This page is updated continuously as development progresses and provides a living record of what has been delivered and what is planned next.

 

Each release brings a range of improvements — from new functionality and performance enhancements to stability fixes — informed by customer feedback gathered through support interactions, roadmap discussions, and feature requests.

 

Releases are published on the first Monday of each month. Items listed under What's Planned in the Next Release represent our current development intent, though individual items may move to a later release if they are not completed or do not pass testing in time.

 

Our published roadmap is available on the Roadmap page.


What's Available in 2.42.0

(Phase: General Release - September 2026)

Features / Changes

  • HR ↔ Benefits sync: resolve pick-list value mismatches - (BD-1101)

    Improved compatibility between HR and Benefits when syncing employee pay data. The pay basis values Annual, Hourly, Monthly and Weekly, and the pay frequency values 2 Weekly, Quarterly, Half Yearly and Annually, have been added to Benefits to match those used in HR, so these values no longer cause sync failures. Existing Benefits values are unchanged.

    A new "Fall back to default on no match" setting has also been added to pick lists. When it is switched on and an incoming salary record has a basis, frequency or change reason that does not match the pick list, the record is saved with the pick list's default value instead of failing. It has been switched on for Remuneration change reasons on all tenants. For the fallback to work, the pick list must have a default item set and that item must be active.

  • Make final enrollment page button link configurable per tenant - (BD-1145)

    Setting has been added for a custom theme to control the destination page after final submit when enrolling in a benefit.

  • Lock down MFA & PIN settings with XML control file and tenant-level overrides - (BD-1236)

    The two-factor authentication settings can now be locked at platform level. When a platform is locked down, the enforce two-factor authentication and static PIN settings are hidden from tenant settings and cannot be changed by any administrator, so every tenant on that platform stays compliant. Users who have not yet set up two-factor authentication are taken through setup at their next login. Platforms that are not locked down are unaffected.

  • Per-user Demo Mode flag — MFA exemption for demo/test accounts - (BD-1294)

    A new Demo Mode option lets administrators exempt individual demo or test user accounts from two-factor authentication, so those accounts can log in with a username and password only. Demo Mode can only be applied to standard user accounts, never administrator accounts, and setting it requires a dedicated role permission and confirmation that the account does not belong to a real person and holds no personal data. Every change is audited, and accounts in Demo Mode can be identified using the report builder. The feature is switched off by default and must be enabled before it can be used.

  • Future salary suppression — tenant-level "treat future salary as current" setting - (BD-1346)

    New tenant-level setting "Treat future salary as current". When enabled, future-dated salaries are treated as current salary across the flex statement and benefit calculations, allowing organisations to control when upcoming salary changes become visible to employees. When disabled (the default), behaviour is unchanged.

  • [FD#21753] Dependant Archive Date: Save Reactivation Date - (BD-1359 / #21753)

    When an archived dependant is restored, the date of reactivation is now recorded on the dependant record alongside the existing archive date. The reactivation date is cleared if the dependant is archived again, and is available as a new ReactivationDate column in the SoftDelete Dependants report.

  • Custom Theme – alternative Flex Summary box on My Benefits (Theme 2, hidden by default) - (BD-1386 / #22796)

    The Flex Summary on the My Benefits page on a custom theme now includes an alternative right-hand summary box, hidden by default. Where it is switched on by custom theme CSS, it replaces the standard summary and shows the flexpot, any traded benefits such as Holiday Sell, the total benefit cost and a subtotal — either the cashback remaining or the value of any overspend. Salary lines are not shown in this version. Sites that do not switch it on see the standard Flex Summary exactly as before.

  • FWP Simplified - Updates - (BD-1387 / #22028)

    Further updates to the FWP Simplified custom component. Selections made against anything other than Pension now appear in the summary box straight away, rather than only after closing and reopening the benefit tile, and the "Add more from salary" and "Confirm Selection" controls are now clickable on first use. Workplace Savings that has not been allocated now shows as "Unallocated" on the homepage instead of £0.00.

  • Tenant setting to force CC to alternate email address - (BD-1392 / #22805)

    A new tenant-level setting, "Copy all my emails to alternate email address" (Configuration > System), lets you copy all emails to every user who has an alternate email address. When it is switched on it overrides each user's individual copy preference, and the per-user on/off switch is hidden from both administrators and users - alternate email addresses can still be added, amended or removed as normal. The setting is off by default, so existing behaviour is unchanged until you enable it.

