What has changed, and when.

Added

• You agree to the terms before you start, and you are told which version you agreed to. Signing up - or signing in for the first time from today, if you already have an account - puts the Terms of Use, the Privacy Policy and the Refund Policy in front of you, each with a link to read it and its own checkbox. One box per document rather than one for the set: "I have read and agree to the Privacy Policy" as its own affirmative act is a better record than a single tick whose label lists three documents in a row. You sign by typing your name and your company, which is a valid electronic signature under E-SIGN and UETA, and the version of each document, the time, your name and your title are recorded with it.

• Agreements, in the account menu. Everything this account has signed: the version of each document, when it was signed, who signed it, and a link to the filed PDF once it exists. "Which version did I agree to" is the first question anybody asks later, and it now has an answer on screen rather than in a support ticket.

• A signed PDF of every document is filed under the company that signed it. Each packet is rendered to PDF with the signature block on it and filed in a folder named for that company, so there is a copy neither side has to take on trust. Filing happens after your agreement is recorded and cannot hold you up: if it fails it queues and retries, and Agreements shows the packet as still filing rather than pretending it is done.

Fixed

• The workspace no longer slides 52px sideways the moment you touch the sidebar. With auto-hide on, the collapsed rail sat in the layout while the expanded panel did not, so the first hover pulled it out of the flow and the whole content area jumped left - under the pointer, and under the panel that had just opened. A table that moves sideways while you are aiming at it is how you misclick a status dropdown.

• Turning auto-hide on now visibly does something. The pin button is inside the sidebar, so after clicking it the button still held focus and held the panel open - the setting looked inert until you clicked somewhere else.

Added

• Iso Sketch: draw the isometric when nobody issued one. It sits on the Isometrics tab beside Takeoff, and the pair divide the work honestly - Takeoff reads a drawing somebody else issued, Sketch draws one when there is none. Runs, fittings, valves, flanges, olets and pipe supports, kept in real 3D so the take-off cannot drift from the picture, saved on the isometric's own record. It is also free and standalone at /iso-sketch/ with no signup. Two limits worth knowing before you trust it: it does not check the drawing against a piping spec, and cut lengths come off nominal B16.9 and B16.5 dimensions rather than a manufacturer's certified ones.

• The register row is written on the first stroke, not on the click. Press Sketch New Iso and you get a live sheet; nothing is written until something is drawn, so a misclick leaves no empty line for somebody to find later and wonder about. The row is numbered SK-01 upward and seeded from the title block you filled in - line number, service, area, rev - so the register agrees with the drawing rather than carrying a placeholder nobody goes back to update.

• Status on a new sketch is left blank rather than As-Built. A drawing somebody has just started is not an as-built, and a status that arrives pre-filled is one nobody ever sets on purpose - which is how a sketch still in progress ends up in a turnover package presenting itself as the finished record.

• A bill of materials that counts joints rather than flanges. A gasket goes between two faces, so two flanges bolted face to face are one joint and not two, and a flanged valve with mating flanges drawn is still two joints and not four. Gaskets and stud bolts are counted that way or not at all - a bolt list that is quietly wrong is worse than no bolt list. End connection is part of the part: a socket-weld elbow rolls up separately from a butt-weld one, because they are separate things to order and merging them is how a take-off goes out short.

• A valve list, a support schedule and a spool list, all read off the drawing. Valves are tagged as they are placed and numbered per type, because tagging afterwards means hunting the ones that were missed. Supports carry the mark, the type, the distance along the run and the pipe centerline elevation - set the plant elevation at model zero in Setup and every elevation the app reports is an elevation rather than an offset from wherever the first click landed. Spools are numbered from the field welds that make them, so re-cutting the breakdown renumbers them instead of leaving typed numbers wrong with nothing to notice.

• A revision block, revision clouds and triangles, general notes and a symbol legend. The title block reads its rev from the latest row of the revision history instead of carrying its own, so a sheet cannot show two different revs at once and flag neither. Notes are numbered by the drawing at print time, so inserting one does not leave every "see note 3" on the job pointing at something else. The legend lists only the symbols this sheet actually uses, drawn by the same code that drew them, so the chart and the drawing cannot drift apart.

• A highlighter, on redlined drawings and on sketches. Five colours, drawn under every other mark, for showing the lines that are in a hydrotest pack - it colours the drawing without hiding it, and the pen marks and tags still read through.

• Flange tags on drawings, and a flange legend on the printed iso sheet. A green hexagon placed the way a weld tag is: pick the tool, click the flange, choose it from the flange map. The tag points at the map row rather than copying it, so bolting up and recording a torque does not leave the drawing stale. A hexagon because on a photocopy or a fax the green, the red and the blue all come out the same grey, and the shape is what still tells them apart.

