aggregates — a workflow rule can now compare against the "Earliest of" or "Latest of" a set of dates across repeated form instances, e.g. gating on less than three years of address history.
• Fixed: a scheduled reminder anchored to a date a client answered on a form (e.g. "30 days before the policy expires") could fire on a stale date, or keep firing after the client cleared the date entirely, if the answer changed after the reminder was first scheduled.
• Fixed: editing a workflow item's Subject or Summary configuration could silently discard settings like the delegation reminder schedule or PDF pack, even though the page reported a successful save.
• Removed "Update Deal Field" from the workflow action picker — it was never actually implemented by the platform and was recording failures in tenants' activity feeds for authors who used it.
• Fixed: a delegate invited to complete part of a deal could keep receiving chase-up reminders after the deal was actually finished.

Client intake (Collect)

• Fixed: a primary applicant filling in a co-applicant's fact-find on their behalf (or where the invite/proxy choice was left undecided) could get permanently routed through the co-applicant's forms and never reach the finish screen.
• Fixed: a required money-amount slider showed its minimum value as if it were already filled in, so a step could look complete when nothing had actually been chosen — it now prompts "Select an amount" until touched.
• Fixed: a conditional option on a question (e.g. showing older vehicle years once "Used" is selected) could stay hidden if the condition depended on another answer on the same form.
• Fixed: an Australian service number (13xx, 1300, 1800) typed into a phone field was silently rejected and dropped with no error shown; a refused answer is now reported back so nothing is lost quietly.

Account and onboarding

• A friendlier first step — signing up now asks for your name alongside your company name, so team invites you send greet people by name instead of your raw email address.
• Fixed: connecting an Outlook/Microsoft mailbox could report success but silently fail to send any mail.

Admin

• The platform Users list now shows each user's last-active time.

Security and reliability (behind the scenes)

• Closed a crash risk where an oversized phone number submitted through Collect could take down the whole server process.
• Fixed a run of scheduled-reminder bugs: reminders could be dropped or double-sent by the delivery relay, a delegate's reminder could fail to appear on its own deal page, and a reminder could keep firing on a deal that no longer needed it.
• Fixed: generated PDFs (NDIS quotes and deal exports) could contain an invisible corrupted character wherever the letters "ti" appeared together, breaking copy-paste, search and screen readers.
• Began laying groundwork for scheduled, rule-driven automations on a deal or workflow — not yet switched on for any account.

This is a big one. The AU Mortgage Fact Find had started throwing an outright error for some organisations — it's rebuilt from the ground up as a leaner four-stage form that works end to end. New organisations now get a proper guided start: first-visit walkthroughs, a step to invite your team and choose starter workflows during setup, and an automatically generated web address. Nested forms can now inherit an answer from an earlier question instead of asking twice, and organisations running NDIS support coordination get a purpose-built quoting workflow. Underneath all of that is a large batch of reliability fixes across Collect and the form builder, and several tenant-isolation and access-control gaps closed.

Forms

• The AU Mortgage Fact Find is fixed and rebuilt — the form had started returning a hard error for some organisations, making it impossible to complete. It's now a leaner four-stage fact find with plainer wording, the guarantor role removed, household expenses shared across applicants instead of duplicated, and clearer conditional document requests.
• New: AU commercial low-doc / alt-doc fact-find pack — a ready-to-install template for commercial lending fact finds, covering business-purpose declarations, self-certified income with tiered evidence, entity borrowers and ATO-debt disclosure.
• Inherited field values in nested forms — a question inside a nested or repeatable form (for example a liability's asset type) can now automatically pull its value from an earlier answer, either locked (read-only once resolved) or pre-filled (seeded once, never overwriting your own edit), with support for more than one source in a set order.
• Type-aware default values — form authors can now see and set a real default value for a field directly in the builder, instead of an invisible inherited value showing up with no explanation.
• Fixed: a required checkbox question with more than one option could silently lose its answer on save, leaving the step permanently incomplete.
• Fixed: currency fields across the platform now reject negative amounts and cap at $1 trillion, and no longer misbehave while you're typing.
• Fixed: a required repeating group (e.g. "Employment Income") showed a contradictory "Optional" caption even though at least one entry was required to continue.
• Fixed: pasting or fast-typing a whole date into a date field could silently be dropped; a half-entered date now shows a clear hint instead of a mysterious blocked Continue button.
• Fixed: merge-field tokens (like a name or address pulled from another answer) could show up unresolved as raw text on nested-form labels and outstanding-document names.
• Fixed: ABN/ACN/BSB and similar identifier fields displayed thousands-separator commas and could fail validation on submit.
• Fixed: reinstalling or updating a workflow template pack could archive an unrelated form that happened to share a name with one of the pack's own forms.
• Fixed: rule-builder conditions now offer explicit date comparisons (e.g. "years since") computed with real calendar maths, and the picker no longer leaves you on an impossible combination.
• New: platform staff can now turn individual question types on or off per organisation.
• Behind the scenes: laid the groundwork for a new "Lookup" question type that searches an external directory, starting with the Australian Business Register — not yet switched on in any environment.

Account and onboarding

• A better first day — new users get a short guided walkthrough the first time they open ZiplineOS, plus dedicated first-visit tours for Input Hub, the form builder and the workflow builder.
• Invite your team and pick your workflows during setup — the onboarding wizard now lets the first user invite up to four teammates by email and choose which starter workflow templates to install.
• Your web address, sorted automatically — an organisation's URL slug and Collect subdomain are now generated from your company name automatically.
• New: mortgage brokers are now asked to nominate their aggregator during onboarding.
• New: after installing a starter workflow template, a short setup panel walks you through personalising it — privacy wording, roles, and the client invite email, with an AI-drafted starting point rolling out progressively.
• Fixed: choosing starter workflows during onboarding could silently install nothing if you clicked Finish quickly — installs are now confirmed before you're taken into the app.
• Fixed: an organisation created by a ZiplineOS admin no longer gets asked our own "tell us about your organisation" self-serve signup questions.

NDIS support quoting

• New: NDIS support quoting — a purpose-built quoting workflow for organisations coordinating NDIS supports: a client intake form, automatic assignment of the nearest available support clinician (honouring a stated gender preference), a branded PDF quote, and a "Carry Forward" flow that pre-fills a plan renewal from the previous one.
• The quote now tells you when the nearest available clinician is more than 150km away.
• Travel is no longer charged as part of a quote.
• Fixed: a support could be selected without its required funding type, producing a quote with a $0 total and no explanation why.

Deals and workflows (Input Hub)

• First-visit walkthrough for Deals — a guided tour of the Deals kanban board and deal detail page appears the first time you visit.
• Generated deal PDFs now render Summary tiles (the same section/total rollups you already see in Collect), and several answer types that used to show as raw data — who owns an item, a picked date, a delegate's name — now render as plain text.
• Fixed: a delegated form section that had actually been completed kept sending reminder emails and never showed as done; a workflow republish could silently break an active delegation link and wrongly call it "expired" instead of asking for it to be reissued.
• Fixed: on the "who will complete each insurance" step, Continue was allowed once just one product had been assigned instead of all of them.
• Removed the "finish setting up" dashboard nudge now that setup guidance lives inside Input Hub.
• Behind the scenes: an automatic welcome email on deal creation is being built and is not yet switched on for any organisation.

