FlowOne.PRO
Try the demo
Changelog

What shipped. When.

FlowOne ships every day. This is the honest log — new features, speed-ups, security hardening and fixes, distilled straight from the commit history.

Get these updates in your inbox

One email when new features ship — the same list you see here. No marketing, unsubscribe anytime.

We only use your address for changelog updates.

  1. FlowOne NEO: the assistant gets a name — and becomes your workspace agent

    The FlowOne assistant is now FlowOne NEO — the One in FlowOne. Not a chatbot but a workspace agent: it searches first and reads only what matters, connects email to tasks, hours and calendar, tells you whether a client is ready to invoice, and tidies your mailbox — asking for your confirmation before every change. The new product page shows every capability as an animated demo.

    • NewSearch first: NEO queries FlowOne’s own workspace index (Meilisearch) — mail, attachments, Drive files and folders, documents, boards, cards, todos, clients, chat, bookings, tickets and assets — and opens only the most relevant hits. Faster, cheaper, and less data leaves the system.
    • NewEmail conversations become actual work: NEO compares the requests clients sent by mail with your boards and todos, lists what is still missing and proposes every missing task on one card — all of them created with a single confirmation.
    • New“Can I invoice Nova yet?” — billing readiness from one question: tracked hours and amount, done and open tasks, client requests still waiting on you, invoices issued, with a clear verdict. The decision stays yours.
    • NewMailbox tidy-up: move mail to a folder (creating it if missing), label, pin, run or create a Quick Step, and turn a one-off clean-up into a permanent filter that runs on the mail server — every step a proposal card with 24-hour undo.
    • ImprovedTransparent activity stream: while NEO works you see the real steps (“searching… 18 relevant items”, “reading 6 email conversations”, “comparing requests with tasks”); after the answer the stream collapses into a one-line history you can expand.
    • ImprovedNew product page at flowone.pro/copilot: one Nova request played end to end, the search funnel, a five-module recap, request → task, billing readiness, the six-step confirmation rail with all 13 kinds of action and the three DLP gates — animation instead of prose.

  2. FlowOne NEO: ask your workspace anything — then let it act

    The Assistant stops being a manual and becomes a copilot for your own work. It reads your tracked time, tasks, calendar, every mail folder, your chat, Drive activity, bookings, project statistics and the Workplace registry — only what you are allowed to see — and answers with tables, charts and headline numbers instead of paragraphs. And when you ask it to do something, it prepares the change as a card: nothing is written until you click Confirm, and everything can be undone for 24 hours.

    • NewWorkspace read tools: “How much did I work for Nova in September?”, “Which of my tasks are overdue?”, “What did I promise the client in the last email exchange?” — NEO reads your work sessions, time tracker, board cards, personal to-dos, calendar, sent mail, a nightly digest of the email threads you took part in, your Drive activity and your chat. Only your own data, never a colleague’s mailbox or hours.
    • NewThe whole mailbox, every folder: it lists your folders and subfolders with unread counts, searches inside one folder by sender, subject words and exact dates, and linked Gmail, Outlook or IMAP accounts are part of the same search. Providers are auto-discovered, so a newly linked account is covered the moment it syncs.
    • NewConfirm-to-execute actions: log hours on a card, create or close a task, put a meeting in your calendar with attendees and a real invitation, save an answer as an Excel, Word or PowerPoint file in Drive — with your organisation’s design presets or “blue and red” in plain words — or add a section, chart, slide or rows to a document you already have. Every action is a proposal card first; Confirm applies it, Undo reverts it within 24 hours (an edited document goes back to its previous version).
    • NewYearly statistics in one question: occupancy per month and per unit, busiest and quietest month, average stay, families with children, pets, new versus returning guests and revenue for your properties — and tasks created and completed per month, board or client with your tracked hours for projects. The same definitions as the Insights panels; money only for owners and admins.
    • NewWorkplace and Chat joined NEO: asset counts by category and status, what is assigned to whom, ticket queues, the full thread of a ticket with first-response time, the network map (“Which IP does Anna’s laptop use?”, “Who is online?”) — and a summary of the conversations you are a member of: topics, decisions, open questions and to-dos, with a few short quotes at most. Every answer follows your Workplace and Chat roles exactly as the screens do, confined to your organisation.
    • ImprovedAnswers, not paragraphs: lists come as real tables, comparisons and trends as charts (“Which month was I most active?” gives a bar chart of hours per month), totals as headline numbers. Tracked hours are marked measured, anything derived from emails or card activity is marked estimate — numbers are never invented.
    • ImprovedWhen a request is ambiguous — several calendars, two clients called Anna, no folder for a file — NEO asks one short question with clickable chips instead of guessing. It never asks about things it cannot do, and “save this” with nothing to save asks instead of exporting an empty file.
    • ImprovedThe interface language wins: a Hungarian FlowOne gets Hungarian answers, tables, chart labels and questions even when you type in English. The panel shows a live activity line (“searching your boards… reading tracked time… composing”) while tools run, with no stray caret before the first token.
    • SecurityYour organisation’s data-protection policy gates every NEO request: sensitive email or card content can be redacted before it is sent to the model, and the answer marks what was left out. Non-admins asking about a colleague’s data get a plain not-found — never a who-do-you-mean hint.
    • FixedProposal cards expire on the right clock, model pricing matches by prefix, and hours logged from an action card store the numeric action id correctly.

