Chef-Ops-Pro ChangeLog

v2.23.1

8 October 2026

• Fixed: AM and PM check windows (Settings) can no longer be saved overlapping. A reading is always checked against the AM window first, so if the two windows overlapped at all, anything logged in that overlap silently counted as AM and could never count as PM — found via a live customer whose evening readings were never once being recorded as PM. Saving overlapping windows is now rejected with a clear explanation; non-overlapping windows (including one ending exactly when the other starts) save as normal.

v2.23.0

8 October 2026

• P45 tracking can now be switched off per property (Settings, "P45 tracking") — for anyone who tracks this elsewhere, e.g. a separate HR system. Turning it off hides the admin tick-box, the staff Profile row, and the staff Home reminder; everyone else is unaffected, since it stays on by default.
• New "Day-by-day" option for Check Schedule (Settings), for a venue whose trading days genuinely vary week to week and isn't using Rotas. Every day defaults to trading; a new card on the Dashboard lets an admin or manager mark a day as closed with one tap when it isn't, and only those marked days are excluded from the compliance score — so the score is judged against real trading days instead of assuming every day is open.
• Blast Chill: a batch that missed its window and never got a finish reading can now be abandoned (admin/manager only) instead of sitting open forever — records who closed it out, when, and why, and it stops triggering reminder notifications.

v2.22.0

8 October 2026

• Fixed: a checklist could show every item ticked but stay stuck on "In Progress" instead of "Complete." Ticking several items in quick succession could occasionally cause the final save to land out of order, leaving the status mismatched even though the work was genuinely done. Fixed the underlying cause, and any checklist already stuck like this corrects itself automatically the next time it's viewed — no need to redo anything.

v2.21.0

1 October 2026

• Fixed: turning a module off now stops it working straight away, everywhere — including a screen a staff member already had open. Before, an already-open page could keep logging data for a few minutes after an admin switched the module off, because only the page itself checked, not the save button behind it. Covers Right to Work, Employment Contracts, Refrigeration, Delivery Temperatures, Maintenance, Rotas, Stock & Ordering, Food Cost, Team Log and HACCP Checklists — and fixed a bigger version of the same gap on the Checklists page, which previously stayed reachable even on a fresh visit after being switched off.
• Rebuilt Module Governance for Super Admins (Settings & Governance → Module Governance) as one clear switch instead of a one-way list that could only ever grow. Choose the exact module set every property should have, then lock it in — every property is set to exactly that list, and no property admin can add or remove any of them while locked. Untick the lock and every property admin gets full control back immediately. Previously, once a module was pushed there was no way to remove it or unlock it again — "Save" reported success but nothing actually changed. Right to Work and Employment Contracts stay outside this org-wide control entirely, always left to each property's own admin.

v2.20.0

1 October 2026

• Fixed: staff on iPhone (and some Android phones) couldn't enter a negative temperature — there was no way to type a minus sign on the number keypad the app brought up. Every temperature box in the app (fridges, freezers, food temperature, blast chill, deliveries, probe calibration, and the admin range settings) now has a ± button next to it, so a freezer reading like -18°C can always be entered, on any phone.
• A temperature reading wildly outside anything plausible (e.g. a typo like 650 instead of 65.0) is now rejected with a clear message instead of being saved as-is.

v2.19.0

27 September 2026

• Speech-to-text is now on every checklist item's note field, matching every other text field in the app.
• "No Deliveries Today" now settles a Delivery-category checklist due that day too, not just the Delivery Temps card — it auto-closes it with a visible "No Delivery" record (who marked it, when), not a silent skip. It shows on the Checklists page, in the AM/PM Routine, and the run's own page explains why nothing was ticked. A checklist someone has actually completed is never touched, and un-marking "No Deliveries Today" only removes what that action itself created.
• Team Log has been rebuilt around AM and PM. Multiple people can each add their own note under the same period — everyone still shows their own name and gets the same read receipts as before — and "Nothing to report" is a one-tap alternative to writing something. The first entry of a period sends everyone else a notification.
• Team Log now has a step inside the AM/PM Routine, for properties that use both: it shows what's already been logged for the current period and lets you add to it, marking itself done once anything has been sent. It still works exactly as before as its own page on properties without Routines.
• Team Log entries can now carry a photo — take one or choose one, from the main Team Log page or from inside the Routine step.
• Two new cards on the staff Home screen: Team Log (red until both periods are sent, green after) and Messages (unread count).
• Messaging now works on every property, not only ones with the Outlets module on — broadcasting to an outlet still needs Outlets, but private messages don't. The "More" menu's Team Log link has been replaced with Messages, and Messages also has speech-to-text on both the private message and broadcast composers.

v2.18.10

26 September 2026

• The AM and PM counters on the Food Temperature page now match the establishment's opening schedule. If AM (or PM) checks are switched off for today in Settings → Check Schedule, that counter is no longer shown — it was still asking for logs on days the venue is closed. If both are off it reads "No checks due today" instead of "Day complete".
• Event-based venues, which open only on days with a published rota shift, follow that too: no shift published today means no counters.
• The rule for which checks are expected today now lives in one place and is shared with the nightly Daily Summary email, so the page and the email cannot disagree. The email itself behaves exactly as before.

v2.18.9

26 September 2026

• The AM and PM counters on the Food Temperature page now show the real target. They always said 5 AM and 5 PM regardless of what was set — but the minimum number of food temperature checks is a setting the admin controls (and the Super Admin can lock for the whole organisation), and it is the figure the compliance score has always judged against. The counters now use that same setting.
• The counters are also clearer: "AM 0/5" now has its space, and each one is amber until its target is met and green once it is.
• The Probe Calibration page now counts down to the next calibration. A banner at the top shows the days left, the due date and when the last one was done — green when comfortable, amber in the last 7 days, and red with "Overdue by N days" once it is past. It counts 30 days from the most recent calibration of any probe, the same rule the dashboard warning and compliance score already use, and resets as soon as a new calibration is logged.
• Open blast chill batches are highlighted in green so the one that needs finishing stands out, turning red once a batch is close to its time limit.
• The changelog now shows release dates as day/month/year.

v2.18.8

26 September 2026

• Outlet Messaging is now simply Messaging, and an admin can finally send private messages. Before, private messages only worked between an Outlet Manager and the staff in their own outlet, and an admin could only watch — there was no way to start a conversation at all. An admin can now message any individual regardless of outlet, and anyone can message an admin, including staff with no outlet and Outlet Managers. Staff and managers can still message each other within their own outlet.
• A conversation with an admin stays between the two people in it — another admin cannot read it. An admin can still look in on a conversation between an Outlet Manager and their staff (view only), and cannot write in it.
• Broadcasts now show who has read them. Each one reads "Read by 1 of 2"; click it to see who has read it and when, and who has not yet. The admin, the sender and that outlet's manager see this; ordinary staff do not. In a private conversation your own messages now show "Read 14:36" or "Not read yet".
• Staff, Outlet Managers and admins now get a notice on their dashboard when they have unread messages — who from, a preview, and a link straight into the inbox. It covers private messages and, for staff and managers, broadcasts to their outlet. A push notification is also sent when someone receives a private message.
• The Messaging page keeps itself up to date: new messages, broadcasts and read receipts appear within about 15 seconds, and straight away when you return to the tab, without a reload.
• The unread count on a private conversation was only ever able to show 0 or 1; it now counts every unread message.

v2.18.7

26 September 2026

• The Blast Chill page now keeps itself up to date. A batch started or finished by someone else — a staff member on their phone, for instance — used to appear on an admin's open Blast Chill page only after a manual refresh or leaving and returning to the page, because the page loaded its lists once and only again after that person's own save. It now checks every 30 seconds while on screen, and straight away when you return to the tab or unlock the phone.
• The refresh happens quietly: no loading flicker, half-typed entries in the form are left alone, it pauses while your own save is in progress, and a failed refresh (a weak signal, say) keeps what is already on screen rather than blanking the list.