Client intake (Collect)

• Fixed a data-integrity bug: switching between applicants on a shared multi-applicant form could bleed one applicant's in-progress answers into another's.
• Fixed: finishing the final step of a form could fail to show the completion screen or leave step statuses stale; Continue is now disabled while a submission is in flight to stop accidental double-submits.
• Faster perceived load on the multi-applicant details step — the page frame now appears immediately, with only the individual form skeleton-loading.
• Fixed: a required document whose visibility depended on an answer inside a nested sub-form (e.g. a council rates notice) could be silently never requested.
• The public "subscribe for updates" opt-in link now works end to end in production.
• The delegate invite email now names the actual person asking and greets the delegate by name, instead of reading as a generic organisation-to-stranger message.
• Fixed: a public self-registration link containing a "card deck" step showed "this deck has no cards yet."

Admin and integrations

• Registry sections can now be individually granted or revoked per role from the Kernel feature-grants matrix, instead of being all-or-nothing.
• The Template Library now shows only the four core AU lending packs to regular admins; the rest are visible to platform staff only.
• Kernel's Edit User page gained a "Send Welcome Email" action to resend a user's onboarding email on demand.

Security and reliability (behind the scenes)

• Closed a gap in the (not-yet-enabled) deal-creation welcome email config: the save endpoint checked the caller's login but not which organisation the workflow belonged to, which would have let one organisation overwrite another's template.
• Closed several tenant-isolation gaps found while building NDIS quoting: clinician lookups and a quote PDF weren't consistently scoped to the requesting organisation, and an internal-only "staff alerts" field was reachable from an anonymous client link.
• Added server-side enforcement to the setting that turns on the public subscribe link — it was previously guarded only in the browser.
• Magic-link URLs, which carry a live access credential, are no longer written to logs in cleartext.
• Aligned browser tab titles with the ZiplineOS name across every portal, needed for our Google sign-in verification.

This release is a fix pass. The most significant: workflow "send email" reactions had been silently sending nothing for every organisation since late March — they now work again. We've also fixed a delegate invite link that 404'd, a bounce notice that could tag the wrong delegate as unreachable, and client emails that could be flagged as spam because they were sent from a domain that didn't exist. Underneath, we've hardened how session logins are signed and tightened access to and retention of AI request logs.

Deals and workflows (Input Hub)

• Workflow emails are sending again — a "send email" reaction attached to a workflow step had been silently sending nothing since 24 March, for every organisation, because it couldn't understand the newer format the email composer saves recipients in. It now reads both formats, and a misconfigured reaction will show up in the logs instead of failing silently.
• Fixed: the rule builder's "aggregate" dropdown was hiding forms that belonged to a different role (or no role at all) from a per-applicant question's rule sources, even though referencing them was already allowed.
• Fixed: installing a workflow template from the catalog could crash outright, or quietly drop configuration such as step colours and exit rules; re-installing a template no longer overwrites an organisation's own customisations to it.

Client intake (Collect)

• Fixed: the emailed link for a delegated document request could return a "page not found" error.
• Fixed: a bounced email could mark the wrong person as unreachable — if a document request was reassigned to a new delegate right after the previous delegate's invite bounced, the bounce notice could land on the new delegate instead.

Notifications

• Fixed: emails sent to clients (magic links, co-applicant invites, delegate invites) could be flagged as spam because they were sent from a domain that didn't actually exist. They're now sent from one verified ZiplineOS domain, show your organisation's name as the sender (e.g. "Acme Brokers via ZiplineOS"), and reply straight to your broker.

Security and reliability (behind the scenes)

• Hardened how session logins are signed, removing a fallback signing key that could theoretically have been reused across environments.
• Tightened access to AI request logs — reading one now requires an explicit organisation match and is audited — and added a (currently disabled by default) retention window for AI request/response content and other audit logs, plus database-level tenant isolation on the tables that hold them.

This release lets a broker ask for an extra document that isn't part of the original form, gives Collect's Documents page a proper drag-and-drop upload surface, and refreshes the sign-in and create-account pages. A new "make this template yours" step helps a brand-new organisation personalise its first workflow before publishing it, and workflow rules can now see answers from the very first "create a deal" screen. Underneath, we've fixed a bug that could freeze an organisation's automated journeys for days.

Client intake (Collect)

• Ad-hoc document requests — a broker can now ask for a document that isn't part of the original form, right from the Deal Documents page, assign it to an applicant (or the whole deal), and group it under an existing or new heading. The applicant uploads it through Collect like any other request.
• Faster, drag-and-drop uploads — each document request row on Collect's Documents page is now its own upload surface: drop or click to add a file, watch it appear instantly with no page flash, add several files to a multi-file request, and remove any one of them individually.
• A co-applicant who's had a section shared with someone else can now hand it back and finish it themselves, with the option to email that person a fresh link straight away.
• Fixed: the applicant picker on fields like "Owner" or "Policy owner" could show no one to choose from when the question sat inside a repeatable section, an edit drawer, or a document-merge drawer.
• Behind the scenes: the groundwork for delegating a single product (such as one insurance policy) to someone else to fill in continues to take shape on our staging environment — not yet switched on for any live account.

Deals and workflows (Input Hub)

• A friendlier first workflow — installing a starter template during onboarding now leaves it as a draft with a short "make this template yours" panel (starting with your logo and brand colour), rather than publishing it immediately with generic defaults. A dashboard hint points a new organisation back to it until it's published.
• Workflow rules can now reference answers given on the very first "create a deal" screen, not only questions asked later in the workflow.

Account and sign-in

• Refreshed login and create-account pages — a cleaner, consistent design across both, and password reset now opens in a focused dialog instead of an inline panel.

Admin and integrations

• Redesigned Integrations page — installed and available integrations are easier to scan, with real provider logos, a one-click setup for the Zipline Form Filler browser extension, and a confirmation step before uninstalling anything.

Security and reliability (behind the scenes)

• Fixed a bug that could freeze an organisation's automated journeys for days: a wait step with an ambiguous time zone got stuck retrying forever and crowded out every other journey's due work behind it.
• Fixed the Help feedback panel so it appears in the right place and no longer leaves the navigation rail in a stuck state.
• Continued closing out the underlying data-governance work: every JSON-shaped column in the database now has a stated, build-checked classification.

This release makes marketing email preferences actually do something — recipients can now opt in or out of specific kinds of email, not just unsubscribe from everything — gives every password-set screen a proper strength meter and one consistent policy, and adds two more steps to onboarding so a new organisation leaves the wizard ready to work. Underneath, we've closed out a long run of deal-completion and Collect fixes, and closed a real tenant-isolation gap on four database tables.

Broadcast and marketing preferences

• Preference topics now work — a contact can opt in or out of a specific kind of marketing email (e.g. "Product updates" versus a monthly newsletter) independently, sitting underneath the existing "unsubscribe from everything" switch. Sends and journeys both now check it before mailing.
• Public opt-in page — someone who isn't yet a contact can join an opt-in topic themselves via a shareable link, with a confirmation email required before they're subscribed.