• The flange legend prints what a signature actually rests on - flange number, size and class, gasket, bolting, torque range, and whether it is recorded as torqued. Two exceptions are called out separately, because they are different failures: a tag with no row behind it in the flange map has no gasket, bolting or torque anywhere, and a tag that resolves but is not marked torqued is an open joint on a document somebody is about to sign. Blank prints as NOT RECORDED rather than a dash - "No" is a decision, blank is nobody having looked.

• A Tagged On column in the weld and flange exports, listing the drawings and pages each one was actually bubbled on, beside the drawing it is meant to be on. Those two are read together: one is where it should be, the other is where it has been marked. On the weld map, where nothing links a bubble to a joint number but the number itself, it matches on that alone and reports "(not tagged)" rather than guessing.

• Password reset. There was no way back into an account for somebody who had forgotten their password - not broken, absent. The confirmation says "if that address has an account" whether or not one matched, so it cannot be used to find out who has an account here one guess at a time. New signups now confirm by email as well.

• Thirteen authentication and security emails written for this product, replacing the stock ones: the six that sign you in or change your address, and seven notifications for things like a password or an email being changed, which were not enabled at all before. They come from notifications@ rather than a no-reply address, because somebody told their password just changed who did not change it will reply to that message, and a no-reply answers a security report with a bounce. None of the notifications carries a button - a message reporting something that already happened does not need one, and one that has a button teaches people to press the button in the phishing copy.

Changed

• The eight actions under your name in the sidebar are now one menu. Help, Support, Enterprise Console, AI Credits, Export Folder, All Projects and Log Out were stacked in the bottom corner, taking a third of the sidebar's height and pushing the tab list into a scrollbar of its own on a laptop screen. They are the same actions, now behind the account pill. Closed, the pill still carries the support count and warns when the AI credit balance is zero - a balance is not an alert, but an empty one is the difference between a button working and refusing.

• A callout on a redlined drawing is now the same bubble the sketch draws. The old box fitted about twelve characters before the text ran over its border; the number now sizes itself, the leader starts at the circle edge, and the delete control is a real control rather than a rectangle worked out by arithmetic. The bubbles print as vector over the page instead of being resampled along with the scan. Every existing markup keeps its position - only the shape changes.

• The box and arrow colour pickers are gone from redlining. The colour means something now - red for a weld, blue for a heat, green for a flange - so it is not the user's to pick, and a label under the bubble says which on a mono print where all three come out grey.

• Faint text and small amber text are readable now. Section headings, field labels, table headers and menu headings sat between 2.6:1 and 3.3:1 against their panels, where small text needs 4.5:1. Measured on the running page in both the dark and light themes rather than eyeballed. The amber on buttons, borders and the big figures is unchanged.

Fixed

• The printed iso sheet has never fitted the paper. Every one ever printed was about 0.6in taller than the printable area, which pushed its footer onto a second page - invisible while nobody looked, because the overflow is white. The sheet now measures inside the page in every case tried, from four tags up to sixty welds and thirty flanges.

• The weld and flange legends now say when they have run out of room. They share one fixed column on the sheet, so the rows are counted - welds first, because an unlogged weld is the costlier omission - and anything that will not fit prints as "+ N more" instead of running off the edge in white.

• Three modals ignored the width they asked for. Export Folder, What's New and Send Punch Items were all rendering 520px wide however wide they were written to be, and on a phone they now clamp to the screen rather than pushing the page sideways.

• The CSV import preview was crushed instead of scrolling. On a short window the preview table was squashed from 264px to 108px - the modal now scrolls and the table keeps its height.

Security

• A signed-in account no longer holds TRUNCATE on any table. Supabase grants a signed-in role all eight privileges by default, and row-level security does not apply to TRUNCATE: every policy here describes which rows you may touch, while a role holding TRUNCATE empties a table without reading a row or consulting a policy. Narrowed to what the app actually uses, with delete given back only on the six tables the app deletes from. It was never reachable through the API - it was a privilege nobody had chosen.

• A database function had EXECUTE granted to PUBLIC. A trigger guard, not callable directly and not exposed over the API, so there was nothing to reach. But it is what an audit reads, and one function answering yes is what makes the next audit ambiguous. Removed.

Fixed

• A fault on our side no longer looks like a fault with your drawing. When document reading was unavailable, the takeoff showed you the raw error from the service behind it — which named an internal credential, read as though your drawing was the problem, and buried the one thing that actually mattered: the failed read did not cost you a credit.