Fixes

  • SDU scheduled upload: failed PDF render leaves a broken document and aborts the whole task - (BD-1300)

    Scheduled Static Data Uploads now continue when an employee's PDF document fails to generate, rather than marking the whole task as failed part way through. Where no documents could be generated, they are left to generate when the employee next opens them and the upload is shown as Completed With Errors. Where only some documents fail, the failed documents are removed so employees do not see a broken file, and the upload is shown as Completed With Removals in the upload history.

  • Next button hangs when optional dependant type configured but employee has no qualifying dependants on custom theme - (BD-1338 / #22733)

    Resolved an issue on custom themes where the Next button did nothing during benefit enrolment when the benefit allowed optional dependants of a given type but the employee had no qualifying dependants. Employees in this situation can now continue and complete their selection.

  • Headless browser crashes on HTTPS under the .NET 10 isolated Functions runtime - (BD-1373)

    Resolved a fault that stopped PDF and document rendering on services running the .NET 10 runtime. The packaged headless browser failed on any secure (HTTPS) address, so nothing rendered, while the service itself still reported the request as successful. Rendering now works correctly on the current runtime.

  • Scheduled MergedReport uploads intermittently fail with NullReferenceException when a report source query fails - (BD-1390)

    Resolved an intermittent fault where scheduled uploads using a Merged Report, such as SFTP pushes, could fail with an unexpected error and abort the whole run. This occurred when one of the reports making up the merged report failed to return data, for example because its query timed out. A failed report source is now handled safely and the underlying error is logged, rather than causing the upload to crash.

  • Users with MFA mode 'None' on an MFA-enforced tenant must be presented with MFA setup options instead of the 2FA code entry screen - (BD-1439 / #22802)

    Resolved an issue on tenants with enforced two-factor authentication where a user who had not yet set up a two-factor method could be shown a code entry screen they could not get past, typically after previously signing in by SSO. These users are now taken to two-factor setup to choose a method when signing in with a username and password. Users signing in by SSO are not asked for two-factor authentication on the platform, as authentication is handled by their identity provider.

  • Restart email sending scheduled task when in failed state - (BD-1450 / #22885)

    Emails could occasionally stop sending for a period, typically until overnight, when a tenant's own SMTP server left a connection open and the email sending task became stuck. The platform now detects a stuck email sending task and restarts it automatically, so queued emails, including two-factor authentication codes, continue to be sent without manual intervention.

  • 2FA email code wiped when a file or image is loaded during a pending 2FA setup - (BD-1494)

    Resolved an issue where a user setting up Email OTP could have their verification code cleared before entering it, leaving them unable to complete two-factor authentication setup with no error shown. This happened if a page in the same browser loaded an image or file from the tenant site while setup was pending. Opening the two-factor setup page no longer resets the user's setup, which now only resets when the user chooses a method, and images that allow anonymous access load without affecting the pending code.

  • Investigate change to benefit audit record created by Data Trigger 'Terminate benefit' action - (BD-1447 / #22871)

    Resolved an issue where benefits terminated by the Data Trigger 'Terminate benefit' action were recorded in the benefit audit with the reason 'Benefit cancelled' instead of 'Benefit terminated'. As a result these terminations did not appear with the 'Leave' audit type, so reports filtering on 'Leave' did not include them. This affected Data Trigger terminations from November 2025. Terminations now record the correct reason and appear as 'Leave' in benefit audit reports.


What's Available in 2.41.1.2

(Phase: General Release)

Fixes

  • Report trigger with 'Send email' action duplicates user accounts - (BD-1515 / #22960)

    Resolved an issue where running a report trigger with a Send email action created a duplicate user account, with a copy of the employee and salary details, for every user in the trigger's distribution list report. Report triggers now send their emails without creating or changing any user accounts.


What's Available in 2.41.1.1

(Phase: General Release - September 2026)

Fixes

  • 2fa email code - verify withSignin bug - (BD-1476 / #22916)

    Resolved an issue in Email OTP setup where a user could be signed in before entering the verification code sent to them. Users must now enter a valid code to complete setup and sign in.


What's Available in 2.41.0

(Phase: General Release - September 2026)

Features / Changes

  • Nuget Package Updates - (BD-1041)

    Third-party NuGet package dependencies within the platform have been updated to their latest compatible versions, improving security and stability.