  3. Organization Fabric: your company becomes a first-class object

    Until now FlowOne knew users and their things. Now it knows the company they belong to — and everything that follows from that: a Company Drive that outlives any single employee, sharing policies that travel with the file, one central authorization engine with scoped admins, a real joiner / mover / leaver lifecycle, and a registry of trusted partners whose guests you can sponsor without ever handing them the keys.

    • NewThe organization as a first-class object: every mail domain that really is one becomes an organization with members, admins and settings — the anchor that Drive, sharing, authorization and NEO all hang off. Invalid or throwaway domains never become organizations.
    • NewCompany Drive workspaces: shared folders owned by the organization, not by whoever happened to create them — with their own quota and membership, so a departure never strands a client folder.
    • NewSharing Policies, and the policy follows the file: an organization decides who may share what with whom (internal only, trusted partners, anyone with a link), and the decision rides along with every copy, move and governed share — a file that was confidential in one folder does not become public because it was copied into another.
    • SecurityCentral authorization: roles and scoped admins live in one place, and a single can() decision answers every “may this person do this to that?” question. It runs in shadow mode first — recording what it would have decided next to what the old checks did — so it can be switched on without surprises. “Not related” now means exactly that: nothing ties the actor to the resource.
    • NewJoiner / mover / leaver lifecycle: a People tab per organization; a leaver’s sessions are revoked instantly (JWT revocation), their ownership is transferred and their mailbox is guarded — a departure is a planned scenario, not a scramble. Previews apply the same admission rules as the real move.
    • NewPartners and sponsored guests: a registry of trusted partner organizations, and guests who enter only under a named sponsor — a direct message is open to a guest only while the guest and the sponsor both sit in it; re-inviting a closed guest re-opens exactly their row, and a refused guest gets a refusal, not a generic revocation.
    • PlatformEvery phase ships with a live acceptance suite that runs against the staging cluster — join / move / leave journeys, the sponsored guest journey, policy-follows-the-file with hash checks on every governed copy — and a fixture-leftovers audit that fails the deploy if a test left anything behind.

  4. The client, right beside the email

    Reading an email from a client used to mean leaving it to find out who they are. Now a client panel docks beside the reading pane: contacts, address, billing, the CRM timeline, their Drive folders, tasks, tracked time and recent messages — and you can act from there without ever losing the message you were reading. Bookings joined the same idea: a guest’s reply email knows which reservation it belongs to.

    • NewClient panel in the reading pane: a toggleable, resizable right sidebar that recognises the sender’s company and shows contacts, address, the activity feed, tracked time, folders and the CRM timeline — with overview / work / history tabs so it never grows taller than the screen.
    • NewFiles and projects in place: browse the client’s Drive folders from the panel, create subfolders, drag email attachments or desktop files straight into them, and open a project’s task table right there instead of leaving the email. The hover card shows billing, automation and linked items.
    • ImprovedThe reading pane stays focused: file previews open in place, the document editor round-trips back to the same message, and booking modals open over the email rather than navigating away.
    • NewBooking ↔ email bridge: a guest’s reply is matched to their reservation even when the subject changed, a new quote can be sent from the conversation, and changes prefilled from the email are highlighted in the edit modal before you save them. @mention suggestions were fixed along the way.
    • ImprovedBoard columns mirror the timeline: milestones by date, workflow lists after them; milestone labels on the Gantt are readable, cards sit under their milestone, and a milestone whose cards are all done marks itself Done.
    • ImprovedApproving a sign-in from another device is instant: the waiting screen is woken over WebSocket instead of polling every 15 seconds.