  It now says plainly that reading is temporarily unavailable, that it is our problem and not your drawing, and that no credit was used.

Added

• Credits can be given out without a purchase. Until now the only way a credit could exist was a completed card payment, which made a few ordinary things impossible: testing a document read end to end, running a demo, setting up an enterprise account that pays by invoice, or handing a pack back to somebody the software let down.

  Grant AI credits is now in the admin console. It records who granted them and why, and it does not count them as revenue — a comped credit was never sold, and the number you would reach for to measure takings stays truthful.

  The alternative it replaces is a hand-written database update, which leaves no record of who did it or why and is easy to point at the wrong account.

Fixed

• Credits bought before you had a company are no longer stranded. If you bought a pack as an individual and later created or joined a company, the balance stayed attached to you while everything that spends a credit looks at the company's — so you could hold a hundred paid credits that nothing would ever use. Granting now always targets the balance your own reads actually spend from.

  If you are already in this position the balance is not lost; it needs moving to the company, which support can do.

Fixed

• The credit balance on screen is now the balance that actually gets spent. You could be shown 100 credits and still be told you had none — because the two numbers were coming from different places.

  A credit balance belongs either to you or to your company. If you have both — a personal balance from before you joined a company, and your company's — the app could see both and was picking one at random to display, while the server always spends the company's first. Read one, debit the other, and the feature looks broken when the only thing wrong is which number you were shown.

  The app now works out whose balance applies exactly the way the server does, and shows that one. The credits screen also says who holds it — you or your company — so if the two ever disagree again it is visible instead of silent.

Fixed

• You can buy AI credits from inside a project now. Every feature that spends a credit is something you do while working in a job — reading a certificate into a record, reading a material list off an isometric. The only place you could actually buy one was the Read from document panel inside an Add-record modal, on a tab that happens to have a file field. Run out mid-job and there was no way forward from the screen you were on; the takeoff simply said you had none left and stopped.

  AI Credits is now in the sidebar of every project, with the balance on it, so you can see where you stand without opening anything and top up without leaving what you were doing. It is on the account screen beside Billing as well, which is where people go looking for what they are paying for.

  Auditor seats do not see it. They are free and read-only and cannot spend a credit, so offering them one to buy would have been selling something that cannot be used.

Changed

• The isometric takeoff tells you the price before you press the button. It now shows your balance and what the drawing will cost — one credit per sheet — beside the read button, and offers Buy credits in its place when there are not enough. Finding out by pressing it and reading an error was the first thing this feature did to anyone who tried it. If you run out part-way through a multi-sheet drawing, it takes you to the top-up rather than an error box.

Added

• The takeoff can read a drawing that has no text on it. Most issued isometrics cannot be read by the takeoff, and 1.15.1 explained why: their lettering is plotted as line work rather than as text, so the bill of materials is printed on the sheet and is not in the file. There is nothing to transcribe.

  Now, when the takeoff comes back empty, it offers to read a picture of the drawing instead. One AI credit per sheet, and you press the button — it never happens on its own, and it never happens before the free path has had its go.

  It works the way a person would: one look at the whole sheet to find where the material list is, then a close look at that part alone. That crop is the whole trick — a whole isometric sent as one image puts the table text at a few pixels tall, and nothing can read that either.

  Every line it proposes lands in the same review screen and is marked AI Read rather than Extracted, on screen and on the saved record. That distinction is the point. A number transcribed from a drawing's own text is exact; a number read off a picture is a suggestion. A takeoff sheet that recorded them the same way would be hiding the one thing the person checking it most needs to know.

  It still will not guess. A quantity it cannot read stays as written and is flagged, an image too poor to read is reported as such rather than half-transcribed, and the credit is handed back when a read returns nothing.

  Where you can get it, the better fix is upstream — ask for the PDF to be re-issued with TrueType fonts, or for the Isogen file. Then the free, exact path works and none of this is needed.

Fixed

• The takeoff now tells you which kind of unreadable a drawing is. Run it against a real issued isometric package and you often get nothing — but not because it is a scan. A great many CAD exports have their lettering plotted as line work rather than as text, which is what AutoCAD does with SHX fonts. The drawing is fully vector, the bill of materials is right there on the sheet, and every character of it is line segments. Nothing can read that.

  Worse, a logo or a stamp often survives as real text on those sheets, so the takeoff counted five characters as "the text was readable" and reported that the sheet must carry no material list. That is the most misleading thing it could have said, and it sent you looking for a fault in the drawing instead of asking for a re-plot.

