What's new
Product updates
Notable shipped work, features, security improvements, and the quiet polish that compounds over time. Updated on every material release.
- April 2026Feature
Plan-level feature gating, marketing site launch, and the command palette
- Plan tiers now enforce capability packs at the API layer. Starter tenants physically cannot enable Growth-only features (AI assistants, custom domain) even if they guess the endpoint
- Public marketing site live at hall.colport.io with pricing, compliance details, trainer directory, and FAQ, all EU-indexed and AVG-compliant
- Cmd+K opens a keyboard-first command palette across the app, three grouped sections (Admin / Learner / Settings) plus live search of courses, paths, trainers, and people
- April 2026Polish
Accessibility and performance pass
- Skip-to-content link added to every page; all landing-page `<main>` elements now carry proper landmark IDs
- Loading states replaced across admin list pages, skeleton rows instead of spinners for perceived-performance gains
- Relative time display on announcements, leads, certificates, and notifications, locale-aware via Intl.RelativeTimeFormat
- March 2026Feature
B2B signup rebuild, domain-based self-join and SSO
- Open self-signup replaced with three flows: sales-led org creation, domain-based employee self-join via a shareable link, and explicit manager invites
- Magic-link email verification for new employees, no passwords stored server-side until the learner sets one
- OIDC SSO presets for Microsoft Entra ID, Google Workspace, Okta, and generic OIDC IdPs (Enterprise plan)
- March 2026Security
GDPR hardening
- AES-256-GCM encryption for SSO client secrets at rest; encryption key rotated via ENCRYPTION_KEY env var
- Lead capture pipeline documents lawful basis per field and auto-purges rejected leads after 30 days
- Articles 15/17/20 (access, erasure, portability) fulfillment moved to /me/my-data self-service endpoint
- February 2026Feature
Autonomous compliance engine
- Certificate renewal reminders sent automatically at 30, 14, 7 and 1 days before expiry
- Compliance evidence written to a hash chain (Enterprise plan): changing or deleting a record breaks the chain, and an admin can verify it
- January 2026Platform
Platform foundations
- Every query scoped to the organisation in the application
- Scheduled jobs run beside the app for reminders, digests and clean-up
- Hosted in the EU, on a Hetzner server in Germany; text messages through CM.com in the Netherlands
Subscribed customers get release notes by email. No separate sign-up needed.