v2.18.6

26 September 2026

• Staff could be refused a temperature, blast chill or checklist entry with "You are not scheduled to work today" even though their shift was on the published rota. When a shift is tagged to an outlet, the check also wanted that outlet to have its own publish record — and a whole-week publish only creates those for outlets that already had shifts at that moment. A shift given an outlet afterwards looked live to the member of staff but was refused when they tried to log. An outlet now follows the week's published state unless it has been hidden on its own.
• The Rotas page now has an outlet filter for admins (shown only when the Outlets module is on). Choose an outlet to see just its rota and to add, edit, copy, clear, publish or hide it — hiding one outlet leaves the rest of the property published. New shifts added there are stamped with that outlet, and Print rota prints just that outlet. "All outlets" is the combined property rota, exactly as before.
• An Outlet Manager's own Rotas page now shows the same publish state that the logging check uses, so the rota can no longer say Draft for something staff are allowed to do, or the reverse.
• The EHO Pack (PDF) now honours the From and To dates chosen on the Reports (EHO) screen. The button always meant the last 90 days up to today whatever was picked, so a report for 01/09 to 23/09 also contained August entries. With no dates chosen it behaves exactly as before. The section titles and the header now say "selected period" and state the real dates.
• The Food Temperature Logs table in the EHO Pack now has a Logged By column, matching the Blast Chill section.

v2.18.5

23 September 2026

• Food temperatures are now limited to the AM/PM logging window, the same as fridges already are — a check outside the window is refused rather than saved at any hour. Fridges enforced this on the server already; food temperatures did not, on screen or behind it.
• Hot-hold checks are deliberately exempt. They are monitored live through whatever service is actually running, not on a twice-daily schedule, so a check made mid-service is unaffected. Blast chill was already exempt for the same reason — it spans time.
• Blast chill records now show who started a batch and who finished it. The printed Blast Chill report and the EHO pack both only ever showed the temperatures and times — a batch chilled by one person and finished by another looked anonymous on the record. Both now carry a Logged By column, reading a single name when it was the same person throughout, or both names when it wasn't.

v2.18.4

22 September 2026

• Rotas now respect outlets the way the temperature sheet already did. RotaShift has always had an outlet field and an Outlet Manager's own view has always filtered on it, but the Add/Edit Shift form had no way to actually set one — so every shift an admin built landed as "shared", which the filter reads as visible to every outlet. An Outlet Manager's Rotas page was showing the whole property's rota, not their outlet's.
• Picking who a shift is for now fills in their own outlet automatically — no extra step for the ordinary case of building a normal week. A dropdown next to it lets you override this for a genuine cover shift, and editing an existing shift shows and can change its own outlet the same way.
• An Outlet Manager never sees this field at all: the server has always forced their own outlet on any shift they touch, so there was nothing for them to choose.
• Nothing already on the rota changes. Existing shifts stay shared exactly as they behave today, including this week's — only shifts you add or edit from here get an outlet.

v2.18.3

22 September 2026

• A Super Admin viewing a property in read-only mode can now actually download its reports. The Reports (EHO) page already showed the buttons, but the EHO Pack and the Quarterly Export behind them were checking for an ordinary membership on the property, which a Super Admin in view mode deliberately doesn't have — so both refused every time. Every other report on that page (Food, Blast Chilling, Fridge, Delivery, Maintenance, Incidents, SFBB) already worked correctly; these two were the only ones missed.
• A signed Employment Contract PDF is now viewable the same way, consistent with every other document a Super Admin can already see in view mode.
• The Quarterly Export button and the "Period" line inside the downloaded compliance summary now read day/month/year, matching the date pickers above them, instead of year-month-day.

v2.18.2

21 September 2026

• Ticking an item on the AM/PM Routine's closing checklist now says why if it is refused, instead of the box just reverting with no explanation. It was the only action on that page that never checked whether the save actually worked — every other step (fridge temps, food temps, maintenance) already told you when something went wrong.

v2.18.1

21 September 2026

• The staff home screen no longer marks a switched-off check as failed. If your Check Schedule says there are no AM checks today, the AM pill now reads “AM off” in grey instead of a red cross. It was contradicting the note directly above it, which already said AM was switched off and not counted against you.
• A card can no longer say ACTION NEEDED because of a period nobody has to do. A fridge card with its PM readings complete now reads AM off, PM done, and shows as done — rather than AM failed, PM done, and done, all at once.
• The same applies to PM if you switch the afternoon off instead.

v2.18.0

20 September 2026

• Fridges and freezers can now be put in an outlet. When you add a unit, or edit one you already have, you choose which outlet it belongs to — or leave it shared across the property. Staff and outlet managers then only see the units in their own outlet, plus the shared ones.
• Shared is a real choice, not a gap. A walk-in both kitchens use belongs to neither, so it stays shared and everyone sees it. A shared unit is logged once for the whole property, and the sheet shows who logged it and when, so nobody is left wondering whether the other kitchen did it.
• Every unit you already have stays shared, exactly as it behaves today. Nothing changes until you assign one. The units list now says which outlet each one is in, so you can see at a glance what is still shared.
• Changing someone's role now signs them out. Before, a member of staff promoted to Outlet Manager carried on with the staff menus for as long as their browser stayed open, because the browser keeps the layout it first drew — so the promotion looked like it had not worked. They now come back in with the right access straight away.
• That cuts the other way too, and matters more: somebody moved down from admin no longer keeps admin menus on screen until they happen to reload the page.

v2.17.0

20 September 2026

• Pest control is now a working system rather than a filing cabinet. Anyone can report a sighting from their home screen in about twenty seconds: what you saw, where, and a photo if you have one. No pest type, no severity, nothing to think about. Your manager is told straight away by email and notification.
• Reporting a pest is never held against the kitchen and the staff screen says so. A chef who thinks reporting a mouse will drag the score down stops reporting, which is the worst outcome available. Only the resolution is judged.
• An open sighting sits on the admin dashboard as urgent and shows its age, so an ignored one visibly gets worse instead of blending in. It emails the admins every day until it is dealt with. Clicking it opens the report itself, picked out on the page, rather than dropping you at the top of Food Safety Management.
• Only an admin can record a follow-up check or close a report off, the same as incidents and holiday requests. There are three ways to close it: a contractor attended and treated, traps were laid, or it was investigated and nothing was found. False alarms are written up plainly rather than hidden — an inspector seeing that a kitchen investigates and records non-events is reading a good sign.
• Laying traps is a pause, not a finish. It sets a week, after which a confirming check is owed. If that week passes with nobody recording a check, the report goes back to urgent, because a trap nobody has looked at is an unresolved pest problem wearing a resolved label.
• Whoever reported it is always told the outcome. Somebody who reports a mouse and hears nothing back learns that reporting achieves nothing.
• An admin can raise a maintenance job straight from a report, already filled in with what was seen and where.
• Pest inspections finally get chased. How often one falls due is now a setting per property, starting at monthly, because plenty of contracts are quarterly and a kitchen nagged for doing exactly what its contract says learns to ignore the reminder.
• With outlets switched on, a sighting is filed against the outlet it was seen in, but every admin at the property is told. A mouse in one kitchen is a problem for the building.
• Pest control scoring has changed, and this will move your compliance grade. It used to give five marks for having any record at all in the last ninety days — the same paperwork-exists measure already replaced for cleaning and food temperatures. It now scores reports actually resolved.
• A pest report left more than seven days with no follow-up check recorded puts a ceiling on the overall grade. Reporting costs nothing, acting quickly costs nothing, and even a problem that takes three weeks costs nothing so long as somebody is recording checks along the way. Only neglect is capped.
• All of it appears on the Food Safety printout, including who checked what and when, and how each report finished.

v2.16.1

20 September 2026

• The probe calibration form no longer opens already saying the probe has failed. Choosing the Boiling Point Method showed “Corrective action — required” and “this probe is outside the allowed 1.0°C tolerance” before a reading had been typed, because an empty box was being read as 0°C — which against a 100°C target is 100 degrees out. The Ice Point Method hid it, since zero is exactly on target there.
• An empty reading is now treated as nothing entered yet. The pass or fail verdict, and the corrective action box that comes with a fail, appear once there is an actual reading to judge.