  It now works out what the page is made of and says so: line work plotted from SHX fonts, a scan, or a genuinely readable sheet whose column headings it does not recognise. Each one has a different answer, and only one of them is worth sending back to the drawing office.

Added

• Material takeoff from an isometric. Open an isometric with its PDF attached, press Takeoff, and Hot Pass reads the bill of materials, the cut piece list and the title block straight off the drawing. Check what it found, correct anything that is wrong, and the lines land on a new Iso Takeoff tab — every isometric on the job in one list, with Summary for Purchasing rolling it up into one row per component and size.

  It reads the PDF's own text rather than looking at a picture of it, so nothing is guessed and nothing is spent: no AI credits, no upload to anybody, and a quantity that comes back is a quantity that is printed on the sheet. Isometrics out of Isogen, SPOOLGEN, Plant 3D, CADWorx and E3D all carry that text. A scan does not, and it will tell you so rather than returning an empty takeoff that looks like a drawing with no materials on it.

  Nothing is saved until you press the button. Every line the software was unsure about is marked before you do, and any line you edit is filed as Corrected rather than Extracted, so the sheet says which numbers came off the drawing untouched and which a person put there. Quantities it cannot read as numbers — "AR", a blank — stay as written and are counted separately on the summary, because a total that quietly treats them as zero is short by exactly the amount nobody has decided yet.

• Piping Spec on the isometric register. The class a line is built to, read off the title block by the takeoff along with the line number, service, area and revision. Ticked fields only fill blanks — anything you have already typed is left alone.

Added

• An audit trail, on every plan. Until now a record told you who wrote it and never who changed it afterwards, so when a client's auditor asks why a weld result reads differently than it did in March, the honest answer was that the system did not know. Every change to a record, project, membership or subscription is now logged with who, what, when, and which fields moved. Your admins and your auditor seats can read it; nobody can edit or delete it, including us through the app.

  It is written by the database rather than by the browser, which is the part that makes it worth having: the software performing a change does not get to choose what to report about it.

  This is not an Enterprise feature. Every feature is on every plan, and an audit trail that only paying enterprises got would make that untrue.

• Your agreement, on the Company Account screen. If you are invoiced rather than paying by card, your owners and admins can now read back what was agreed — payment terms, PO number, seat commitment, rate, who invoices go to, and when it renews. Read-only, and read-only in the database rather than by a disabled button. It stops the commonest enterprise question being an email.

• One contract can now cover several divisions. A company can be recorded as belonging to a parent, with a single agreement covering everyone under it and a rollup of seats and live projects per division for reconciling the invoice. A parent gets no access to a division's records — not the projects, not the logs, not the roster. It is a commercial relationship, not a way in.

• A security and architecture page at /security. Where the data lives, every subprocessor and what each one sees, how tenant isolation is actually enforced, and what is not built — no SOC 2, no SSO, no penetration test. Written for whoever has to sign off on a new vendor, and it opens with the gaps rather than burying them.

Changed

• A negotiated retention window is now enforced by the database. The standard 90-day read-only window after cancellation was a constant in two places; a longer term agreed in a contract is now set on the account itself. The database will not accept a term shorter than the published 90 days, so the standard is a floor rather than a starting point.

Fixed

• The deadline in the export email sent at cancellation was calculated from a fixed 90 days rather than read from the account, so a customer with a longer agreed term would have been told the wrong date.

Security

• A database function that returned billing terms could be called by any signed-in user for any company, not just their own. It now checks the caller before reading anything. No evidence it was used this way; the exposure existed for about a day.

Added

• An Enterprise and Partners page, at /enterprise. The Enterprise tier has been on the plans grid since the beginning and its button opened a mail client. It now leads to a page that says what the tier actually is: volume pricing above 15 seats, invoiced billing on your own payment terms, retention and export commitments written into the agreement rather than left to the default, and free unlimited auditor seats. There is no enterprise version of the software, which the page says first — every feature is already on every plan, so an enterprise agreement here is about paperwork, not capability.

• The page answers the other question too: can we offer this to our own customers. Those terms are not written yet and the page says so plainly, names the three shapes that have been raised — resale, referral, or one contract across several companies — and lists what does not exist: no partner portal, no white-labelling, no account spanning the sibling products, no usage reporting. All three products are shown live, each with the one limit worth stating up front — for the code shop, that it records which data report an item was certified on rather than printing ASME's copyrighted form.

• An inquiry form that asks what the arrangement is, not just for an email address. Which products, whether it is for your own crews or your customers, rough scale, and what you are trying to do. It reaches Jacob directly.

