Feature log & updates

What we've shipped, improved, and fixed — newest first. We add to this log with every release.

June 12, 2026

Security hardening, encryption self-test, and signing reliability

New admin Encryption & Compliance self-test (Admin → Encryption): one button verifies, on demand, that encryption round-trips and rejects every tampered/wrong-key case, that the audit logs cannot be altered or deleted, and that stored regulated data holds only ciphertext. Run it anytime — it writes nothing.
Signers can now recover an expired signing request: an owner’s “Remind” re-opens a request whose link lapsed (fresh link, new window) instead of dead-ending — so a multi-step signing order can no longer get permanently stuck.
Signed-copy delivery: every signer is emailed a link to view or download their completed document (with the certificate of completion) for 7 days; owners can re-send a fresh link anytime with “Resend signed copy.”
Broad reliability & security hardening across billing, e-signature, encryption, and access controls — including stronger protection against duplicate/double-charged actions, spreadsheet-export safety, and consistent enforcement of team and regulated-data permissions.

June 11, 2026

New Certificate of Completion: download a per-envelope PDF summarizing the signing evidence — signer consent and completion timestamps, the document’s SHA-256 fingerprint, and envelope status.
Signing now records an explicit, timestamped consent to transact electronically on every signature (the consent statement itself was already recorded verbatim).
New e-signature legality page mapping each ESIGN/UETA element to the DocuBuilder feature that produces its evidence, with honest notes on excluded documents and eIDAS.

June 11, 2026

Full FERPA compliance tier for student education records, mirroring the HIPAA tier: per-submission encryption sealed to each authorized viewer, reviewer access grants, a dedicated compliance audit log, and signing support.
FERPA requires a Data Privacy Agreement (DPA) on file — accept it from Account → Security once an admin enables the tier.
Available as a dedicated plan or à-la-carte packs (access unlock + form packs), priced at parity with HIPAA.

June 11, 2026

New session timeout controls: sessions now sign out automatically after 15 minutes of inactivity by default. Admins manage the site-wide default, and every user can pick their own (5–25 minutes, or never) from Account → Security.
New admin Modules panel: platform admins can switch entire modules (Forms, Pages, Menus, Sheets, DocuBuilder) on or off site-wide.
New explainer pages for FormBuilder, DocuBuilder, and Encryption — including what the encryption tiers mean and which agreements (BAA / DPA) regulated data requires.
The home, sign-in, sign-up, and password-reset pages were restyled to match the rest of the site.
The footer now shows Log out when you are signed in (it previously always showed Sign in), and signed-in visitors to the sign-in page go straight to their dashboard.
Fixed: logging out now fully clears the session cookie in all browsers.
New About page and this updates log.

June 10, 2026

A site-wide security review hardened access controls across document signing, file uploads, team invitations, and admin tooling.
Document signing links can no longer be used twice, and completed envelopes can no longer be voided or re-sent.
Signup now has stronger rate limiting, and several internal endpoints return cleaner not-found responses.
Stricter cookie policy (SameSite=Strict) for sessions, and team spreadsheets correctly follow team ownership.
Fixed: the notifications inbox can now scroll when the list grows long.

June 7–8, 2026

HIPAA-tier encryption suite: per-account keypairs, encrypted submissions readable only by authorized key-holders, and reviewer access grants without password sharing.
FERPA (education) groundwork: Data Privacy Agreement acceptance flow mirroring the HIPAA BAA flow.
Encryption audit log viewable from the dashboard.
Export permissions now follow your plan entitlements consistently across CSV and bulk PDF.

June 5–6, 2026

Team workspaces: shared items, sealed (encrypted) team content, member roles, and team lifecycle management.
Two-factor authentication (TOTP) with backup codes; platform admins are required to enroll.
Form sharing between accounts, with clean permission boundaries.

May 29 – June 1, 2026

In-app notification center with team presence indicators and follow requests.
Media display fields, menu list editor, and file uploads on public forms (with strict file-type validation).
Dashboard auto-save improvements.

May 25–27, 2026

Signature fields with required/optional slots, email-link signing, and document version integrity checks.
Multilingual forms: per-field translations, automatic translation assistance, and a respondent language picker.
Admin user management console.

Questions about a change? Reach us at support@ezformbuilder.com.