v2.16.0

20 September 2026

• A food temperature that went outside the safe limits can now be signed off. The dashboard used to flag it as URGENT and send you to the food temps sheet with nothing you could do about it, so it sat there red until midnight. An admin now reads what happened and signs it off, and it leaves Needs Attention.
• Who signed it off and when is kept against the reading, so your record shows a manager looked at the breach rather than only that a chef wrote something down. It can be undone if it was signed off by mistake.
• Clicking the alert now takes you straight to that reading and picks it out on the page, instead of dropping you at the top of the sheet to hunt for it.
• Food still due to be checked again cannot be signed off, and no longer offers to be. It says so on the reading, and the sign-off appears once the second reading is in — a breach is not finished while something is still owed on it.
• Only an admin can sign one off, the same as incidents and holiday requests. Staff are told an admin needs to look at it.
• The reading, its corrective action and its outcome are never changed by signing off, and it stays on the food temps sheet and in your EHO pack exactly as before.

v2.15.0

20 September 2026

• Training documents now show on a phone. Staff opening a read-and-sign document on an Android phone were shown an empty box with a broken-page icon — the document was there and working, but phone browsers will not display a PDF inside a page. Chef-Ops-Pro now draws the pages itself, so a training document looks the same on a phone, a tablet and a computer.
• A document of more than one page can be read right through, with Previous and Next and a count of where you are. If a document cannot be drawn at all, the viewer says so and offers to open it outside the app, so nobody is ever left unable to read what they are signing.
• A signature cannot be given until the reader has been through to the last page, with a line saying so. Signing is a statement that the document was read, and your EHO record is stronger for it. One-page documents are ready to sign straight away.
• Every time that decides whether a job was done on time now comes from Chef-Ops-Pro rather than the phone that sent it. A food temperature reading took its time from the device, so changing a phone's clock could move a reading into a day that had been missed, or between the morning and afternoon windows. The same was true of the time a corrective action was marked as finished.
• Blast chill records could show a chill of many hours beside two times only a few apart. A finish with no batch reference was being matched to the most recent start for that dish however old it was, so it could pair with a start from a previous service. It now only pairs within a day, and a finish with nothing to match is refused rather than recording a nonsense duration.
• An accident cannot be dated into the future, and a date that cannot be read at all is refused rather than stored.
• Times and dates on the Fridge Report are now the kitchen's own clock. Through British Summer Time a re-check taken at 08:29 was printing as 07:29, and a reading taken just after midnight could be filed under the day before.
• The date at the top of a checklist run now reads the day the work was actually done. In British Summer Time it was naming the day before.

v2.14.0

20 September 2026

• Your EHO pack now shows what was done about a temperature that went out of range. The fridge table has a new Corrective action / re-check column carrying the note, the second reading, the time and — importantly — the name of whoever took it, which is often a different person from the one who logged the original. It was not there at all before.
• The same detail now appears on the Reports (EHO) screen, the Fridge Report PDF, the food temperature PDF and both CSV exports, so every record of a breach tells the whole story rather than half of it.
• Weekly and monthly checklists now appear only when they are actually owed. A weekly deep clean shows from the day before, stays on the list until it is done, then goes until the following week. Admins previously saw every checklist every day, which meant a weekly deep clean could be recorded seven days running — and a floor cleaned after a spillage is not a deep clean.
• A checklist missed on its day is no longer lost. It stays outstanding for the rest of its week or month, so work done on the Thursday still counts for that week.
• Cleaning is now scored on the cleaning you actually did rather than on having written a schedule. Your cleaning checklists are what count, once per day, week or month they are due — so a weekly deep clean run three times in a week counts once, and a week with none is a miss. Kitchens with no cleaning checklist keep the old measure.
• Food temperature scoring counted the total number of readings, so five on a busy day made up for four days with none and a kitchen missing a third of its days could still score full marks. It now counts each AM and PM period separately, the same way fridge temperatures have always been counted.
• Because of those two changes your compliance score is likely to fall. That is the point: it now reflects the work that was done rather than the paperwork that exists.

v2.13.0

19 September 2026

• A fridge or freezer asked to be checked again can now actually be checked again. Before, the only way to settle a re-check was to log the unit again — but the sheet allows one reading per window per day, so the request could never be cleared and sat on the dashboard as urgent. The temperature sheet now has a panel for recording the second reading.
• The second reading is kept beside the first, never instead of it. Your record reads “9.0°C at 17:19 — door left open → checked again: 3.0°C”, which is what shows a unit recovered.
• A re-check belongs to the unit, not to whoever logged it. Someone checking fridges at the end of a shift can log a defrost and go home; anyone on afterwards can finish it, and their name goes against it. It isn't tied to the AM/PM window either, so an hour landing after the window closes is fine.
• Marking a unit as defrosting now always asks for a temperature an hour later, and admins are told. A defrost cycle only runs 15–30 minutes, so the unit can give a proper reading by then — and until it does, that check has no temperature against it, so it no longer counts as done on your dashboard or in your compliance score.
• Out-of-range readings can be checked again in 15, 20, 30 or 60 minutes, and now ask directly whether the unit is on or just off a defrost cycle. The answer is kept beside the reading as an explanation; it never excuses it. A reading only slightly over your limit is unchanged — amber, corrective action, no re-check.
• If the second reading is still wrong, the person at the fridge is offered a maintenance job there and then, already filled in with both readings, the safe range and what was done. Raising it links the job to the reading and it carries on as any other maintenance job, with admins notified.
• Any re-check left outstanding from before this release has been closed, since it was impossible to clear. The readings themselves are untouched.
• On a checklist where every item is required, the “Mark as complete” button has gone. Ticking the last item already finishes the run, so the button could never be pressed — it just sat there greyed out looking broken. Checklists with optional items keep it, and it now says what it does: how many items are still to do (and takes you to the next one), or an offer to finish without the optional ones.

v2.12.1

19 September 2026

• Users & Access now shows a Super Admin label beside the person who oversees every property in the portfolio, so a second admin can see at a glance who has the organisation-wide view and who does not. Properties that aren't part of a portfolio show no label.

v2.12.0

19 September 2026

• When freshly cooked or reheated food comes up short of its safe temperature, the app now asks what happened to it — cooked for longer and reached a safe temperature, thrown away, or something else — instead of asking when it will be checked again. Food straight out of the oven is dealt with there and then, so a timer never made sense for it.
• Saying it was cooked for longer asks for the temperature it reached, and won't accept anything still below your safe minimum. The whole story stays on one record: the reading, what your team did about it, and how it ended.
• Your dashboard no longer chases food that was already dealt with. It shows how each failure ended instead — “Chicken wings 62.0°C — thrown away”, “Curry 70.0°C → 78.0°C” — so anything recorded as another action stands out as worth a look.
• Hot holding, cold holding, blast chilling, fridges and freezers are unchanged: they still ask when the item will be checked again, because those are put right by changing something and looking later.
• Your EHO compliance pack now shows the corrective action beside each food temperature, along with what happened to the food and the temperature it reached.

v2.11.1

18 September 2026

• The corrective action box on food temperatures now appears only once a temperature is entered and is outside your limits, rather than when the form is still empty.

v2.11.0

18 September 2026

• A temperature outside your safe limits can no longer be logged and forgotten. The notes box becomes a corrective action that has to be filled in — typed or spoken — before the reading will save, and it's kept with the reading on the record. A reading far outside the limits is flagged as unsafe and also asks when the item will be checked again.
• This applies to fridge and freezer temperatures, food temperatures, blast chilling, and probe calibration checks. How far past a limit counts as unsafe is yours to set, and a reading is judged against your limits at the time it was taken, so changing them later never rewrites the record.
• Your dashboard shows what is waiting on you: readings the kitchen has acted on, with a tap to raise a maintenance job already filled in with the unit, the temperature, the safe range and what your team did. Raising it links the job to that reading and it continues as an ordinary maintenance job. Anything due to be checked again is listed until it is.
• Alerts on the dashboard are now grouped: eight fridges missing their log is one row listing all eight, rather than eight separate rows, and the same for checklists, Right to Work checks and Return to Work forms.