  • Data Comparison Reporting - Add option to "Any Last Run" to run options - (BD-1120 / #22462)

    A new "Last Run (Scheduled or Run Once)" option has been added to the "Compare to report" dropdown in Report Schedule. This allows reports to be compared against the most recently generated report, whether it was created by the schedule or run manually as a one-off. Previously, users who ran reports manually mid-month had no way to use those runs as a comparison baseline.

  • Support PDF/document template generation (SDU) when tenant is in offline mode - (BD-1241 / #22629)

    PDF and document template generation, including Static Data Uploads, now runs while a tenant is in offline mode. Previously these requests timed out because the rendering process could not authenticate while the tenant was offline, so clients who use offline mode to close access during a selection window were unable to generate documents or run SDUs during that period.

  • Line Manager Benefit Approval: Add line-manager authorisation toggle in benefit builder - (BD-1288)

    A line-manager authorisation toggle has been added to Benefit Builder, beneath the existing "Requires authorisation" switch. When enabled, authorisation for that benefit is routed to the employee's line manager rather than an administrator. Where it is left off, behaviour is unchanged. More details in Can line managers approve benefit requests without back-office access?

  • Line Manager Benefit Approval: Manager approval page - (BD-1289)

    Line managers can now see and action pending benefit authorisation requests from their own direct reports in a dashboard widget, approving or rejecting each one without needing admin access. Visibility is scoped to direct reports only, taken from the HR module line manager hierarchy, and the widget is hidden from users with no requests to action. More details in Can line managers approve benefit requests without back-office access?

  • EB Enrol Data Transfer - Rate Table - validation - WithErrors - (BD-1358)

    Data Transfer validation now covers fields driven by expressions, such as those looking up a rate table. Previously these were skipped at validation and only failed during the upload itself, leaving transfer items marked as invalid and the task finishing "With Errors" with nothing to explain what had failed. The underlying errors are now surfaced.

Fixes

  • Scheduled and run once task concurrency issue - (BD-871 / #22039)

    Scheduled tasks that act on the same benefit enrolments are now prevented from running at the same time. Previously, a manually triggered enrolment task overlapping with a tenant's nightly auto-renew task could enrol the same users twice within a fraction of a second.

  • Dependant type limit rule not validated when registering dependants via API - (BD-1237 / #22635)

    The dependant type limit rule is now enforced when dependants are registered through the API. Previously the rule was applied only in the front end, so a limit such as "maximum 1 Spouse" could be exceeded by posting dependants directly to `/api/dependant/post` or `/api/admin/dependant/post`.


What's Available in 2.40.3.1

(Phase: General Release - September 2026)

Fixes

  • 2FA + menus issue on WTW poss others - (BD-1445 / #22837)

    Resolved an issue where new users choosing an authenticator app during two-factor authentication setup had their verification code rejected on some themes, including the WTW theme, preventing them from completing their first login. The menu on the two-factor setup page no longer interferes with the setup, so the code shown in the authenticator app is accepted.

  • [Hotfix] v2.40.3 personal / addresses redirects to error page - (BD-1448 / #22874)

    Resolved an issue introduced in 2.40.3 where opening the addresses section of the personal details page redirected users to an error page.


What's Available in 2.40.3

(Phase: General Release - August 2026)

Features / Changes

  • Request code when first setting Auth and OTP - (BD-712)

    When setting up multi-factor authentication for the first time, users are now required to verify ownership of their authenticator app or email OTP by entering the generated code before the method is activated. This ensures the authentication method is confirmed as working at the point of setup. Users are also now logged out when changing their 2FA method, requiring them to re-authenticate with the newly configured method.

  • Auto login for SSO Inbound - (BD-934)

    Admins can now configure an SSO provider to automatically redirect users to the SSO login page when they access the tenant login URL. When auto login is enabled for a tenant's SSO provider, users visiting the login page will be taken directly to the identity provider rather than seeing the standard login screen.

  • Auth Code + PKCE Flow - (BD-957)

    Support for the Authorization Code + PKCE (Proof Key for Code Exchange) flow has been added to the platform's OpenID Connect integration. This enhances the security of OAuth-based authentication by providing protection against authorisation code interception attacks.

  • Custom component updates - (BD-1043 / #22028)

    Custom component has been updated to correctly handle and display additional employee and employer pension and workplace savings contributions. Where employees have opted to make additional contributions, these are now accurately reflected within the FWP module.