Account and onboarding

• Password strength meter — every password-set screen (sign up, accept invite, change password in Settings) now shows a live strength meter and a requirements checklist, backed by one consistent policy that the server also enforces.
• Onboarding now sets you up to work — after the initial questions, a new organisation can one-click install a starter form (published and ready to use) and apply its logo and brand colour, all before leaving the wizard.
• Fixed: a new signup could get stranded on the Registry dashboard instead of landing back in the main app.

Deals and workflows (Input Hub)

• Forms now have a real publish step, so an in-progress edit no longer leaks into live workflows until it's deliberately published — not yet switched on for any account while we finish the rollout.
• Searchable, grouped pickers for choosing a form now appear everywhere a form is selected, not just the workflow item editor.
• Fixed a run of bugs where a stage, product group, or the whole Summary tab could sit "incomplete" forever because gated-off (not-applicable) questions or optional items were being counted against it — on the staff deal view, the pipeline stepper, and the Subject group badges.
• Fixed: a conditional rule on a multi-select question never fired once someone picked more than one option.
• Fixed: date-rule validation (e.g. an under-18 date of birth) now shows its real error message on Collect, previews and staff deal-fill, instead of a generic "required" message or nothing at all.
• A submission's dropdown options and financial-year labels are now frozen at the moment it's submitted, so a later edit to the form doesn't retroactively change what a past answer looked like.

Client intake (Collect)

• Fixed a data-loss bug: navigating away from a form (e.g. to the Documents page) within two seconds of typing an answer could silently discard it.
• Fixed: switching between applicants on a shared step could snap back to the first question instead of staying on the one you were looking at.
• Fixed: financial-year placeholders in document names (e.g. "FY2026 Tax Return") now resolve properly on the Documents list instead of showing the raw token.

AI and admin

• The AI Services admin area can now filter request logs and break down cost by individual AI process, drillable to a per-organisation view.

Security and reliability (behind the scenes)

• Closed a real gap: four database tables (contact warning flags and their assignments/dismissals, and per-user record-recency tracking) had no tenant-isolation policy at all at the database level. They're now policed, with an automated check that fails the build if any tenant-scoped table ever loses its policy again.
• Locked the CRM messaging page's advanced settings (raw provider credentials, channel routing) down to platform admins only, and fixed a bug where a dedicated SMS number could be silently bypassed in favour of the shared platform number.
• Moved the feedback "?" widget into the global navigation rail.
• Continued laying groundwork for the Chrome extension's shared, self-healing autofill profiles — plumbing only, no profile content yet.

This release gives Collect's Documents page a clearer, progress-driven redesign with CashDeck income verification built into the flow, has new deals title themselves from applicant names automatically, and closes out a run of bugs where a deal could look finished to a client but stuck to staff (or vice versa). We've also fixed a co-applicant navigation dead-end and hardened a few security-sensitive corners behind the scenes.

Client intake (Collect)

• Redesigned Documents view — the Documents page now shows a clear progress indicator and groups files by status, with the CashDeck income-verification card appearing inline instead of tucked away; once a CashDeck check is done, verifying again is a proper "redo" action rather than a dead end.
• Fixed: some co-applicant workflows could dead-end after finishing one applicant's questions, with no way to reach a shared or proxy-completed section.
• Fixed: after saving, the page now scrolls to your actual next gap instead of jumping back to wherever you happened to tap.
• Fixed: adding another applicant while still typing their name could quietly create duplicates; an empty nested dropdown and a shared-form bug on repeatable sections were also fixed.

Deals and workflows

• Deals now title themselves — a new deal picks up a sensible name from its applicants automatically, and keeps it current as applicants are added, instead of sitting in the pipeline as "Application 48213".
• Smarter card previews on repeatable sections — cards for a repeatable form (multiple vehicles, employers, and so on) now get an AI-generated title, amount and chip summary automatically, instead of needing a broker to configure one by hand.
• Fixed: a deal could show as fully answered to the client ("You're all done") while staff still saw it as incomplete, because sections that legitimately don't apply were still being counted as outstanding work.
• Fixed: a deal could get permanently stuck on a step with nothing to ask, when a whole run of steps in a row turned out not to apply.
• Fixed: a question gated on a co-applicant's answer could wrongly look unanswerable if that answer had been saved but not yet submitted.
• Fixed: purely informational "summary-only" steps no longer clutter the staff deal-detail view.
• Staff completing a deal on a client's behalf now see the same section headings and authored guidance the client sees, and pages where every question is gated off are clearly labelled instead of left blank.

Security and reliability (behind the scenes)

• Closed an XSS/open-redirect gap in the shared sign-in redirect handler.
• Fixed a tenant-isolation gap where moving a file between Drive folders could, under the right conditions, act on another organisation's file record.
• Continued building out SMS as a channel — a Marketing SMS manager (consent, unified inbox, bulk campaigns) and two-way SMS with number provisioning on a CRM contact — all still dark, not yet switched on for any account.
• Patched further vulnerable third-party libraries and hardened a batch of CI/CD pipelines flagged by automated scanning.

This release lets people create their own ZiplineOS account and link Google or Microsoft as a sign-in option, gives Rolodex contact pages a cleaner layout with a unified activity feed, and fixes several issues that could leave a Collect applicant stuck partway through a form. Broadcast also gets a unified custom fields manager, a real-execution journey test mode, and a fix for engagement rates that could read over 100%.

Account and sign-in

• Create your own account — the "Create Account" option on the sign-in page is now live, with a consistent password policy (minimum 12 characters, one uppercase letter, one number) across every signup surface.
• Link Google or Microsoft as a sign-in method — from Settings → Security, a password-first user can now add an SSO provider as an additional way to sign in.
• Fixed: emails sent through a connected Gmail account showed the raw address instead of the sender's name.
• Fixed: connecting Gmail or Outlook could briefly flash the standalone Registry page, or bounce to the wrong address, before returning to the app.

Client intake (Collect)

• Clearer logo and heading sizing — logos can now display larger without distortion, and form titles use a more consistent type scale.
• Fixed: selecting insurances could skip straight past the product step instead of taking the applicant to it.
• Fixed: a form could show a section heading with no questions under it, or a whole page that asked nothing.
• Fixed: in a multi-applicant deal, shared questions (like relationships) could become unreachable for the second applicant.
• Fixed: moving to the second page very quickly after starting a self-registration link could show a "failed to load form" error.

Rolodex (CRM)

• Redesigned contact page — a cleaner header showing last-active time, de-duplicated contact details, and a single unified activity feed replacing the separate history views.
• Richer email view — connected-mailbox emails now show the full conversation thread, with clean sender/recipient formatting instead of raw address lists.
• Fixed: open pipeline value and deal counts were being inflated by deals that were already Won, Lost or Cancelled.
• Fixed: clicking "All activity" from the contact overview could crash the page.

Broadcast and journeys

• Unified custom fields manager — contact and deal custom fields now share one consistent editor, brought over from Rolodex.
• Real journey test runs — testing a journey now executes it for real instead of only simulating it, alongside a polished flow-builder layout.
• Fixed: campaign engagement rate could read above 100%; campaign charts have also been rebuilt with a clearer trend line.
• Fixed: recalculating deal custom fields on a large organisation could run out of memory, and some filter comparisons (greater/less than, "does not contain") were silently computing the wrong values.