v2.10.2

17 September 2026

• Today's checks on your dashboard: every AM and PM temperature window — fridges and freezers, and food temps — now shows how many logs are in and how long is left to do them. Green while there's time, amber once most of the window has gone, and red for the final hour.
• Outstanding checks are now visible from the start of the day rather than only once the window has closed, and a window that closes unlogged is marked as missed. Periods your Check Schedule has closed show as not required.

v2.10.1

16 September 2026

• Training documents now show directly on the sign-off page in every browser, so your team can read each document right where they sign it.
• Stronger browser security: the app now tells browsers exactly which sources it may load content from (a Content Security Policy), and other websites can't embed it.
• The signed-in app is now kept out of search engine results, so people searching for Chef-Ops-Pro find chef-ops-pro.com. The product screenshots used in the online documentation stay available as before.

v2.10.0

13 September 2026

• A new step-by-step setup for new kitchens. You start with the essentials every kitchen needs — fridges and freezers, food temperatures, checklists, training, inspection reports and allergen controls — then answer a few quick questions about how your kitchen runs, and Chef-Ops-Pro switches on just the modules you need. A final screen lets you check everything before you start, and you can stop at any time and pick up where you left off.
• Every module now comes with its own guide. Set-up guides do the job with you — adding your fridges, choosing your checklists, inviting your team, adding suppliers, setting your food cost target and more — while quick guides show you around. A guide opens the first time you visit a module, can be skipped for later or hidden, and the Guide button in the top bar brings it back whenever you like. Kitchens already up and running aren't interrupted by pop-ups: their Guide buttons are there when wanted.
• Settings → Modules now has a Guide button for every module you use, switching a module on opens its guide straight away, and Show all guides again brings back any you've skipped or hidden.
• The top bar now fits neatly on every screen size: on phones the trial badge is shorter, and your buttons — including Logout — always stay in view.

v2.9.1

13 September 2026

• Smoother first steps for new admins: after creating your App Lock PIN — or signing in before your setup is finished — Chef-Ops-Pro now takes you straight to the next step, and doesn't ask for the PIN you've just created. Switching property, finishing onboarding and upgrading to Multi Property all open the next page just as smoothly.

v2.9.0

13 September 2026

• Upgrading from Single Property to Multi Property is now one step from the Billing page. Your plan is changed rather than replaced — same card, same billing date — and you only pay the difference for the rest of your current billing period, shown before you confirm. If you're still in your free days you keep them, and Expo 2026 customers keep their expo pricing for the rest of their first year.
• Multi Property plans now start at 2 properties, and the Properties page talks about properties rather than slots. Adding room for another property shows the exact cost first — paid for the rest of the current billing period, or free until billing starts if you're still in your free days — and the page shows your real price per property, including annual and expo pricing.
• Properties now join a portfolio by email invitation from its Super Admin. Someone new registers their property straight from the invite; someone already using Chef-Ops-Pro logs in and accepts or declines. Nothing in the property is deleted, and if it paid for its own plan, that plan stops and the unused time is refunded to its card. The Super Admin can see whether each invite is waiting, accepted or declined, and withdraw it.
• Super Admins can now hand the role to one of their property admins or to someone independent, from Hand Over Super Admin in the console. Nothing changes until the new person has added the card that will pay for the portfolio, and the previous Super Admin keeps full access to any property they run.
• New Properties & Billing page in the Super Admin console, so a Super Admin who doesn't run a property themselves can still see prices, manage billing and look after the portfolio's properties. A scheduled property removal can now be cancelled during its 7-day window.
• Adding your card during the free days now keeps them — billing starts automatically when they end. If a payment ever fails, the 7-day grace period starts from the first failed attempt and your access stays on throughout it.
• Your compliance score now shows which way it's heading — for example "▼ 3 pts vs last week" — on the Dashboard and the Compliance page.
• The Billing page now shows each person what's relevant to them: customers already paying see Manage billing instead of plan options, and team members see who manages the subscription.

v2.8.29

11 September 2026

• The nightly email is now a full Daily Summary. As well as missed fridge and freezer temperatures, it lists checklists that weren't started or finished (showing how far any half-done checklist got), food temperature logs below your required minimum, and the checklists that were completed, with who finished them and when. It's only sent when something was missed, and it follows your Check Schedule, so closed mornings and closed days are never reported.
• Allergen Management is now called Allergen Controls, to better describe the daily allergen checklist it provides.

v2.8.28

10 September 2026

• Completing the change in v2.8.27: Super Admins who also run one of their own properties can now log temperatures, complete checklists, record deliveries and report maintenance in that property — following exactly the same rota rules as any other team member. Properties they oversee but are not a member of remain view-only, so the audit trail is unchanged.

v2.8.27

10 September 2026

• Daily temperature reminder emails now follow your Check Schedule. If your kitchen doesn't run morning checks on a particular day, that day's AM checks are no longer listed as outstanding — and on a day with no checks scheduled at all, no reminder is sent. This brings the reminder email in line with the Dashboard, Temperature Sheet and Compliance Score, which already worked this way.
• Super Admins who also run one of their own properties can now work in that property normally — logging temperatures and completing checklists as the Property Admin they are. Properties they oversee but aren't a member of remain view-only exactly as before, so the audit trail is unchanged. Opening the app now takes them straight to their own property, with Org Overview a click away in the top bar.
• Behind the scenes: added an automated test suite covering account access rules, so subscription and access behaviour is verified on every future change.

v2.8.26

9 September 2026

• Added annual billing alongside monthly. Paying for a year up front works out at two months free on both plans — £400/year for a single property (instead of £480 paid monthly), or £250/year per property for a group (instead of £300). A Monthly/Annual switch on the pricing page shows both, and existing monthly subscriptions are completely unaffected.
• Added a dedicated signup page for visitors to the Hotel & Resort Innovation Expo 2026 at ExCeL London, with pricing specific to that event, available only for the duration of the show.

v2.8.25

9 September 2026

• Added custom Employment Contract templates. Admins can now write their own contract wording in a rich text editor (bold, italic, headings, lists) and insert variables — candidate name, job title, pay, start date, and more — that are filled in automatically from the real contract details when it's sent. A "Variable Key" panel lists every available variable with a one-click copy/insert. The original default contract wording stays exactly as it is today and remains available as a starting point for new templates; every contract already sent is completely unaffected.
• The EHO Pack PDF now includes three more sections — Food Temperature Logs, Delivery Temperature Logs, and Incident Reports (full detail, not just a summary) — alongside the existing Blast Chill, Fridge, and Maintenance sections.
• Blast Chill Logs in the EHO Pack now correctly pair a start and finish reading together even when the food name was corrected in between, and no longer show internal tracking text in the Notes column.
• Extended the "a day with no reading is shown, not silently skipped" protection (introduced in v2.8.22) to the EHO Pack's Fridge and new Food Temperature sections, and to the standalone Food Temperature print report — every day in the reporting window now appears, with a clear notice on any day with nothing logged.
• General build reliability improvements ahead of an upcoming Next.js update.

v2.8.24

6 September 2026

• Added photo evidence capture to Incident Reports — "Take photo" (camera) and "Choose photo" buttons are now available when reporting an incident, matching the same facility Maintenance requests already had. The upload endpoint and the photo display on an incident's detail page already existed; the capture step itself had never been built.

v2.8.23

6 September 2026

• Fixed the dashboard's "Missing Logs → X yesterday" figure not respecting a property's Check Schedule — a day of the week with AM or PM checks turned off was still being counted as if both were required, overstating how many checks were actually missed. It now correctly matches the same schedule already used everywhere else in the app.

v2.8.22

6 September 2026

• Fixed EHO/fridge temperature compliance reports silently omitting any day with no readings logged at all — a skipped day used to just vanish from the paper with no indication anything was missing. Every day in the report's range now appears, with a clear "No readings recorded" notice on days with nothing logged.
• Fixed printed reports (fridge temps, food temps, incidents, maintenance, rotas, and others) sometimes showing a solid black block at the end of the page — the dark theme's background was printing through past the end of the report's own content. Reports now print on a clean white background throughout.
• Hardened two background jobs that could be triggered without a valid secret if one was ever left unconfigured, and confirmed the secret they check now actually reaches the running app.
• The app's daily activity log now survives a deploy instead of being wiped every time.
• Added standard browser security headers (HSTS, content-type sniffing protection, clickjacking protection, referrer policy) across the whole app.
• Consolidated password security into a single, stronger implementation used everywhere passwords or PINs are checked — existing accounts are upgraded automatically and invisibly the next time someone signs in, with no forced password resets.
• Fixed an unsent Team Log draft message showing up for the next person who logs in on a shared device.
• Downloaded files (training records, signatures, sick notes, contracts) are no longer kept in the browser's offline cache after logout.

