1 October 2026
v0.101.0
History you can read
- Settings > Activity now says what happened in plain words, for example "Pipeline changed from Contacted to Renewal sent", instead of only naming the action.
- Search your account's activity by what happened.
- A contract's page links admins to its full audit history, with every file, note and comment on it.
- In Activity, a contract is a link while it still exists in your account; one that was deleted is shown by name.
- Security and stability improvements.
30 September 2026
v0.100.0
Every line checked
- Confirmation windows for renewing, pausing, previewing an alert, upgrading and deleting your account now look and behave the same way.
- When sign-up cannot accept your company name, it now says so next to the company name, instead of saying your email address is already taken.
- Choosing a weekly digest day outside Monday to Sunday is now refused with a clear message, instead of being saved as no digest.
- Security and stability improvements.
30 September 2026
v0.99.0
A complete record, and a door you can close
- Account admins can remove a team member in Settings, Team. They are signed out everywhere at once, the API tokens they created stop working, and their contracts stay, with nobody assigned. Their comments and notes stay under their name.
- Account admins can make a teammate an admin, or an admin a member. The account always keeps at least one admin, and someone who stops being an admin loses Settings and Billing straight away, even on a page they have open.
- Turning off two-factor authentication now asks you to sign in again when your last sign-in was more than 20 minutes ago, the same as changing your email or password.
- Only an account admin can permanently delete an archived contract. Everyone can still archive and restore contracts.
- Activity now shows when your phone number for text alerts changes or is verified, and when WhatsApp alert consent is given or withdrawn.
- Changing your email or password after being signed in for a while no longer breaks the settings page - it asks you to sign in again.
- Security and stability improvements.
29 September 2026
v0.98.1
Patch fixes
- Activity now shows the address each action really came from. Until today every entry showed our own server's internal address.
- Security and stability improvements.
29 September 2026
v0.98.0
Search it, export it, keep it only as long as needed
- Settings, Activity can be filtered by team member, category, contract or file, dates and outcome, and shows times in your account's time zone.
- Open any entry in Activity to see exactly what changed, where it came from, and, for a support session, who from Expiro was signed in as whom.
- Account admins can download the account's whole activity history as CSV or JSON from Settings, Activity, without asking us. The download appears in Activity too.
- The account data export now contains your account's complete activity history - it used to stop at the last 1,000 entries.
- Activity records are now kept for 12 months and security records for 24 months, and records that belong to no account lose the IP address and browser after 90 days. The privacy policy says so.
- Security and stability improvements.
28 September 2026
v0.97.0
Every sensitive action on the record
- Your Activity tab shows every sign-in and sign-out on your account, and every failed or blocked attempt, with the address and browser it came from.
- You can see when a member of the Expiro support team signed in to your account, who it was, and when they left.
- Changes to how you sign in are recorded: a new password or email address, two-factor turned on or off, new backup codes, and the team-wide two-factor rule.
- API tokens created, revoked or refused, and every export of your contracts or account data, appear in Activity.
- Alert channels connected, changed or tested, custom fields, templates, team invitations, billing changes, files, notes, comments, renewals and imports appear in Activity too. A webhook address, a password or a note's text is never shown there.
- The privacy policy now describes the security records kept about sign-ins and refused attempts.
- Security and stability improvements.
28 September 2026
v0.96.0
Who did what, provably
- Your Activity tab shows who changed what on each contract, field by field, including changes made through the API and Zapier.
- The activity history can no longer be edited or deleted by anyone, and it is sealed, so any change made to it afterwards would show.
- A client's email address and your notes appear in the history as changed, without their contents.
- The privacy policy now says the activity history records the IP address and browser behind each change, and that it is deleted together with your account.
27 September 2026
v0.95.0
Every signup accounted for
- The billing portal offers every plan, monthly and annual, when you change your subscription, and cancelling keeps your plan until the end of the period you paid for.
- Fixed: the privacy policy and the terms showed today's date as their last update. They now show the date they actually changed.
27 September 2026
v0.94.0
Where agencies already work
- Drag a file onto the contract PDF reader, the CSV import or the attachments card, or click it to choose one. The area lights up while you drag.
- The contract PDF reader takes one file: choosing another replaces the one you picked, instead of refusing it.
- Security and stability improvements.