Documents

• Discovery cards in the deal PDF — a client's kept discovery-card selections (e.g. chosen policy options) can now be included as an image gallery in the generated deal PDF.

Reporting (Telemetry)

• Reworked standard dashboard — the deals-per-stage funnel now has per-workflow tabs, and breakdown charts fit their space more cleanly.

Security and reliability (behind the scenes)

• Enabled Data Access audit logging across our database, storage and secrets infrastructure, and added rate limiting to the anonymous Collect submission endpoint.
• Added monitoring alerts for unusual database read/write activity.
• Fixed a gap that could let a signed-in user record usage against another organisation, or push a usage counter negative.
• Continued laying groundwork for self-serve trial accounts and per-organisation email sending limits — not yet switched on for any account.

This release gives Broadcast a proper analytics view for every campaign, brings a consistent, faster-loading table style to every Broadcast list, and lets an organisation's Owner or Admin fine-tune how Drive's AI reads and files documents. We've also fixed a compliance gap in journey unsubscribe footers and closed out a batch of workflow-builder and Collect fixes.

Broadcasts and journeys

• Campaign analytics — a campaign's detail page now has an engagement chart (opens and clicks over time) and an overview tab with device, location and delivery-funnel breakdowns.
• Consistent, faster-loading lists — Campaigns, Templates, Journeys, Contacts, Lists, Segments, Suppression List, Background Jobs and the remaining settings tables now share one grid style, load without a loading-skeleton flash, and (on Contacts) fill the available height so more rows are visible at once.
• Fixed: a journey email sent to a contact who'd never received a broadcast could be missing its mandatory unsubscribe footer.
• Fixed: the Deal Custom Fields manager had gone missing from a contact's detail page — it's back.
• Fixed: the Unsubscribe Footer settings page showed two page headers stacked on top of each other.

Forms and workflows

• Subject grouping in the workflow builder — a product's grouped forms now render inside a visually distinct group so it's obvious at a glance which forms belong together.
• Fixed: opening a large workflow (200+ forms) could make the workflow builder crawl or fail to load, caused by hundreds of simultaneous requests loading form details one at a time.

Client intake (Collect)

• Fixed: the "click a field on the document to fill it" drawer didn't reliably scroll to the right field, had no way to save your answer, and never showed answers you'd already entered.

Reporting (Telemetry)

• Better-behaved breakdown widgets — donut-chart widgets now resize properly at any widget size, with a scrolling list and legend once there's more to show than fits.

Account settings

• AI document settings for Owners and Admins — a new settings page lets an organisation's Owner or Admin adjust the confidence thresholds Drive's AI uses for renaming and data extraction, and manage document categories.

Security and reliability (behind the scenes)

• Continued laying groundwork for AU-resident AI models across multiple providers — still not switched on for any account.
• Trimmed the size of AI responses in the document pipeline to reduce cost and latency, with no change to what brokers see.

This release makes self-registration links a lot more forgiving — nothing an applicant types is lost, and a visitor who never gets past the first question no longer leaves a stray deal behind. Documents that merge from a repeatable form (like a schedule of vehicles) can now pull a specific instance instead of always the first, and we've closed out a batch of account-settings and dependency fixes.

Client intake (Collect)

• No more throwaway deals — a self-registration link no longer creates a deal in your pipeline until the visitor actually answers their first question, so casual clicks and bots don't clutter your deals list.
• Answers that never get lost — Collect now queues every answer through a durable, offline-aware save queue that retries automatically across dropped connections, rate limits and page reloads, instead of risking silent data loss.

Forms and documents

• Instance-aware document merges — a merge field on a repeatable form (multiple vehicles, multiple employers, and so on) can now be pointed at a specific instance instead of always pulling the first one.
• Grouped product workflows (early access) — we've started rolling out a way to group a workflow's forms under a named "subject" for insurance-style renewal products, shown as a collapsible mini-step in Collect's sidebar. Early access only, not yet available for most accounts.

Reporting (Telemetry)

• Faster dashboard loads — KPI tiles and trend sparklines now run as a handful of grouped database queries instead of dozens per tile, cutting load time on a busy Telemetry dashboard.

Security and reliability (behind the scenes)

• Fixed: saving a brand colour or logo on the email branding page could silently revert on reload, or be wiped entirely by a stale browser tab.
• Fixed: rapidly clicking "Send Reset Email" on the forgot-password page could fire off several reset emails at once; error messages there are also friendlier now.
• Patched further vulnerable third-party libraries flagged by automated dependency scanning.
• Started laying groundwork to keep AI features hosted in Australia across multiple providers, and for an in-app Knowledge Base — both behind the scenes, not yet switched on for any account.

This release makes the Marketing Hub dashboard and journeys trustworthy at a glance, gives templates a proper sortable list, and fixes a batch of Collect and reporting rough edges. Behind the scenes, we've also started laying the groundwork for fully configurable, role-based dashboards and team targets in Telemetry — not yet switched on for any account.

Broadcasts and journeys

• Accurate dashboard numbers — the Marketing Hub dashboard's active-subscriber count now matches the contacts grid, and engagement/click-through rates now include journey sends as well as one-off broadcasts.
• Journeys on the dashboard — new Active Journeys and Active Enrolments cards, plus a live list of your busiest running journeys.
• Consistent enrolment counts — a journey's enrolled-contact count is now the same everywhere it's shown, and the enrolments table is a proper searchable, sortable, paginated grid instead of quietly stopping at 50 rows.
• Templates get a list view — templates default to a sortable list (name, type, subject, last updated) instead of a cards-only grid, and search now matches template names rather than incidentally matching text buried in the subject line.
• Fixed: sorting the contacts grid by Status or Source didn't actually reorder the rows.

Client intake (Collect)

• Fixed: the new applicant-selector field could show no options at all, regardless of how many applicants were on the deal.
• Fixed: on some workflows, a client could be advanced past the "who'll complete their part?" question for a co-applicant before answering it.
• Fixed: picking a date from the calendar could leave Continue stuck disabled when it was the last question on a page.
• Fixed: organisations using a custom Collect domain could fail to upload documents.

Reporting (Telemetry)

• Fixed a handful of Data Explorer and export rough edges: relative date ranges silently blocking Run, audit-log date filters erroring out, saved-query cards with a blank author, missing form-field columns, exports including hidden columns, and no warning when an export hit the 50,000-row cap.
• Configurable dashboards and team targets (rolling out) — we've started building fully configurable, role-based dashboards with drag-and-drop widgets, plus a targets sheet for setting per-person and team goals that dashboards can track progress against. Still behind the scenes — not yet switched on for any account.

Collect's swipe-card questionnaire loads noticeably faster now, and we've closed out a further round of defense-in-depth tenant-isolation hardening behind the scenes.

Client intake (Collect)

• Faster card loads — the swipe-card questionnaire now loads its images and workflow data in parallel instead of one at a time, cutting several seconds off the load for image-heavy forms.