  • Brandhub theme TRS total to show combined employer + employee cost - (BD-1161 / #22417)

    Update to total value in TRS on custom theme

  • Include dependants in the self-registration process - (BD-1250 / #22446)

    Ability to add dependants to Registration Extra Steps fixed on a custom theme, allowing new user registrations on the front end to include dependants

  • Add information ("i") icons with hover text to the Flex Summary - (BD-1263 / #22517)

    Information icons added to flex statement tables in custom theme. Text for each managed by platform / tenant resource

Fixes

  • Enforce MFA - Email OTP - Functional Testing and 2nd factor config - (BD-812)

    Fixes for Email One Time Passcode development

  • Weak Etag header fix - (BD-1318)

    Support for weak e-tag header when platform managed through WAF


What's Available in 2.40.2.2

(Phase: General Release - July 2026)

Features / Changes

  • R&R Brand Value on email - (BD-326)

    New expression `{{RewardAndRecognitionNominatedBrandValues}}` has been developed to return brand values selected on a recognition. Values are returned in comma separated list


What's Available in 2.40.2.1

(Phase: General Release - July 2026)

Fixes

  • Not allowing user to set end date on anytime benefits - (BD-1254 / #22669)

    Bug fixed on custom theme where it wasn’t allowing setting end date on anytime benefit


What's Available in 2.40.2

(Phase: General Release - July 2026)

Features / Changes

  • Data Transfers: Hide irrelevant options when Delete action is selected for Dependant/Beneficiary Assignment - (BD-307)

    When configuring a Data Transfer for Dependant or Beneficiary Assignment records, the "Re-evaluate all expressions" and "Enforce data restrictions" options are now automatically hidden when the Delete action is selected, as these options are not applicable to delete operations. This reduces potential confusion for admins setting up bulk deletions.

  • report triggers KBS link - (BD-311)

    The help link on the Report Triggers admin page now points to the correct knowledge base article.

  • Tenant not found page on custom theme - (BD-710 / #22008)

    The "Tenant not found" page shown when a user navigates to a subdomain that does not correspond to an active tenant has been updated. The page now displays only the essential information confirming the tenant cannot be found, removing extraneous content that was previously visible.

  • Comparison report file name - (BD-776 / #21981)

    Removed square brackets from Comparison Report file names, so “my file [Data Comparison].xlsx” becomes “my file Data Comparison.xlsx”

  •  Upgrade app services - deprecated v8 services - upgrade to v10 - (BD-809)

    The platform's Azure App Services have been upgraded from .NET 8 to .NET 10 (LTS), ahead of the Microsoft end-of-support deadline. This is an infrastructure update with no change to existing functionality.

  • Invalidate cache on null/no-value API response in framework UI caches - (BD-1084)

    An internal stability improvement has been made to the platform's UI caching framework. Cache entries that returned an empty or failed response are now correctly invalidated, ensuring subsequent requests fetch fresh data rather than returning a stale empty result.

Fixes

  • Screen reader labelling error - (BD-314 / #21565)

    Fix to custom theme for labelling on screen reader

  • Minor Company Announcement UI Bug - (BD-328)

    Two issues with Company Announcements have been resolved. Using the "Create From" action at platform level now correctly creates a new announcement as a copy, rather than updating the existing one. Additionally, the History view at tenant level now displays information correctly when announcements were sent to groups or distribution lists, where previously no details were shown.

  • PWA - Tenant Configuration Save Issues - (BD-333 / #21738)

    Several issues with the PWA (Progressive Web App) tenant configuration page have been resolved. The page now provides clearer guidance when uploading app icons, including size and format requirements. Additionally, an option to remove an existing PWA configuration has been added, allowing admins to reset the setup if needed.

  • SFTP data comparison report stuck as "pending" and corrupt when benefit changes schedule runs - (BD-690)

    Fix for data comparison reporting edge case

  • History page on custom theme - (BD-727 / #21762)

    Update custom theme benefit history page so it doesn't filter out benefits not in user's package

  • PreviousSelection expression logic can cause error under certain conditions - (BD-781 / #22031)

    PreviousSelection expression when used with anytime benefits was sometimes creating a failure

  • When Setting "Benefits.Feature.TenantWindows" to "true" you can't create benefit templates - (BD-833)

    Fix for new Tenant Windows feature to support saving as benefit template

  • Permissions on Benefit Field Identifiers review - (BD-834)

    Fix for managing admin role permissions for new Benefit Field Identifiers feature

  • Add dependant form - required indicator field on custom theme - (BD-1019 / #22170)

    Required indicator added to title field on dependant form when adding to a benefit on custom theme

  • Get Certificate from KeyVault by Name failing - (BD-1023)

    An issue causing certificate retrieval from Azure Key Vault by name to fail has been resolved, restoring reliable certificate-based authentication for affected platforms.