  5. Data Protection: one engine guarding mail, Drive, chat and AI

    A company’s data leaks through four doors — an email, a Drive share, a chat attachment, a prompt pasted into an AI. FlowOne now puts one policy engine in front of all four. It knows what it is looking at (IBANs, card numbers, phone numbers, contact lists, API keys), it answers with a verdict ladder from allow to block, it keeps data exactly as long as you must and not a day longer, it freezes anything under legal hold, and it records every decision without ever storing the sensitive content itself. Sixteen phases, proven live with 382 checks, rolled out to production on September 3.

    • NewPolicies with a Panel authoring UI: who, what, where-to and which content — compiled once, cached, and evaluated in about a millisecond on the zero-policy path so a company with no rules pays nothing for the engine.
    • NewRetention enforcement for mail and Drive: rules by folder, classification or age; a purge sweep that removes expired items on schedule; and a user can no longer purge what a rule says must be kept.
    • NewLegal holds: scoped to an organization, a person or a folder, enforced live at delete time — held items simply refuse to disappear, and every piece of hold evidence is deduplicated per object.
    • NewDrive classification, assigned versus effective: a label set on a folder flows down to everything inside it, admins can enforce a floor, and the effective label is what every gate reads.
    • NewThe DLP evaluator — one authoritative decision engine for email, Drive, chat and AI, with a verdict ladder: allow → warn → require justification → require approval → block. When several policies match, the strongest verdict wins, and the explainer says which rule decided.
    • NewEnforcement where it matters: the email gate sits at every send point (compose, reply, forward, filters, scheduled and automated mail); the Drive gate sits at the service chokepoints for share, public link and copy; the chat gate covers Drive embeds and attachments shared in conversations. Interactive sends get a challenge card with the reason; background jobs get a recorded verdict.
    • NewContent detectors and asynchronous scanning: IBAN, payment card, phone, email, contact list and secrets (API keys, PEM blocks, AWS and JWT tokens) plus custom patterns; documents are scanned by a worker so uploads never wait, and the summary lists every subject’s state.
    • NewApprovals bound to the exact action and scoped exceptions: an approval covers this file to this recipient, nothing else; exceptions are granted to a person, a folder or a partner for a limited time and are matched by the same engine.
    • NewEvents + Overview dashboard: every verdict becomes an event with a dedup key, and a Data Protection health card runs nine checks — scan worker, retention sweep, cache, context failsafe and more — so a silently stopped job shows up before anyone notices a leak.
    • NewGuided Setup with presets: basic, recommended and strict apply a coherent policy set in a few clicks, each rule explained in plain language by the advisor; policies can be duplicated, edited and saved as your own templates; trusted partners and guided exceptions are part of the wizard.
    • NewCRM and project context: a rule can say “only to the client this file belongs to” — the engine asks the CRM and Project Hub who that is, memoizes the answer and fails safe when it cannot tell.
    • NewAI governance: sending content to a language model is a governed action like any other external destination. A policy can redact detected content before it leaves, require approval, or block — and NEO marks what was left out. Every SaaS provider counts as external; only loopback and private network endpoints count as internal.
    • NewShadow / monitor-only mode: a policy set can be brought live in monitoring first — every would-be verdict is recorded, nothing is blocked — and flipped to enforce once the numbers look right. Retention rules never carry monitor mode; a deletion is not something to rehearse.
    • PlatformProduction rollout by the book: a read-only verifier proves every migration, table, column, engine version and cron job after the update without touching a single customer row; schema canaries in the provisioning gate turn a rejected DDL into a loud “Schema INCOMPLETE” instead of a table-does-not-exist weeks later.
    • FixedThe migration runner treated a SQL syntax error as “already applied” and moved on silently. It no longer does; a repair migration recreates the one table that slipped through.