Security and reliability (behind the scenes)

• A further tenant-isolation hardening pass tightened cross-organisation guards on several deal, document and annotation lookups. No live data exposure was found — these are defense-in-depth fixes that make the checks explicit rather than implicit.

This release adds a way to point a form question straight at one of the deal's applicants, gives Collect's summary steps more control over ordering and filtering, and fixes a handful of issues affecting who broadcasts reach and how workflow steps complete.

Forms

• Applicant selector field — a new field type lets a form question reference one of the deal's applicants directly, instead of re-entering their details by hand.
• Fixed: a per-applicant step summarising totals or counts from a shared, deal-wide form could wrongly show as unanswered, sometimes blocking the step from completing until the applicant re-entered data that was already there.

Client intake (Collect)

• Reorder summary sections — drag summary sections into the order you want them shown to the client.
• Filter what appears in a summary rollup — set a rule so a repeated-item summary only lists the instances that match, such as just the primary applicant's answers.
• Fill in missing forms from the summary — an empty "add" slot in a summary can now link and create the missing form in place, rather than sending the client elsewhere first.
• Fixed: navigating back could skip past a summary step you'd already acknowledged instead of returning to it.

Broadcasts

• Fixed: broadcast filters and saved segments now agree with the contacts grid on who's unsubscribed, so an unsubscribed contact is reliably excluded from sends regardless of how they were unsubscribed — CSV import, a merged contact, or a broadcast unsubscribe link.
• Fixed a data-visibility gap where workflow-preview and not-yet-completed self-registration contacts could appear in Broadcast audiences when they shouldn't have.

Security and reliability (behind the scenes)

• Patched several vulnerable third-party libraries flagged by automated dependency scanning across ZiplineOS's portals.
• Fixed: submitting a malformed organisation ID returned a raw technical error instead of a clean error response.

Two big themes in this release. Broadcasts and journeys gained a proper set of campaign controls — cleaner unsubscribe handling, pause-safe timing and one-click duplication — while forms gained rules that can hide or skip whole steps, not just individual questions. Underneath, we've begun rolling out an in-app AI assistant and a document autofill that reads an uploaded file and pre-fills a client's form. Several of these are being switched on gradually, so they won't all be visible in every account yet.

Broadcasts and journeys

• Campaign-ops tools for journeys — journeys now show clear status badges on each step, honour a suppression list so exited or unsubscribed contacts stop receiving messages, keep scheduled delays safe across a pause, and can be duplicated in one click to reuse as a template.
• Cleaner unsubscribe handling — an unsubscribe now records where it came from, and its links open in your own Collect portal (with custom-domain support) rather than a generic page.
• More reliable sends — broadcast templates now keep their title and subject through an edit, the contacts filter's Clear applies straight away, and message-delivery tracking was made robust across environments.

Client intake (Collect)

• AI document autofill (rolling out) — a client can upload a document and have the matching form fields read out and pre-filled for them to check, instead of retyping. Being switched on progressively.
• A brand-asset library so your logos and images are kept in one place for reuse across intake.
• Summary steps now roll up repeated sub-forms into one tidy review, and a deal's logo is now placed automatically — one less setting to manage.

Forms and workflows

• Step-level rules (rolling out) — a rule can now hide or skip an entire step, not only individual fields, so a workflow adapts to each applicant's answers. Rolling out gradually.
• Rules are now applied per applicant on shared forms, and conditional fields cascade correctly as answers change during a live fill.
• A batch of form-editor fixes — clearer validation messages, help text now flows through to AI extraction, and several display and accessibility fixes.

Contacts

• Contact import (rolling out) — import a contact list from a spreadsheet, with new custom fields created automatically from the columns and subscription status carried across. Being granted to accounts progressively.

AI assistant (early access)

• An in-app AI assistant has started rolling out behind the scenes — read-only to begin with, and off by default until it's enabled for an account. It isn't switched on in general accounts yet.

Client intake took a big step this release: you can now serve Collect on your own domain, and the discovery-card questionnaires can be packaged up and shared between accounts or reviewed by the broker back in the deal. Alongside the new features, a broad security-hardening pass landed behind the scenes.

Client intake (Collect)

• Bring your own domain — run the client-facing Collect portal on your own web address rather than a shared one, so the whole intake looks like your brand. Being configured per account.
• Discovery-card viewer for brokers — the swipe-card answers a client gives now appear back in the deal workspace for the broker to review at a glance.
• Card Packs are portable — export a set of discovery cards as a single file and import it into another account, so a good questionnaire can be reused.
• A cleaner fill experience — a read-only summary review with a link straight to the item to change, tidier navigation between steps, and swipe-only cards on mobile.

Broadcasts and journeys

• Verified sender identity — broadcasts now send from a verified domain with aligned DKIM, which improves deliverability and trust.
• Pause, edit, resume — pausing a journey lets you edit it, and pressing Resume publishes your edited version rather than the old one.
• Steadier automation — fixes to journey triggers, wait timing, conditions and the events view, so enrolments aren't dropped when several contacts are added at once.

Security and reliability (behind the scenes)

• A security-hardening sweep — stronger sign-in and access checks, safer handling of user-supplied content, HTTP hardening headers, and stored credentials moved into managed secret storage.
• An accessibility pass across the CRM and intake portals.

A small, security-focused release. It strengthens the way a sign-in session is verified before it's issued, so every session is confirmed against the identity provider first.

Security and reliability (behind the scenes)

• Hardened sign-in — a session is now verified against the identity provider before it's issued, closing a gap in how sign-in tokens were checked.
• Added an automated security-scanning step to our release pipeline, so new builds are checked for common issues before they ship.

Repeated form data — applicants, properties, income sources — is now far easier to read at a glance: it's collated into tidy, labelled tiles with running totals instead of a long repeated list. The browser extension can now be taught brand-new fields rather than only corrected on ones it already knows, and a broad email-safety pass landed underneath. Behind the scenes we've also laid the groundwork for branded deal PDFs, a new client-intake summary step and billing safeguards, all rolling out progressively.

Form summaries and rollups

• Multi-instance summary tiles — where a form is filled out more than once, the deal view now gathers every entry into clean, owner-labelled tiles with a group total, so a set of applicants or properties reads as an at-a-glance summary rather than a long list.
• A new Summary field you can drop into a form — a read-only rollup that totals every entry of a chosen form into one table, with a link straight to each underlying entry to edit it.

Browser extension

• The extension can now be taught brand-new fields, not just corrected on the ones it already knows — point it at a field on the page, preview what it captured, and confirm to save it. Its mapping self-heals as sites change, so auto-fill keeps working without a rebuild.

Security and reliability (behind the scenes)

• A sweep of email-safety fixes — contact names, custom fields, email signatures and invitation, welcome and secure-link text are now safely encoded everywhere they're placed into an outgoing email, so stored content can't run in a recipient's inbox.
• Tightened access checks on shared idea boards, so a private board can no longer be read, overwritten or copied by someone who isn't a member.
• Fixed a bug where publishing a workflow could drop newer item settings (such as delays, card decks and summary tiles) while merging changes.