• Two FAQ entries on the landing page — being invoiced instead of paying by card, and offering Hot Pass to your own customers.

Changed

• The Enterprise entry in the Plans menu and the mobile menu now open the new page, and a Partners entry sits beside it.

Fixed

• A record can now point at any drawing the project has. Welds and materials could only reach part of the Drawings & Project Files section: a weld could name an iso but not an asbuilt, and a material could name an asbuilt but not an iso. Alignment sheets and bore profiles were unreachable from everywhere - filed in the app, and invisible to the record that needed them. Every drawing reference now offers DWG files, isometrics, P&IDs, alignment sheets, asbuilts and bore profiles.

• Test plans can list any sheet under Drawings Covered. The picker reached only the Drawings tab, so a plan covering an iso or a P&ID had nowhere to say so.

Added

• A Drawing / Iso reference on five more record types that had none at all: coating, NDE documentation, heat treatment, welding parameters and civil. Each of them describes work done at a place on a sheet, and none of them could say which sheet.

Added

• Export straight to OneDrive, SharePoint, Google Drive or Dropbox. Pick a folder once under Export Folder in the sidebar, and every export - CSV, project snapshot, compiled job book - is written into it instead of going to Downloads. Point it at a folder your cloud client already syncs and the file is up there, shared with whoever that folder is shared with, seconds later. There is no account to connect: Hot Pass writes the file to your own machine and your sync client does the rest, so nobody has to grant us access to anything. Needs Chrome or Edge on a desktop; everywhere else exports download exactly as they did before.

Added

• Welding Parameter Record, on request. A new tab under Quality Assurance, and a free printable blank form (HP-WP-01). The weld log already said which procedure applied and the WPS held the ranges it qualified - this records what was actually set at the machine: amps, volts, travel speed and heat input, one row per pass from root to cap, with preheat and interpass measured beside the values the procedure requires. The weld and the WPS are picked from their own tabs rather than typed, so every record traces back to a real joint and a real procedure, and there is one field for the question an inspector is actually asking - was every parameter inside the range.

Security

• A Content-Security-Policy is now sent with every page. It restricts where the app is allowed to load code from, so a script injected into a record or a file name cannot pull in an attacker's own script, repoint the page's links, or post a form somewhere else. Nothing about using Hot Pass changes.

Fixed

• The auto-hiding sidebar never worked. Turning it on did nothing at all - the setting saved, and the sidebar stayed where it was. It now collapses to a narrow icon rail and slides back open when you move onto it or tab into it.

Added

• Bell Hole Report blank form, printable free from the forms page and filable on the Safety tab. Two sides: what the in-line inspection predicted written down beside what was actually found, excavation and as-found pipe data, coating and cathodic protection readings, an eight by nine wall thickness grid, remaining strength, disposition and backfill.

• Version and change history. The version now appears in the app, is printed on the cover of every compiled document, and is published at /changelog. A job book can now be traced to the version that produced it.

Fixed

• Punch list share links pointed at the wrong website. Links created before this release open a "page not found" on a different site and cannot be repaired - the token is stored hashed and shown only once. Revoke any share you sent before 31 July 2026 and send it again.

Security

• Every link the system emails - share links, project invitations, payment redirects, data retention notices - is now checked against the addresses this product owns, and refuses anything else.

Added

• Hot Work Permit, Critical Lift Plan and Confined Space Entry Permit blank forms, free to print, and filable as record types on the Safety tab under the same names. Each one closes out on the sheet: a permit that is issued and never cancelled is the one found open in an audit.

• Elevation on test plans, and on the compiled test plan document. Static head is what makes one test pressure correct at the gauge and wrong at the high point.

Added

• Rebuilt tab structure, ordered the way a job actually runs: Setup, Drawings & Project Files, Quality Assurance, Quality Control, Testing, Systems, Safety, Field Data, Environmental, Reporting, Audit, Turnover.

• Auto-hiding sidebar, collapsing to a rail so the workspace gets the room.

• Field data batch - drawing and line references on field records, a shared material and weld vocabulary, and CSV import on the record types that get filled in by the hundred.

• Daily Reports, filed by discipline.

• Audit section, with an auditor punch list and notifications in both directions - findings raised, and an all-clear that the server refuses to send while anything is still open.

• Share links for punch items. Send a read-only list to someone with no account: expiring, revocable, and limited to the items picked when it was created.

• Compiled pressure test plan - cover, scope, referenced procedure, safety protocols, drawings covered, and the tests run under it, as one document.

Changed

• The Compliance section was removed and everything in it moved into the new structure. No record type was renamed, so nothing filed under the old arrangement was lost.