v2.8.21

6 September 2026

• Fixed the "Send Contract" popups rendering with no solid background — a class-name mismatch left the panel transparent, so the page behind it showed through. Also fixed the cramped spacing between fields inside those popups, which now use the same field-spacing standard as the rest of the app.
• Cancelled contracts and offers now have their own "Cancelled" tab on the Employment Contracts page, out of the way of active/pending ones, instead of sitting mixed in with them.

v2.8.20

6 September 2026

• Fixed Employment Contracts emails (offers, contracts) not reaching recipients — the underlying email sender has been switched to the same delivery path already used for login codes and email verification, which was proven working; the previous path's credentials had gone stale and were failing silently. This affected every feature that sends email (password reset, staff invites, incident alerts, holiday request notifications, training assignments, rota-publish notices, and more), not just Employment Contracts, so all of those should now be reliably delivered too.
• Offer and contract emails now show the sending admin's name and reply to their own email address (e.g. "Dana Docs (Docs Demo Kitchen)"), so a candidate's reply lands directly with the person who sent it rather than a no-reply address.

v2.8.19

6 September 2026

• Replaced the simple "upload a PDF and sign" Employment Contract feature with a full Offer Letter → Contract pipeline. Admins can send a contract directly to an existing staff member, or send a lightweight Offer Letter to a brand-new candidate who doesn't have a system account yet — the candidate accepts or declines with no login required, then signs the full contract (a real signature, not just an upload) the same way. Contracts support a configurable employer countersignature, and once a pre-hire candidate's contract is signed, one click creates their account and emails them a set-password link.
• Contracts render as a property-branded PDF, viewable by the candidate, the signing employee, and admins.
• Added two new admin-only Needs Attention alerts: offers with no response after 7 days, and signed contracts awaiting the account-creation Accept step.
• Added a Staff Home reminder banner for an employee whose contract is waiting on their signature.
• Employment Contracts is a toggleable property module (Settings → Modules), and the whole module — including its Needs Attention alerts — is strictly Property-Admin-only, never visible to an Outlet Manager or to a Super Admin/Platform Owner in read-only view mode.

v2.8.18

5 September 2026

• Fixed a signup-blocking bug: any brand-new Admin account whose App Lock hadn't been set up yet AND whose onboarding wizard hadn't been completed yet got stuck in an infinite redirect loop between the App Lock setup page and the Onboarding page, unable to reach the dashboard at all. Caused by the App Lock setup page missing from the onboarding route-allow-list.
• Fixed the "Why 1:", "Why 2:" etc. labels on the Incident Report's Root Cause Analysis (5 Whys) not lining up with their answer text — the label and answer used different line-heights, so multi-row entries drifted out of alignment.

v2.8.17

31 August 2026

• Outlet Manager is now a genuine role with real day-to-day authority over their own outlet, not just a label. An Outlet Manager can now: build and independently publish their own outlet's rota (Property Admin retains full, unscoped visibility and override over every outlet's rota at all times); mark their outlet's staff as sick and complete the Return to Work procedure; mark maintenance requests as read/completed for their outlet; create and edit HACCP/daily checklists scoped to their outlet; and set up their outlet's own AM/PM Routine checklist. All of these are strictly outlet-scoped — an Outlet Manager can never see or act on another outlet's data, and every action is enforced server-side, not just hidden in the UI.
• Fixed the sidebar showing an Outlet Manager's own role as "Staff" instead of "Outlet Manager".
• Added "Outlet Manager" as a selectable Access Level when creating a staff invite — previously only Staff or Admin could be chosen at invite time, so an Outlet Manager had to be invited as Staff and manually promoted afterwards.
• Food Cost Tracking's Property-wide/Per-outlet toggle can now be switched back and forth freely — previously switching to Per-outlet was a one-way door requiring support to reverse. Each mode keeps its own historical figures, so nothing is lost switching between them.
• Fixed the EHO Reports print pages (Fridge Temperature Logs, Incidents, Maintenance Logs) showing entries oldest-first — they now show the most recent entry at the top, matching the on-screen Reports EHO board and the combined EHO Pack PDF, which were already newest-first.
• Added the same accrued-hours figure zero-hours staff see on their own portal (e.g. "20.52h") to the admin's Edit User modal — it previously only showed the flat 12.07% accrual rate with no actual computed total.
• Redesigned the Food Cost month cards: month/cost/sales now read as a left-aligned stack with the food-cost percentage pill floating to the right, a misaligned toggle arrow was removed, and a "Click to expand" hint shows on collapsed cards.
• Fixed the Settings → Outlets page missing the shared Settings tab bar (Settings, Suppliers, Modules, Users & Access, Manage Outlets, Refrigeration, Billing) — every other Settings page had it; Outlets was a separate route that never got it, so navigating there lost all Settings navigation. Extracted into a shared component so this can't happen again for a future Settings page.
• Fixed modals across the app (Edit User and others) not scrolling when their content was taller than the screen, cutting off the bottom of the panel with no way to reach it.

v2.8.16

29 August 2026

• Added the ability for admins to cancel an already-approved (or still-pending) holiday request — for any staff member, including their own — e.g. when someone changes their mind after approval. Frees the days back up against their allowance immediately, and the calendar/conflict checks now correctly ignore cancelled requests.
• Fixed the Return to Work form's Print/Save PDF output showing no visible answers for the Yes/No/N/A questions and the Next Steps outcome — the highlighted selection relied on a background colour that most browsers strip when printing. Chosen answers now show a check mark and bold border so they survive printing regardless of browser settings, and the rest of the form prints in solid black on white for legibility.
• Fixed Rota History showing the wrong week and "no shifts scheduled" for weeks falling in British Summer Time — a date conversion bug rolled the selected week back by a day, so the page silently failed to find shifts that were actually scheduled and published.
• Added a "No deliveries received today" checkbox to the top of the Delivery Temperatures page — ticking it clears the amber Delivery Temps check on the staff Home screen for a day nothing was due in, instead of it sitting flagged with no way to resolve it.

v2.8.15

29 August 2026

• Added a configurable minimum number of food temperature logs required per AM/PM window each day, set in Settings → Food Temperature Thresholds (and lockable org-wide from Super Admin settings). Feeds into the staff Home "Today's checks" widget, the admin Needs Attention list, and the Food Temperature Checks compliance score — all previously assumed a fixed "1 log per period".
• Added a Probe Calibration due/overdue reminder — none existed before. Warns 7 days ahead of the 30-day calibration interval on both the staff Home screen and the admin Needs Attention list; treats "never calibrated" as immediately overdue.
• Checklists now record who completed each item, and who closed out the whole run — previously only a timestamp was kept, with no attribution at all. Supports different people completing different items on the same checklist.
• Fixed zero-hours contract staff being able to book holiday against the full fixed annual allowance instead of what they've actually accrued. Booking is now checked against 12.07% of hours worked this year, converted to an equivalent number of days using their own average shift length. Added a "?" next to the accrued-days figure on the Holiday page explaining how this works.
• Added Job Role to the staff Profile page (previously admin-only), and fixed the Profile page's tab-linking ("?tab=rtw" etc.) silently doing nothing — including the existing Right to Work banner link, which was quietly broken the same way.
• Added three new HR features, available to both admins and the individual staff member: emergency contact details (staff self-entered — name, phone, relation), P45 submission tracking (admin tick-box, with a staff Home reminder banner until it's ticked), and employment contract upload + e-signature (admin uploads, staff view and sign with the same signature pad used for Right to Work, admin sees the exact signed timestamp).