On the way (rolling out progressively)

• Deal PDF export — generate a branded PDF of a deal's collected information, with named templates and separate internal and client-facing versions. Being switched on gradually, so it isn't visible in every account yet.
• A Summary step in client intake (Collect) that rolls several forms up into review tiles with an acknowledge-to-continue gate.
• A payment-method safeguard that asks for a saved card before an organisation adds billable users.
• Bank-statement retrieval in Collect, so a client can share their statements straight into their file.

The Deals page has been rebuilt around the way you actually work a pipeline — one place to switch between board, table, timeline and calendar views, filter by referrer, and focus on just your favourites. Alongside it, the AI deal summary now reads your uploaded documents, the browser extension tells you exactly what it filled, and a broad security-and-reliability pass landed underneath.

Deals workspace

• A redesigned Deals page — cleaner header, toolbar and deal cards.
• Four ways to see your pipeline — Board, Table, Timeline and Calendar — switchable from a single control, with a board minimap for navigating large pipelines at a glance.
• Filter by referrer and "Show favourites only", now applied on the server so they stay fast and consistent as you page through deals.
• The view switcher is fully keyboard accessible.

AI deal summary

• The AI deal summary now also draws on data AI has extracted from uploaded documents, not just typed form answers — so the summary reflects what's actually in the client's paperwork.

Browser extension

• Per-field feedback when auto-filling — see at a glance which fields were filled, skipped or failed.
• An advisory warning when the applicant you're filling for doesn't match the deal's active applicant, so you catch a mismatch before it lands.
• Smarter dropdown matching — option lists and value mappings are reconciled and normalised, so more fields populate correctly the first time.

Fixes and polish

• Fixed a bug where a saved delay setting on a workflow item could abort saving a form submission.
• Client-intake (Collect) magic links and the browser-extension API stay reliable now that tenant isolation is enforced end to end.

Security and reliability (behind the scenes)

• Personal information and secrets are now automatically masked in every server log through a single central safeguard, rather than relying on each log line to sanitise itself.
• Resolved a batch of code-scanning findings — regular-expression denial-of-service and cross-site-scripting hardening, including rendering footer links and logo previews through normalised URLs.
• The admin/kernel console is now restricted to platform super-admins.
• Continued supply-chain and CI hardening across the build pipeline.

When a deal has more than one applicant, client intake (Collect) now guides each person through their own part — organised into clear, sequential sections, with the option to invite a co-applicant to complete their details themselves while everyone else keeps moving.

Multi-applicant intake (Collect)

• Intake now splits into ordered sections — shared (joint) sections plus a section for each applicant — instead of one long interleaved form, with each section unlocking once the one before it is complete.
• For each co-applicant's section the primary can choose "I'll do it" and fill it in themselves, or invite the co-applicant to complete their own part through their own secure link — so two people can work on the same deal at the same time.
• An invited section shows live progress (for example, "Waiting on Jane — 1/3") and can be reclaimed at any time, keeping anything already entered.
• A completion review before submitting confirms every applicant's required sections are done.
• Each applicant's section pages through one question at a time, the same focused flow single-applicant deals already get.

Forms and workflows

• The workflow Documents tab now supports drag-and-drop and multi-file upload, with a single dialog to bulk-apply a category, description and "required" flag across the files — or edit each one before uploading them in a batch.
• A cleaner default form builder and workflow editor: advanced and power-user controls (field key, indexed and searchable toggles, JSON export, default entry steps, manual-creation form) can now be switched on per organisation rather than shown to everyone.

Deals

• The AI deal summary now refreshes automatically when something it reads has changed — form answers, stage, applicants or item progress — so the summary on the Summary tab stays current without a manual regenerate. It updates quietly in the background and never blanks the card.

Fixes and polish

• Form questions with both a minimum and a maximum now enforce both — previously a value over the maximum could slip through — and validation messages no longer show a stray "null".
• Desktop and sign-in background images are now served by ZiplineOS itself instead of a third party, so they load faster and reliably, with automatic recovery if a saved background ever goes missing.

Quality-of-life updates to forms — tidy up your form list, show answers in more useful formats, and build richer conditional logic.

• Archive forms you no longer use, and restore them later, to keep your active form list clean.
• New display formats for questions — amount with a frequency (e.g. "$X per month") and a number with a unit.
• More conditional-logic operators for form rules, including "does not contain" and additional numeric comparisons.

Two major additions: a self-service billing area with secure card payments and invoices, plus Contact Profiles that build a single, up-to-date picture of each client across all of their deals.

Billing

• A new Billing area with a clear account overview.
• View and download invoices as PDFs, including one-off invoices.
• Pay securely by saved card.
• Automated payment reminders and access handling for overdue accounts.

Contact Profiles

• A Contact Profile that consolidates a client's details gathered across multiple deals.
• Suggested profile updates are routed to a broker for review before they're applied — nothing changes automatically.
• Cross-deal matching keeps a client's information consistent everywhere it appears.

Forms and intake

• Live, as-you-type formatting for number, money and phone fields.
• Type-aware formatting of values across both the intake and deal views.
• A new Entity Reference question type that links a question to another form submission.
• Nested-form history coverage — keep adding entries (such as address or employment history) until a required number of years is covered.
• Mark forms and fields as internal-only.
• Client intake (Collect) layout fixes: removed unwanted horizontal scrolling, and validation errors now appear inline.

A redesigned Deal Workspace, a central control plane for AI features (including spend controls), and AI-assisted document analysis.

Deal Workspace

• A redesigned deal view with a Summary tab and an AI Deal Summary.
• New workflow views — Detailed, Checklist and Board — plus Focus and Compare modes.

AI management and cost controls

• A central place to manage AI processes and tailor them per organisation.
• Prompt management with versioning and promotion.
• An audit trail, dashboards and alerts for AI activity.
• Cost controls — spend estimates and configurable spend limits.

Document Intelligence

• AI-assisted document analysis, with an extraction preview built into the deal's Documents area.

Forms and intake

• Modern calendar date and date-time pickers for date questions.
• Validation improvements — ABN format checks, numeric minimums and maximums, and cleaner number entry (no spinner arrows or accidental scroll-to-change).
• "Required later" file requests are gathered in the Documents section.
• A new comprehensive Australian mortgage fact-find form template.
• Transactional emails now read as plain, personal messages.

Introduces AI Fact-Find — automatically draft answers from uploaded documents — alongside a wave of client-intake form improvements.

AI Fact-Find

• AI Fact-Find reads uploaded documents and drafts answers to your fact-find, which you review and apply before anything is saved.
• Configurable per organisation (enable or disable, and set a confidence threshold) from Admin settings.

Intake forms

• Richer question display modes, including grid layouts for dropdown and multi-select questions, shown consistently across the builder preview, intake and nested forms.
• Automatic page breaks between forms for a cleaner, step-by-step flow.
• A Back button alongside Continue in the form filler.
• The Add button moved below the cards in multi-instance and nested forms, with instant add and delete.
• Stronger completeness checks for nested and multi-instance forms.
• Answers are only flagged invalid once you leave a field, and clear the instant they become valid.

Deals

• The Lead-stage swim lane is hidden from deal views unless it's been granted.

More control over how each question is presented, plus visual polish in the client-intake (Collect) experience.