  • Incorrect URL in admin version footer link - (BD-1025 / #22092)

    The support link displayed in the admin area footer has been corrected. The link previously pointed to an outdated support domain and now correctly directs users to support.myworkpal.co.uk.

  • Flex Statement/ Summary Scroll - (BD-1026 / #22095)

    Scroll issue fix on Flex Statements in custom theme

  • Ability to favourite a benefit fix list - (BD-1044 / #20199)

    List of fixes for Favouriting A Benefit feature on a custom theme.

  • Benefit Field Identifier - snag list - (BD-1100)

    Several issues introduced alongside the Benefit Field Identifiers feature have been resolved: a reporting error caused by a missing field reference has been fixed, field identifiers can now be set on benefit fields with an options type, and the feature flag setting is now correctly respected by reporting entities.

  • Account menu mismatch between full screen and mobile - (BD-1113 / #22111)

    Fixed an issue in the FG custom theme where the account menu did not show the same links in mobile view as in desktop view. The emails page link, visible in the horizontal desktop menu, was missing from the dropdown shown on smaller screens. Both views now display the same set of account links.


What's Available in 2.40.1.7

(Phase: General Release - June 2026)

Fixes

  • Company announcement emails to Report distribution lists send to nobody (recipients not resolved) - (BD-1127)

    Fixed an issue where company announcement emails sent to Report distribution lists were not delivered. When a Report or Merged Report distribution list was used as a recipient, no emails were sent and no delivery history was recorded — despite the announcement being marked as successfully emailed. This has been resolved by correctly wiring both Report DL and Merged Report DL recipient types through the distribution list service. Closed and suppressed accounts are also now excluded from resolved recipients.


What's Available in 2.40.1.4

(Phase: General Release - May 2026)

Features / Changes

  • Ciphr Benefits Theme - Look & Feel Parity - (BD-306)

    New CipHR theme which needs to be added to deployment builds.

  • Add support for gender icons on custom theme - (BD-338 / #21635)

    Fix to gender icons for dependants on custom theme where genders are duplicated in native language.

Fixes

  • Error deleting SFTP upload schedule - (BD-336 / #21520)

    Fix to allow deleting SFTP schedules

  • Custom theme allowing multiple selections with the same effective date - (BD-342 / #21959)

    Update to fix pension contribution selections being submitted with duplicate start dates by typing the date manually a custom theme.

  • Benefits - List field default item not pre-selected for employee - (BD-689 / #21986)

    List items in benefits can have a default selection defined. This was not working in some themes

  • RAR nominations - Exclude defined list of employees fix - (BD-766 / #22018)

    Reward & Recognition nominations - "Exclude defined list of employees" not working when distribution list includes "where" meta data queries

  • Line Manager - HOT FIX - (BD-786 / #22049)

    Fixed a problem that prevented an employee's role, such as a line manager, from being saved against their Job Details.

  • Ciphr benefits theme menu losing context - (BD-791)

    Fix on custom theme where menu changing context loosing position


What's Available in 2.40.0.13

(Phase: General Release - June 2026)

Fixes

  • Benefit Enrollment form is stuck on first stage in certain conditions - (BD-1118 / #22458)

    An issue has been resolved where the benefit enrolment form could become unresponsive on the first stage when a benefit field had its dependant type set to "Required If Exists" and the user had dependants of a different type. In this scenario, the Next button appeared active but did not advance the form when clicked, preventing the user from completing enrolment. The form now progresses correctly in this situation.


What's Available in 2.30.13

(Phase: General Release - May 2026)

Fixes

  • Custom Theme - not showing benefit footer on enrolment process when dependants are not required - Hot Fix - (BD-816 / #19845)

    Fix to footer on custom theme

  • Data Triggers Condition Types JS fix - (BD-862)

    fix to JS reduce function which was losing .type property.


Release Notes: Pre June 2026