v2.8.14

27 August 2026

• Fixed staff never being notified when an admin starts a Blast Chill batch — the live "Blast chiller active" countdown card was only ever shown on the admin Dashboard. It now also appears on the staff Home screen, with the same overdue warning and "Log finish temp" link.

v2.8.13

25 August 2026

• Added event-based scheduling for sporadic/function venues with no fixed weekly opening days. Settings → Check Schedule now asks whether the venue has consistent opening times or is sporadic/event-based; picking the latter switches on Rotas automatically and compliance scoring (Fridge & Freezer Temps, Food Temperature Checks, HACCP Checklists) follows whichever days have a published rota shift instead of a fixed weekly pattern. Weeks with no published rota are excluded from scoring rather than counted as failures.

v2.8.12

24 August 2026

• Fixed the Temperature Sheet page flagging AM or PM as "MISSED" on days a property has that check period switched off in Settings → Check Schedule — it was only respecting Check Schedule on the main Dashboard, not on this page's own fridge grid.
• Added a "Today's checks" card to the staff Home screen — a running total of just the checks a shift can directly move (Food Temps, Fridge Temps, Checklists), plus a quiet "Team grade" reference next to the date.
• Fixed creating a new staff invite silently leaving a previous still-pending invite for the same email live at the same time — a re-invite now supersedes the old one instead of sitting alongside it.
• Fixed new staff never being prompted to complete their Right to Work check — no record existed until an admin took action, so the staff Home banner never had anything to key off. A record now opens automatically the moment someone accepts their invite (or, for existing staff, the moment an admin switches Right to Work on for the property).
• Added "Take photo" alongside "Choose photo" on the Profile page's headshot upload and Right to Work document upload, matching the camera/gallery choice already available on Maintenance and Incident Reports.
• Added a "Human Resources" section to the sidebar, grouping Time Off and Users & Access.

v2.8.11

22 August 2026

• Added an "Install app" button to the staff portal topbar, and fixed the admin sidebar's install prompt on Safari — both previously relied on a Chrome-only browser feature, so staff on an iPhone/Mac using Safari had no way to install the app at all. Safari users now get a button that walks them through Safari's own "Add to Dock" / "Add to Home Screen" option.

v2.8.10

21 August 2026

• Maintenance and Incident Report photo attachments (Maintenance page, and the quick Maintenance/Incident modals on Staff Home) now offer separate "Take photo" and "Choose photo" options, so staff can use the camera directly instead of only picking an existing image.
• Added a "Billing" tab to Settings so admins can always reach subscription management — previously the only links to it were conditional banners (trial countdown, grace period, payment failure) that disappear once a subscription is active and in good standing.

v2.8.9

21 August 2026

• Fixed missing-log alerts (the dashboard KPI, the fridge grid, and Needs Attention) incorrectly flagging AM or PM as urgent on days a property has that check period switched off in Settings → Check Schedule.
• The fridge temperature grid now shows "Closed" for an AM/PM slot that isn't a scheduled check day, instead of a "?" that implied a genuinely missed reading.

v2.8.8

21 August 2026

• HACCP Checklists: added an "All Day" scheduling option alongside AM/PM — spans from the start of the AM window to the end of the PM window, and flags as due immediately rather than waiting through the day.
• Admin dashboard: replaced four separate alert banners (checklist due/overdue, Right to Work, Return to Work, unread messages) and the old Alerts card with a single "Needs attention" list at the top of the page, most urgent first — including new per-fridge "Missing AM/PM log" rows showing which unit and how long it's been outstanding. Every item shows a status word, not just a colour. Remaining module cards now sit under a quieter "Modules" section beneath the 3 key stats.

v2.8.7

19 August 2026

• Fixed the Holiday Allowance stats on My Profile wrapping badly on mobile — switched from a cramped 4-column grid to 2x2 so each figure has room to read cleanly.
• Added an Employment Details card to the Account tab on My Profile, showing your own contract type (Contracted with weekly hours, or Zero Hours) and pay (hourly rate or annual salary).

v2.8.6

19 August 2026

• Fixed the Incident Reports list not being responsive on mobile — the table was rendering at every screen width instead of switching to a stacked card layout, forcing the whole page (including the stat cards and filter tabs) into horizontal scroll on phones.

v2.8.5

19 August 2026

• Added speech-to-text microphone support to the quick "Report Incident" form on the Staff Home dashboard (Title, What happened, Location, Immediate action taken) — it was already available on the full Incidents page, but missing from this shorter staff-facing version.

v2.8.4

19 August 2026

• Fixed App Lock briefly flashing the lock screen on every navigation click. The screen-lock's internal subscription was being torn down and rebuilt on every re-render instead of staying stable, which could momentarily show the locked state before catching back up.

v2.8.3

19 August 2026

• Added a /api/version endpoint returning the currently deployed app version, for syndicating a live version number to the marketing site footer without manual updates.

v2.8.2

19 August 2026

• Added an RSS feed of this changelog at /changelog/feed.xml, for syndicating release notes to the marketing site (or any other feed reader) without manual updates.

v2.8.1

19 August 2026

• Rotas: the "— leave" badge on each day now colours amber for Holiday and green for Day Off, matching the same key used on Book Time Off and the Upcoming Leave panel.
• Added a Weekly Staffing Cost panel to the Rotas sidebar (admin only) showing Hourly, Salaried, and Total spend for the week you're viewing — hourly staff calculated as rostered hours × their rate, salaried staff as annual salary ÷ 52.

v2.8.0

18 August 2026

• Added App Lock: a screen-lock PIN or password (admin's choice) for Property Admin and Outlet Manager accounts, separate from their login password. Locks automatically after a short period of inactivity or when the device wakes from sleep, and replaces the whole dashboard with a lock screen rather than hiding it behind an overlay — nothing renders underneath while locked.
• Setting up App Lock is now the first mandatory step for new admin/manager accounts, and existing accounts are prompted to set one up on their next login. A "Forgot your PIN or password?" option emails a reset link without logging you out of your underlying session.
• Admin dashboard sidebar sections (Account, Admin, Temperatures, Kitchen Ops, Food Safety & Compliance) are now collapsible, with only one open at a time — whichever section contains the page you're on always opens automatically, including after a refresh. The staff portal is unaffected.
• Added pay (hourly rate or annual salary) to the Edit User modal in Users & Access, visible and editable by Property Admins only.
• Risk Assessments: added six ready-made starter assessments (Main Kitchen, Cellar & Dry Store, Delivery Bay, Pot Wash, Cleaning & COSHH, Front of House) that import with hazards and control measures pre-filled from the standard hazard library.
• Fixed missing vertical spacing between stacked form fields on the Risk Assessments and Checklists creation forms.

v2.7.74

18 August 2026

• Added Risk Assessments, a new toggleable module (off by default in Settings → Modules) for building hazard-by-hazard risk assessments with a live-calculated 5×5 likelihood × severity risk matrix. Admins can add hazards from a built-in library of 10 standard UK kitchen hazards or write fully custom ones, each with its own control measures, assignees and target dates.
• Every assessment requires a competent person's digital signature (using the same signature capture as Training Records) before it can go live; editing the title, area, or scope after signing clears the signature and requires re-signing.
• Assessments can be organised by area (e.g. Front Kitchen, Loading Bay, Walk-in Freezer) and, where the Outlets module is enabled, grouped and filtered by outlet.
• Added an Annual Review tool that bundles every active risk assessment into a single PDF and sends it to all staff for read-and-sign, using the same 12-month sign-off flow as Training Records.
• Each assessment can be exported as a standalone PDF containing the administrative details and full assessment content required for EHO inspection.
• Added a Site Address field to Settings, used on Risk Assessment PDFs.

v2.7.73

15 August 2026

• Updated the Terms of Service to cover Multi-Property organisation linking (including how trial time and existing subscriptions carry over when properties are combined) and complimentary access grants.
• Internal platform administration improvements to property and organisation management tooling.

v2.7.72

15 August 2026

• Clarified that the AM/PM check windows in Settings (property and organisation level) now govern more than fridge/food temperature logging — the section heading, description, and tooltip explain they also drive checklist AM/PM tagging and the AM/PM Routines feature.