• Per-field presentation controls now live in the form builder, so you decide how each question looks.
• A slider option for money questions.
• Visibility rules are now fully portable — a form's show/hide logic behaves the same wherever the form runs.
• Collect polish — cleaner header and footer spacing, and the organisation name is hidden when a logo is shown.

A new validation engine that checks answers consistently as they're entered, plus a ground-up rebuild of the form-filling experience on phones and tablets.

Validation

• A new validation engine checks each answer against its question type — text, number, email, phone, date, selection, file and nested forms — consistently across the form-builder preview, client intake and deal views.
• Built-in checks for Australian postcodes, valid phone numbers, and required acceptances (such as ticking a consent box), plus contact-role rules.
• Errors show in a live preview while you build the form, so what you author is what the client sees.

Mobile and tablet intake

• A rebuilt mobile form-filler — the Continue button stays docked to the bottom of the screen, the page no longer jumps on load, and sizing is correct on iOS.
• Smoother paging between forms and steps on small screens.

Forms can now calculate values, reuse answers across repeated sections, and render the right number of copies automatically.

• A new Formula field — a read-only, calculated value derived from other answers that you can drop into merge fields and documents.
• Formula values on PDFs — calculated figures can be stamped onto generated documents.
• Aggregate merge fields for repeatable forms (for example, totalling across every entry), with the merge-field picker now finding fields across nested forms.
• Repeatable forms by cardinality — intake renders the right number of form copies automatically, such as one per applicant.
• A read-only Display (Message) question for adding instructions or notes inside a form.
• Per-document sending for signing, with reactions and clearer invalidation when something changes.
• A refreshed disclaimer checkbox.

A wave of polish across the client-intake experience, improvements to quote estimates, and fixes to the form rule builder.

Quote estimates

• An Include Residual toggle wired through to the calculation engine.
• A clearer finance disclaimer in place of the old comparison-rate note.
• A manual-continuation Continue button for quote integrations.

Intake polish

• Consistent branding and theme across the documents and completion views.
• Responsive width on tablet and mobile.
• Faster completion — the round-trips after submitting a form were collapsed.

Rule builder

• The field picker now shows fields from the selected form, and no longer renders blank for valid rules.
• Cross-form visibility rules preserve answers when forms are partitioned.
• Signatures are now applied to the finalised document.

Two new portals begin rolling out — an Inventory portal for tracking stock, and the foundations of an Invoicing portal.

Inventory (early access)

• Items with locations, stock levels and movements, and a per-item activity feed.
• Per-tenant tags to organise items, replacing the single category.
• Server-side search and pagination on the items list, inline on-hand editing, and a primary image per item.
• Scan-to-accumulate for fast stock-takes, and printable labels for registered machine codes.

Invoicing (foundations)

• An Invoicing portal scaffold, with per-tenant invoice numbers and SKUs.

Both portals are dark-launched behind access flags while they're built out.

A big performance pass on the client-intake experience, per-source lead forms for capturing enquiries, and cleaner default form presentation.

Performance

• The client-intake (Collect) experience loads noticeably faster — routes are code-split, the PDF stack loads only when needed, and pages stream in without long freezes.

Lead forms

• Per-source lead forms — capture different information depending on where an enquiry came from.
• A broker Lead section on the deal page, with anonymous enquiries hidden until they convert.

Forms

• A cleaner default presentation: inline, borderless, one question at a time.
• Image display fields — add images to forms with upload, size presets and a live preview.
• "0 = unlimited" repetitions for forms and workflow items.

This release brings every part of ZiplineOS under one consistent side navigation, introduces Flows for connecting outside tools straight into your CRM, and makes the CRM noticeably faster. You can also now install ZiplineOS as an app. Behind the scenes, we began rolling out a safer draft-and-merge way to edit form workflows, which is starting to reach tenants gradually.

Navigation & app experience

• One unified navigation rail now spans every part of ZiplineOS. The new collapsible side rail remembers whether you've pinned it open or tucked it away, auto-expands on hover, and keeps your icons in place as it slides — so jumping between your forms, Drive, Broadcast, CRM and the other portals feels like one product instead of many.
• Folder trees and in-context menus are built in: Drive shows its folder structure right in the rail, form workflows can be starred for quick access, and row actions are a click away without leaving the page.
• Install ZiplineOS as an app. You can now add ZiplineOS to your desktop or phone home screen and launch it in its own window like any other app.

Flows (connect your other tools)

• New Flows connector lets outside tools push data straight into ZiplineOS. A flow can create a contact in your CRM automatically — mapping names, email, phone, tags and custom fields from whatever sent the data.
• Clearer setup and safer duplicate handling. Each flow now has an endpoint panel showing its web address, keys and a ready-to-copy example, plus an always-visible field picker for mapping incoming data. Contacts are only treated as duplicates on an exact first-name, last-name, email and phone match.

CRM

• A noticeably faster CRM. Contact lists, dashboards and search have been reworked to load quicker, especially for larger organisations with deep contact hierarchies.
• More accurate billing — practice and test deals are now kept out of your usage and billing figures so your numbers reflect real client work.

Forms & workflows

• Safer workflow editing is on the way. We've started rolling out a new draft-and-merge way to edit form workflows — edit a working copy, review every change side by side, and merge it in only when you're happy, with a version history you can roll back to and deals that stay pinned to the version they were created on. It's being switched on gradually, so it may not be visible in your account yet.
• Cleaner editing throughout — friendlier in-app dialogs replace abrupt browser pop-ups, edits to form items save reliably even when you rename them, and new workflow-creation forms make starting a workflow from scratch quicker.

Admin & distribution

• Central catalog for sharing workflow packs. Admins can now version, review and publish reusable workflow packs from a central catalog and push updates out to tenants, with new admin screens to manage it all.

This release begins the rollout of Flows — a new way to capture data from anywhere and run it through your own automated steps, starting with an early pilot — and gives the Quote Tool a sharper, more reliable foundation for gathering client details and reusing your setups.

Flows (early rollout)

• Visual flow builder — design your own automations on a canvas: add steps, configure each one, and run a test before going live. This first version is rolling out in phases, starting with a pilot, so it won't appear for every account yet.
• Capture data from anywhere — a new secure intake link lets outside systems and forms send information straight into your flows, so nothing has to be re-keyed by hand.
• See every run at a glance — each flow keeps an execution log and live KPI tiles, so you can confirm work happened and track the numbers that matter.

Quote Tool

• Refreshed qualifying questions — the questionnaire now uses a single, consistent 36-field set, so you capture the right client details every time without duplicate or missing fields.
• Reuse your setups in one step — quote configurations can now be exported and imported as a file, making it easy to copy a working setup between environments or roll out an update.
• Smoother end-to-end quoting — runtime fixes and a more reliable two-phase save mean importing a published sheet and producing a quote now works cleanly from start to finish.
• Simpler calculation setup — the standalone calculation picker has been removed in favour of one clear scope selector, so there's only one place to choose how a quote is worked out.

Dashboard & access

• See the apps you're entitled to — your dashboard now shows the apps available to you based on your access rather than your subscription, so the right tools appear where they should.
• Sign-in and invitation fixes — Gmail-style email addresses (with dots and aliases) are now matched correctly at sign-in, and previously removed users can be re-invited and restored without getting stuck.