  6. Storage that survives a provider

    Drive files and mail attachments can now live in S3-compatible object storage — any provider, path-style, TLS only — with a second live mirror at another provider, an honest replication lag figure, failover and failback levers in Fleet, an immutable backup bucket that no live system can ever write to, MariaDB point-in-time recovery, and disaster drills that run themselves on a schedule. The whole plane was moved live between two providers and back on the staging cluster to prove there is no lock-in.

    • PlatformStorage profiles in Fleet: reusable S3 profiles (production or backup purpose) with encrypted credentials and a probe that records what the bucket actually supports — versioning, Object Lock, encryption — never what the operator hoped. HA pairs must match storage exactly; mixed pairs are refused before any cluster row exists.
    • PlatformA dependency-free S3 client with verified writes: every upload is checked against its ETag while streaming (a mismatch deletes the object), multipart parts are verified one by one, and nothing is ever presigned — encryption, antivirus, quota and audit stay server-side.
    • PlatformDrive learned storage backends per file and per version: encryption stays above the backend, classic boxes stay bit-identical, and a file can have its current version on S3 and an old version on disk. Stalwart’s mail blob store learned S3 the same way, with read-back verification before the switch counts.
    • PlatformA live mirror at a second provider: an on-box replication engine copies primary → mirror in bounded cycles and reports lag in objects, bytes and seconds through the agent heartbeat. It never deletes en masse, never copies from an empty source, and freezes itself the moment the mirror becomes active.
    • PlatformFailover and failback as Fleet levers: fail over to the mirror requires a reason and shows the honest lag warning (what will be missing until resync); failback requires a measured proof that the primary caught up — Fleet measures, it never takes the operator’s word. A half-flipped HA pair is structurally impossible.
    • PlatformStorage alerting that proves absence: a synthetic dual-side probe in every heartbeat, scan sweeps for the failures only silence can reveal, three locked paging rules, and a zero-traffic outage drill that passed in 118 of its 180-second budget.
    • PlatformImmutable backups and point-in-time recovery: an independent locked bucket with proven immutability that must never become a live target, append-only replication into it, MariaDB point-in-time recovery from the immutable chain (Fleet-automated), the crypto install id escrowed beside the key file, and a backup → production blob restore path for the lost-box case.
    • PlatformMigration with a ledger: a content-hash integrity census over every Drive file, a leased migration engine that moves local → S3 under live traffic with per-item verification and a hard-quarantine list, the Stalwart blob plane migrated the same way, and a promotion operation that makes a verified secondary the named primary — exercised live Wasabi → MinIO → Wasabi → MinIO.
    • PlatformDrills that run themselves: an automated DR drill runner around the proven storage gate, a heartbeat-driven scheduler, outcome and staleness alerts, a resilience card with the rolling recovery record — and a quarterly fresh-VPS rebuild rehearsal that measures the infrastructure-loss recovery time end to end. Drills refuse to run on hot-swapped or stale code.
    • PlatformSLA evidence benchmark: a load harness with a real account pool, adaptive windows, honest first-byte and CPU figures, per-component telemetry on every cell, hardware class and storage topology as ledger dimensions, and a bench lock so a mid-run deploy can never split one measurement into two populations.
    • FixedAbandoned chunk-upload assemblies and compose temp attachments are reaped (both grew unbounded), and large blob uploads and attachment sends get payload-aware deadlines instead of one fixed timeout.
    • FixedFleet drift alerts no longer fire on Fleet’s own deploys or on the deliberately independently pinned OnlyOffice image, and CLI-driven updates now record a deployment like dashboard-launched ones.

  7. Lockdown you can manage, spam laundering closed, and mail that reads right on a phone

    The SMTP lockdown from the stolen-password incident grew a proper management surface in both Fleet and the box’s own panel, a hole that let spam launder itself through a forward was found and closed with a one-button proof, the login page learned to survive the WAF’s human check on every path, and a long list of phone reading annoyances went away.