v2.7.71

13 August 2026

• Added AM/PM Routines, a new toggleable module (off by default) that gives staff a single guided walk-through — checklists, fridge/freezer temps, food temps, and a maintenance check — in an admin-defined order, instead of separate disconnected pages. Steps already completed are automatically skipped; opt-out is sticky for the rest of that shift period only.
• Admins configure separate AM and PM step orders under AM/PM Routine → Manage Routine, using the same drag-and-drop reordering as checklist templates.
• Checklists now use a simple AM/PM tag instead of an exact notify/deadline time — existing checklists were migrated automatically based on their previous notify time.

v2.7.70

12 August 2026

• Fixed the dashboard checklist banner incorrectly showing completed checklists as overdue/due soon, caused by a timezone calculation bug — the Checklists page itself was always correct, only the dashboard summary was wrong.
• Checklist templates can now be reordered by drag-and-drop on the Manage Templates tab, reflected everywhere templates are listed. Existing checklists keep their current order automatically.

v2.7.69

10 August 2026

• Shift-based access control for compliance logging (food temps, delivery temps, corrective actions, checklists, maintenance requests) now checks the actual time of day, not just whether staff have a shift scheduled that day. Staff can log from their shift's start time through 1 hour after it ends; outside that window submission is blocked, unless a manager has granted a specific shift override for that day.

v2.7.68

10 August 2026

• Removed "Spot check" from Food Temperature check types — it allowed staff to manually mark any temperature as OK with no validation against the property's configured safe ranges.
• Added "Freshly cooked" as a check type, validated automatically against the property's "Cooked min" setting. Renamed "Cooked / reheat" to "Reheated" now that Freshly cooked covers the fresh-cook case separately.
• Every food temperature check type now has its outcome fully derived from the reading, enforced on both the client and server — never manually selectable. Historical entries logged before this change continue to display and count correctly everywhere.

v2.7.67

10 August 2026

• Refrigeration threshold settings now block saving if "coldest allowed" ends up warmer than "warmest allowed", for both fridge and freezer, at property and organisation level.
• Fixed a bug where the Danger Zone "Delete Account" flow could schedule deletion successfully but still report an error, caused by a confirmation email failing after the critical step had already succeeded. Applied the same fix to the org property-removal flow.

v2.7.66

10 August 2026

• Added a "Danger Zone" page under Account (standalone accounts only) with a self-service Delete Account option, protected by an emailed one-time verification code and a 7-day cancellable grace period before anything is permanently removed.

v2.7.65

10 August 2026

• Staff can now review a completed training's original document at any time from "My Training" → "View", not just while it's still pending signature — the training PDF is now shown alongside the signature on file.

v2.7.64

10 August 2026

• Training → Team Matrix: the table now lists training documents down the left and staff members across the top (previously the other way round).
• The "View sig" modal now shows the assigned date, signed date, whether the signature was captured within a 10 working day target, whether it's for the training's current version, and the signature's valid-until date.

v2.7.63

10 August 2026

• Security hardening for uploaded files: documents, training PDFs, signatures, and incident/maintenance photos are now stored on a private volume entirely outside the public web folder, and can only be retrieved by a logged-in user who has access to the property (or organisation) that file belongs to. Files uploaded before this change continue to work via a transparent fallback.

v2.7.62

10 August 2026

• Fixed a bug where uploaded files (training PDFs, document library files, incident photos, maintenance photos) could 404 when opened, even though the upload itself succeeded and the file was genuinely stored. Uploaded files now go through a dedicated route that reads them from disk on every request, fixing retrieval for all affected upload types.

v2.7.61

10 August 2026

• Active hot hold session cards (admin Food Temperature Logs page, and the staff home screen widget) now use consistent, meaningful urgency colors: orange for Hotbox / blue for Display at baseline, escalating to amber near the time limit or on a low reading, and red once overdue — matching between admin and staff views.
• Replaced the map pin icon used for "Display" hot hold sessions with an eye icon across the Food Temperature Logs page, the staff home hot hold widget, and the Reports (EHO) food tab.

v2.7.60

10 August 2026

• Reports (EHO) → Food temperature logs: hot hold sessions (hotbox and display) now show as a single grouped entry with a compact timeline of each interval check (time, temperature, outcome) instead of several near-identical flat rows mixed in with regular spot checks. Standard spot check / cold hold / cooked-reheat entries are now clearly labelled by check type and show who logged them. Internal linking tags that used to leak into the notes text are now cleaned up for display.
• The downloadable "Food Temp Report" PDF got the same treatment: hot hold sessions print as one row per session with Start, interval checks, End, and Outcome columns, and every row now shows a "Logged by" column with the staff member's name.

v2.7.59

10 August 2026

• Rotas: each staff member now gets an automatically assigned, consistent color shown as an accent stripe on their shift pills, making it easier to scan a busy rota and follow one person's shifts across the week at a glance. The same color appears as a small dot next to their name in the Weekly Hours panel as a legend. Colors are a subtle tint rather than a full fill so shift text stays easy to read.

v2.7.58

9 August 2026

• Fixed the Checklists card on the staff home screen incorrectly showing "None today / No checklists scheduled" even when checklists exist. The card now counts checklist templates rather than run records, so scheduled checklists appear even before anyone has opened them that day.
• Weekly and monthly checklists now have a dedicated Schedule section in the create and edit forms, separate from notification timings. Admins can set which day of the week a weekly checklist runs, and which day of the month a monthly checklist runs.
• The staff checklists page now filters by scheduled day: weekly checklists only appear on their designated day and the day before; monthly checklists only appear on their designated date and the day before. Daily and As Needed checklists are unaffected.
• The staff home checklist count now reflects only the checklists actually due today, matching the filtered view on the checklists page.

v2.7.57

9 August 2026

• Food Cost page: the monthly cards now use a responsive grid that fills the full page width. On large screens 4 cards sit side by side; on smaller screens they reflow to 3, 2, or 1 column automatically. Each card has a 240px minimum width so nothing gets too narrow to read.
• Added a "← Home" back button to the staff portal that appears at the top of every page except the home screen. Staff can navigate back from any area without using the browser back button or the bottom navigation bar.

v2.7.55

8 August 2026

• The Checklists card on the admin dashboard now shows separate status counts for Daily, Weekly, and Monthly checklists. Each group shows its own Not Started / In Progress / Completed counts scoped to the correct time window (today / this week / this month). Groups with no templates are hidden automatically.
• Removed the redundant "On the rota today" KPI card from the dashboard header. The Today's Shifts card already shows full detail — names, shift times, and on-shift status — making the top card unnecessary.

v2.7.54

8 August 2026

• Fixed the admin dashboard temperature cards showing "logged" for units in defrost mode. They now correctly display "Defrosting" so the status is immediately clear at a glance.

v2.7.53

8 August 2026

• Fixed the urgency filter buttons (24h, 48h, Week) on the Maintenance page not working. Selecting a filter would appear to do nothing — all items remained visible regardless of which filter was chosen.

v2.7.52

8 August 2026

• Added speech-to-text microphone buttons across all descriptive text inputs in the staff portal. Staff can tap the mic icon on any text field — maintenance requests, team log entries, incident reports, delivery notes, blast chill food names, stock ordering — speak naturally, and the text is filled in automatically. Numeric and temperature fields are excluded.
• Removed the ± sign toggle buttons from the refrigeration temperature sheet. The iOS numeric keypad already includes a minus key when the decimal input mode is active, making the toggle buttons redundant.

v2.7.51

8 August 2026

• Added a speech-to-text microphone button to the food name input on the Food Temperature logging screen. Staff can speak the food item name instead of typing it, reducing manual input during a busy service.

v2.7.50

8 August 2026

• Fixed an overflow issue on the staff home screen where action cards and mini stat cards could break out of their grid container on small screens.

v2.7.49

8 August 2026

• The app version number is now displayed in the footer of the staff portal so staff and managers can quickly confirm which version is running on their device.

v2.7.48

8 August 2026

• Fixed the numeric keyboard on iOS for all temperature and quantity inputs. The decimal keypad now appears consistently with a minus key available, so staff can enter negative temperatures without needing a workaround.