This release introduces OmniSearch — a single, fast search box that finds contacts, referrers and records from anywhere — alongside an early Quote Tool for client intake forms and a redesigned Contact 360 view in the CRM. Plenty of behind-the-scenes hardening rounds it out.

Search

• OmniSearch is here — one search box to find contacts, referrers and records across the app. It opens with your recent items, then fills in matches as you type, with typo-tolerant fuzzy matching so near-misses still surface what you meant.
• Filter as you search — entity-type chips and inline filter tokens let you narrow to just the entity you want (for example, only contacts) without leaving the keyboard.
• Searches your custom fields too — results can reach into custom fields on contacts and referrers, and you choose which fields are indexed for search. Items you open often rise to the top automatically, based on your own recent activity.

Collect (client intake)

• New Quote Tool step (early access) — intake forms can include a live quoting step that runs your calculation engine inline, takes over the screen for a focused quote experience, and maps answers into your quote logic. It is dark-launched behind a feature flag to start, so it rolls out gradually rather than being switched on for everyone.

CRM

• Contact 360 redesign — a cleaner contact view that pulls everything together in one place, including a new Rolodex dashboard. It rolls out behind feature gates.
• Linked form answers on the contact — values from a contact's linked intake forms now appear directly in the Contact Details sidebar, so you can see what the client told you without digging.
• Custom fields for referrers — add, edit and manage your own fields on referrer records to track the details that matter to your business.

Quoting

• Easier rule building — rule editors now offer schema-aware autocomplete, plain-English explainer cards for how figures are combined, and a clear summary of what changed each time you publish.
• Change safety — new drift detection flags when published quote logic has diverged from its source, helping you catch surprises before clients do.

This release brings the first preview of a new quoting engine that matches your clients to suitable lenders and works out indicative pricing — all built inside a safe sandbox you can test against sample applicants before anything goes live. It launches as a pilot with a small group of lenders. We've also added contact warning flags, automatic emails when a deal changes hands, and easier control over team roles and access.

Quoting & lender matching (early preview)

• Introducing lender matching — set up your lender offerings and tiers, then shortlist the lenders that fit each client's situation, with an AI assistant that can suggest policy rules and read them straight from a lender's PDF.
• A new pricing engine calculates an indicative final rate for each matched lender offering, so a shortlist comes with pricing attached rather than a manual lookup.
• All of this lives in a new quoting sandbox where you build and test lender policies against sample applicants before publishing — compare your changes against what's live, try live overrides, and import or export your policy collections and groups. It launches as a 10-lender pilot, with Pepper and Metro among the first.

CRM & contacts

• Added contact warning flags so you can flag a contact with a banner, pick from a catalogue of warnings, and dismiss or remove them as situations change.

Deals

• When a deal is reassigned, the new owner is now emailed automatically, so nothing slips through the cracks during a hand-off.

Team & access

• You can now deactivate and reactivate team members directly from the user edit screen, keeping access tidy when people join or leave.
• Introduced the first version of a roles and permissions matrix, letting admins create custom roles and set what each role can do.

This release brings a redesigned document experience with thumbnails and bulk upload, the first building blocks of in-app quoting, and a smarter AI pipeline that sorts and names client files automatically. It also delivers a sweep of usability, accuracy, and accessibility improvements across the Deal workspace, CRM, client intake, and reporting dashboards.

Documents & Drive

• Redesigned Documents tab — files now appear as visual thumbnails, with one-click bulk upload and the ability to download everything at once as a single ZIP.
• Automatic file sorting — uploaded client documents are now classified, checked, and renamed automatically by AI, so files land in the right place with sensible names without manual tidying.
• Safer file handling — deleting a document now asks for confirmation first, and document cards can be operated entirely by keyboard.

Quoting (new)

• Quoting groundwork — the first version of the in-app quoting experience is now in place, laying the presentation layer and provider connections that future quote features will build on.

Deals & workflows

• A more reliable Deal workspace — the back button now returns you to the Kanban board with your tabs intact, deal titles can no longer be left blank, deal cards show tidy compact currency, and deleting notes asks for confirmation first.
• Manage applicants on a deal — you can now remove an applicant from a deal directly, with sensible per-role limits on how many applicants a deal can hold.
• Clearer progress tracking — the stage navigator now counts only the items that are actually required, so the "complete" tally reflects what genuinely needs doing.
• Cleaner Kanban views — irrelevant stage columns hide based on your status filter, table sorting handles empty values gracefully, and workflow status labels read in plain English.

Collect (client intake) & forms

• Smoother client intake — forms now auto-advance correctly end to end, hidden fields no longer leave awkward blank gaps, and step visuals and completion indicators were polished throughout.
• More dependable form logic — visibility rules now handle unanswered and outstanding-document fields correctly, and form templates must have unique names within each organisation.
• Safer portal links — revoking a client portal link now asks for confirmation first, so access can't be cut off by accident.

CRM

• Better contact search — you can now find contacts by phone number, including matches across different number formats.
• Quick Actions that work — the Log Call and Add Note buttons on a contact now do what they say, and the Add Contact dialog lays out cleanly on every screen size.

Broadcast & marketing

• Flexible email starts — the broadcast wizard now offers both a visual builder and an HTML start-from-scratch path, with clearer labelling that the email body is markdown.
• Safer sending — the Send Email button stays disabled until a subject, body, and recipients are all present.

Dashboards & reporting

• More accurate Telemetry charts — deal statuses (including On Hold) now show as their own slices, monthly trends no longer drop recent months, currency and dates display in correct Australian formatting, and "new this month" counts reflect the actual calendar month.
• Clearer audit logs — action filters are complete, details render as readable text instead of raw code, and custom date ranges are validated.

Everywhere

• Navigation and polish across the board — proper 404 pages for unknown links, working deep-links and breadcrumbs, the sidebar auto-collapsing on tablets, and dozens of small accessibility, layout, and wording fixes throughout the app.

This release lets AI read a client's uploaded documents and fill in their form answers automatically, and introduces referrer records so you can start tracking who's sending you business. Forms also got tidier, clearing away answers that no longer apply.

Collect (client intake)

• AI document data extraction — upload a document and let AI read it and fill the matching form fields for you, so clients and your team spend less time re-typing details that are already on the page.
• Cleaner forms — when a question is hidden because it no longer applies, its answer is now cleared on save, so saved forms only keep the answers that actually matter.
• Various small fixes and polish across the form-filling experience.

CRM

• Referrer records (early access) — a first phase of referrer tracking lands, with a dedicated portal screen to create, view, and manage referrers so you can start keeping track of who is referring clients to you. More referrer functionality is on the way.

This release gives your client intake forms a proper documents workflow, lets clients defer non-urgent information, and supports filling out repeatable sections inline — so clients can get started faster and you collect everything in one place.

Collect (client intake)

• Documents in Collect — clients can now see a dedicated Documents section and act on their files inline (upload, view and manage) without leaving the form.
• "Required Later" toggle — mark information as needed down the track rather than blocking submission, so clients can get started straight away and finish the rest when they're ready.
• Repeatable sections inline — forms that need more than one of something (multiple applicants, properties or income sources) can now be filled out as inline multi-instance forms, right where you are.