Changelog

What we have shipped.

A dated record of changes you can see in ReceptionOS, newest first. Each entry says what changed and the day it shipped.

The log starts in May 2026 with the releases customers use today, and we add to it as we ship.

October 2026

Several documents on one sign-in, shown page by page

A sign-in journey can now carry several NDA or health and safety documents, in order. PDFs are drawn page by page on the tablet, and every acceptance records the exact version. Documents need a connection, and a document that can't load can be skipped.

Editing a document creates a new version and keeps the old one on record. A visitor reads each document to the end before they can accept it.

September 2026

Fire roll-call made for the warden's phone

Marks made without a connection are saved on the phone, labelled as awaiting sync, and sent when it reconnects. The phone layout adds a filter for people not yet accounted for, search by name or company, and an iPhone home-screen shortcut. The roll-call page must already be open before the signal drops.

The roll-call page has to be open and loaded first: there is no offline launch. Status is shown in words and icons, never colour alone.

Pre-registration without an email, and a better bulk import

Email is now optional when you pre-register someone, there is a field for the visitor's vehicle registration, and the bulk import reads real spreadsheet exports, shows a preview and names any rows it skipped.

With no email address nothing is sent, so the arrival code has to reach the visitor another way. Dates are read the UK way, and a date that could be read two ways is refused rather than guessed.

July 2026

Change a person's role without removing them first

An administrator can change a person's role in one step from the People page, instead of removing and re-inviting them. The last owner of an organisation still can't be removed.

Administrators see only the roles they are allowed to grant.

See when directory sync last ran

Owners can see on the single sign-on settings page when directory sync last ran, or that it hasn't run yet. Sync runs every four hours, or on demand.

Directory sync is part of Enterprise identity, with single sign-on. Sync only ever adds people as hosts: portal roles stay a human decision.

Invitation emails for the admin portal

Someone new to ReceptionOS who is given a portal role gets an invitation email, and an administrator can send one to anyone with a portal role who hasn't signed in yet. People who are only hosts get none, so a shared building doesn't email another company's staff.

While an organisation’s single sign-on is active, the portal sends no invitation emails, so anyone outside your identity provider, such as another tenant’s administrator, has to be told how to sign in.

Visitors can type their host's name when they can't find it

If a visitor can't find their host in the directory, a journey can now let them type the name. It is off by default, and the kiosk shows the typed name on the confirm screen before the visitor signs in. A host typed in by name is not notified.

If you need the host told, leave the setting off.

Rename people, correct their email and move them between tenants

Administrators can rename a person, correct their email address and move them between tenants from the People page. A check stops anyone editing a person who is more senior than themselves.

Email changes have extra checks for people managed by single sign-on or directory sync.

Single sign-on settings show the live connection status

Single sign-on now shows whether the connection is pending or active, and directory sync can place new staff in a tenant by their department. Directory sync never removes an organisation's last owner.

Single sign-on and directory sync are part of Enterprise identity. Sync only ever adds people as hosts: portal roles stay a human decision.

Tenant admins manage their own tenant

A tenant admin can manage the people in their own tenant, and no one else's. An organisation's last owner can't be removed.

This is what lets a shared building give each tenant company its own administrator without showing it the other tenants.

Midnight sign-out, tablet alerts and scheduled notices

Visitors who forget to sign out are signed out at midnight, and managers get a digest email. Owners and site managers get an email if a tablet goes quiet for 30 minutes.

Employees are exempt from the midnight sign-out. Sites can schedule on-screen notices, such as a weekly fire alarm test, and a Connected tablets page shows each tablet and when it was last seen. Unused pre-registrations expire seven days after the expected arrival.

Company single sign-on and directory sync

Single sign-on with a SAML 2.0 identity provider is set up by the account owner in the portal. Directory sync adds new staff as hosts and removes access for leavers, every four hours or on demand.

Both come with a step-by-step Microsoft Entra ID guide, and the sign-in page offers company single sign-on by work email. They are part of Enterprise identity, which is priced per organisation.

May 2026

Visitors can sign in or pre-register from their own phone

Visitors can sign in from their own phone through a link, or pre-register themselves through a public link.

Both links can be revoked.

See it on your own front desk.

Book a 20-minute demo on video, or on site in South Wales. If it fits, we’ll set up a 30-day pilot on a tablet you already own.

In 20 minutes we’ll show you:

  1. The kiosk in English, then Cymraeg
  2. A contractor held for approval
  3. A host’s email arriving
  4. A live roll-call across two phones, one losing signal

We reply within one working day.

ReceptionOS