v2.7.47

8 August 2026

• Redesigned the staff home screen with a compact two-column grid layout for mobile devices. Module cards are smaller and more consistent in size, allowing more actions to be visible on screen without scrolling.

v2.7.46

8 August 2026

• Rotas: Added an "Update Rota" button that appears when the current week's rota has been published and then edited — managers can push changes to staff without republishing from scratch.
• Rotas: Staff now receive a push notification when their rota for the week is published or updated.

v2.7.45

2 August 2026

• Fixed the billing page layout on narrow screens — plan cards were being constrained by an inherited max-width and now fill the available space correctly.

v2.7.44

2 August 2026

• Fixed plan cards on the billing page not stretching to equal height when displayed side by side.

v2.7.43

2 August 2026

• Increased internal padding and widened the plan cards on the billing and upgrade pages for a clearer, more readable layout.

v2.7.42

2 August 2026

• New multi-property organisations now receive a 60-day free trial on signup instead of the standard period. The trial is applied automatically during registration.

v2.7.41

21 July 2026

• Fixed a redirect loop on the no-access screen. Users with an expired or invalid property session are now logged out before being redirected to the login page, preventing the browser from cycling between the two screens indefinitely.

v2.7.40

20 July 2026

• Onboarding: Setup task cards now have a "Skip for now" option so new properties can move past a step they aren't ready to complete and return to it later without blocking the rest of the setup flow.

v2.7.39

20 July 2026

• Internal update: backfilled missing changelog entries for v2.7.35 through v2.7.38.

v2.7.38

19 July 2026

• Checklist notification time inputs now use the app's styled dropdowns instead of the browser's native time picker, keeping the interface consistent across all devices and operating systems.
• The notification schedule (available window and deadline) is now always visible on each checklist card in the Manage tab — admins can see the timing at a glance without opening the edit panel.
• Fixed an issue where admin users with no rota shift were not seeing checklist notification banners on their dashboard. Admins now always see banners regardless of rota status.
• Staff can no longer start a checklist outside its scheduled time window. If they attempt to before the available time or after the deadline, a clear inline error message explains why and when the checklist becomes available.

v2.7.37

19 July 2026

• Added traffic-light notification banners for HACCP checklists on both the staff home screen and the admin dashboard. Banners appear green when a checklist becomes due, turn amber after a configurable delay (default 45 minutes), and go red as the deadline approaches.
• Admins can now configure a notification time and deadline window per checklist template from the Manage tab, controlling exactly when each checklist becomes available and when it must be completed by.
• Renamed the navigation section to "Food Safety & Compliance" and grouped Food Safety Management and HACCP Checklists together for easier access.

v2.7.36

18 July 2026

• Added an admin-only feedback button in the top bar. Admins can submit feedback or report issues directly from any page in the dashboard — the message is delivered to the Chef-Ops-Pro team by email.

v2.7.35

18 July 2026

• The property logo now appears in the staff dashboard header, giving each property a branded experience when staff log in.
• Split shifts on the rota now appear on a single row with a shaded break gap between them, making the weekly schedule easier to read at a glance.
• The staff sickness history tab now groups consecutive sick days into a single absence episode rather than showing one row per day.
• Fixed a bug that allowed overlapping shifts to be created for the same staff member on the same day.
• Fixed checklist completion tracking — previously only daily-frequency checklists were counted as completed for today; weekly and monthly checklists are now correctly recognised as done.

v2.7.34

18 July 2026

• The Users & Access page now groups adjacent sick days into a single absence episode rather than showing one pill per day. If a staff member was off for three consecutive days, they appear as one entry (e.g. "12 Jul – 14 Jul") with a single green tick once the Return to Work form is complete.
• Fixed the admin dashboard incorrectly flagging a Return to Work banner as outstanding when the RTW form had already been signed for a different day within the same absence episode.

v2.7.33

18 July 2026

• Staff members now see red action banners at the top of their home screen when they have an outstanding Right to Work check, or when their manager has completed a Return to Work form and is waiting for their signature. Tapping either banner takes them directly to the relevant form.

v2.7.32

14 July 2026

• Changed the Food Cost navigation icon from a dollar sign ($) to a pound sign (£) to reflect the UK currency.

v2.7.31

14 July 2026

• Consecutive sick days are now treated as a single absence episode. If a staff member is marked sick on adjacent days, only one Return to Work form is required when they return — not one per day.
• The Return to Work form header now shows the full absence period (e.g. "Mon 7 Jul – Wed 9 Jul, 3 days") rather than a single shift date when the absence spans multiple days.
• Fixed a bug where the dashboard could show duplicate Return to Work banners for the same person when they had more than one sick record without a completed form.

v2.7.30

13 July 2026

• Added Open Graph metadata so when the app URL is shared on social media (LinkedIn, WhatsApp, Slack, etc.) it shows a branded preview card with the product name, tagline, and a summary of key modules.
• Added Twitter/X card metadata for large image previews when shared on X.
• Added JSON-LD schema markup so search engines understand the app is a kitchen compliance and operations SaaS.
• Added full icon declarations and search engine indexing instructions.

v2.7.29

12 July 2026

• Restyled the Right to Work manager verification checklist — replaced default browser checkboxes with styled toggle rows matching the app design. Checked items highlight in green with a tick icon on the same line as the label text.

v2.7.28

12 July 2026

• Replaced the browser default file picker button on the Right to Work document upload with a styled button matching the rest of the app. On mobile devices tapping the button will offer the option to take a photo with the camera or choose from the photo library.

v2.7.27

12 July 2026

• Fixed the Users & Access page layout which was displaying incorrectly with the Shift Access panel and user list appearing side by side instead of stacked.

v2.7.26

12 July 2026

• Fixed user profile avatars disappearing after every deployment. Avatars are now stored permanently in the database.
• Fixed a crash on the dashboard after the Right to Work module was deployed — a missing database entry was causing the app to fail on login.

v2.7.25

12 July 2026

• Internal version bump used to confirm a deployment had completed successfully on the live server.

v2.7.24

12 July 2026

• Added the Right to Work compliance module (can be enabled per property in Settings > Modules).
• Staff can sign a declaration, select their citizenship type, and upload their passport or enter a share code from their profile page.
• Managers can review submitted documents, complete a verification checklist, approve or fail the check, or bypass for existing staff.
• A direct link to the GOV.UK share code checker is provided for foreign nationals.
• Red alert banners appear on the admin dashboard for any staff with a pending, expired, or failed check.
• Each staff member in Users & Access shows a status badge indicating their Right to Work check status.
• Automated email and push notifications are sent to managers at 90, 60, and 30 days before a visa or document expires.

v2.7.23

12 July 2026

• Admin dashboard now shows a red banner when a staff member is back on shift after a sick absence and their Return to Work form hasn't been signed yet.
• Manager must sign the Return to Work form before the employee is able to sign it.
• Employee receives a push notification when their manager has signed and the form is ready for their signature.
• Each staff member in Users & Access now shows their sickness absence history with links to their Return to Work forms.

v2.7.22

12 July 2026

• Added dual e-signatures to the Return to Work form — both the manager and the employee must sign.
• Manager signs after completing the form. Employee is then notified and can add their own signature to confirm they agree with the contents.
• Both signatures are displayed with the date signed and are included when the form is printed.

v2.7.21

12 July 2026

• Added per-day AM and PM temperature check schedule. Admins can now set which days of the week require an AM check, a PM check, both, or neither. Previously all days were treated the same.
• Compliance scoring now accounts for the actual check schedule rather than assuming twice-daily every day.
• Onboarding wizard updated with a simple Yes/No question to set the check schedule, with a custom grid for non-standard schedules.
• Settings page updated with OPEN/CLOSED toggle pills for each day and check period.
• Added full sickness tracking — admins can mark a rota shift as sick directly from the edit modal. The shift pill greys out on the rota view. Admins receive a push notification to complete a Return to Work form.
• Return to Work form covers: updates since absence, confidentiality, reason for absence, discussion notes, and next steps. Includes a rolling 12-month absence count.
• Staff can view their own sickness history under Profile > Sickness.
• Fixed an unauthenticated cron endpoint that was publicly accessible without a security token.