    • SecurityManaged SMTP AUTH allowlist: same-box websites and known senders are allowed by IP or CIDR (a domain is resolved at add time and kept as a label), managed from Fleet or from the panel with a three-way merge so neither side ever silently reverts the other. The mirror rides the agent heartbeat, so drift now means real drift. The compromise detector’s mode (off / alert / contain) is a working switch, not a badge.
    • SecurityForward spam laundering closed: mail to a forwarding address got a correct spam verdict, but the redirect hop re-entered the server with the filter exempt and landed in the destination inbox as clean. Every panel forward now has a spam gate ahead of it, and a one-button Arm Spam Engine proves the whole pipeline live — probe, score, junk placement, every forward’s script — with an ARMED / DEGRADED verdict.
    • FixedNormal email use tripped a WAF rule and banned a colleague: remote image and link-preview URLs travelled raw in the query string and looked like an attack. Target URLs now travel base64url-encoded; no user action ever looks like a remote-file-include again.
    • FixedThe WAF’s human check no longer dead-ends the login page: password, passkey, two-factor and demo paths all recognise an intercepted request by evidence and route into a one-shot reload of the challenge page; the native apps open it in a browser sheet and re-probe. A dead backend still never triggers a reload.
    • FixedA mailbox with duplicate Message-IDs could make the initial sync refetch the same page forever, burning CPU every five minutes. A forward-only page-floor ratchet guarantees the sync always advances and terminates.
    • FixedReading mail on a phone: all To recipients are shown, the message body can be dragged to scroll on iOS, the last lines are no longer cut off behind the action bar, and swipe-to-delete rows no longer paint as a jumbled overlap.
    • NewEvery image preview is zoomable on desktop and mobile — wheel, drag, double-tap and pinch — in email attachments, shared links, Drive versions, mood boards and the chat lightbox.
    • ImprovedThe projects timeline grew up as a PM tool: a week tier in the header at every zoom, captions for tiny bars, a freely resizable label column, sidebar and timeline in sync, same-day milestones fanned out, delete from the Gantt, tasks auto-Done when every subtask is, amber gap badges between sequential tasks, false “someone else changed this” conflicts gone, runaway trackpad scrolling tamed, and the quick-add popover clamped to the viewport.
    • ImprovedLinked-account mail that arrived encrypted-at-rest is stored readable by decrypting with the source account’s keys, and a manual refresh now sweeps linked accounts too.

  8. A watchdog for stolen mailbox passwords

    A real incident — a mailbox password stolen by malware and abused within hours by a botnet spanning six unrelated networks — was contained and turned into a permanent defense: every FlowOne mail server now keeps durable authentication forensics, caps how fast any single account can send, and runs a compromise detector that watches every login and every outbound message for the patterns that betray a stolen credential.

    • SecurityMail-account compromise detector: every login and every outbound message is normalized into a forensic event stream, and detection rules run each minute — watching for logins from multiple unrelated networks, sending spikes above the account’s own learned baseline, bursts of never-before-contacted recipients, bounce storms, and the giveaway pattern of one mailbox queueing mail from unrelated networks within minutes.
    • SecurityThe signature that catches a stolen password: several unrelated networks authenticating as one account combined with an outbound spike opens a critical incident within a minute — alerting FlowOne chat and the admin inbox. Incidents are deduplicated: one compromised mailbox is one incident that escalates, never a flood of alerts.
    • SecurityA blast-radius cap on every mailbox: mandatory outbound throttles — 100 messages per hour, 500 per day per sender — mean that even a fully stolen credential can no longer pump out thousands of spam messages, regardless of what the detector sees.
    • SecurityForensic attribution done right: an outbound message is attributed to the account that actually authenticated on that SMTP session — never to the envelope sender, which an attacker can forge.
    • FixedMail-server logs were being silently discarded — the log writer pointed at a directory that never existed. Logs now land on a persistent volume, rotate daily, and compressed forensic archives are kept for twelve months as the source of truth.
    • ImprovedKnown-networks allowlist per account: your mobile carrier, VPN or office ranges never count toward the multi-network anomaly rules — travelling does not set off false alarms.
    • PlatformA 27-test self-test suite replays the real incident synthetically — log rotation mid-stream, partial lines, duplicate suppression, every detection rule and the alert dedup policy — and runs on every deployment.

  9. Failover you can prove — measured, witnessed, evidenced

    High availability stops being a promise and becomes a measured fact: every failover is recorded as an incident with a takeover time that only counts once real mail flows again, split-brain is eliminated structurally with witness-issued write epochs, replication health is judged by three independent evidence paths, self-healing climbs a bounded recovery ladder before ever paging a human — and a client-facing evidence report shows all of it, number by number.

    • PlatformFailover incidents with honest RTO: every takeover is recorded from detection to “serving”, and “serving” only counts when a functional probe passes through the production hostname — webmail answering, SMTP accepting, IMAP greeting. A DNS flip alone never counts as recovered.
    • PlatformWrite authority became a witness-issued epoch: only the node holding the current epoch may accept writes, every promotion obtains a new epoch first, and a superseded active parks itself. Two writable actives can no longer exist — structurally, not just by convention.
    • PlatformReplication trust from three independent paths: agent telemetry, a database probe the control plane runs itself, and a canary row that must actually cross to the standby. If the paths disagree, replication is marked untrusted and automatic promotion is blocked.
    • PlatformStaleness gate on every automatic promotion: if promoting the standby would exceed the permitted data-loss window, the promotion is refused — a stale replica is never silently promoted.
    • PlatformThe recovery ladder: a failed self-heal no longer pages a human immediately. Automation climbs bounded rungs — repair replication, reseed, recreate the database, full restore — and a person is only called when the ladder is exhausted. Every attempt is audited.
    • PlatformAutomatic disaster takeover: if both data servers die and stay dead past a grace window, the recovery node stops being a passive backup vault and serves — restored from its own local snapshots, gated by the same write-epoch and functional-probe rules, and loudly announced.
    • NewThe SLA evidence report: a client-facing, printable proof pack per cluster — measured takeover times per incident, drill history, the replication-trust record, backup cadence from real runs and the self-healing audit. Every number is anchored to a stored record, never a promise.
    • PlatformScheduled failover drills with freshness policing: clusters can rehearse a full switchover on a schedule in a quiet window, and a cluster whose last drill is too old raises an alert by itself.
    • ImprovedBackup honesty: the cluster page shows measured snapshot ages instead of “recovery node online”, and a backup job that silently stops running — no failure, just absence — now raises an alert on its own.
    • NewDrift watch on every server: hand-pulled images, hand-edited configuration and containers screaming errors into their logs are detected on the heartbeat and alerted — a real deploy re-baselines automatically, so the platform never cries wolf about its own changes.
    • ImprovedResource history graphs grew up: value gridlines, an always-visible worst-case line, the period peak labeled in place, a hover readout with exact numbers, and a personal soft level you can draw on the chart to see every hour that crossed it.

  10. Sign-in you can trust — the phantom login failures are gone

    “Sometimes I can’t log in from my phone” had real causes, and today they’re fixed: brute-force protection no longer counts strangers on your mobile network against you, a lockout says exactly how long it lasts with a live countdown, Windows Hello and Touch ID survive cache hiccups, and trusted devices stay trusted as long as you actually use them.

    • FixedMobile sign-in on shared carrier networks: hundreds of people can share one 5G address, and their failed attempts used to count against yours. Brute-force protection is now per-account first — someone else’s typos can no longer lock you out.
    • SecurityAttackers could forge a header to disguise where login attempts came from — fooling rate limiting and audit trails. Every security decision now resolves the real client address behind our own proxy; forged headers are ignored.
    • SecurityThree-layer brute-force protection: strict limits per account and per account-address pair (rotating addresses won’t help an attacker), plus a broad per-address backstop tuned so shared networks never trip it by accident.
    • ImprovedHonest lockouts: instead of a generic “Login failed”, the sign-in page now says why and for how long — a live countdown anchored to the server clock, so backgrounding the app can’t desync it. The app also no longer silently retries rejected attempts into a timeout.
    • FixedWindows Hello / Touch ID no longer vanishes from the login page during cache hiccups: passkey challenges gained a database fallback with the same strict single-use guarantees, so biometric sign-in keeps working even mid-outage.
    • ImprovedSlow passkey prompts get room to breathe: the sign-in window grew from 2 to 5 minutes — cross-device approvals no longer die with an expired-challenge error.
    • ImprovedTrusted devices stay trusted while you use them: each sign-in extends trust by 30 days (up to a hard 180-day cap), and trust is revoked the moment you change your password, change two-factor settings, or sign out everywhere.
    • PlatformA new 33-test server-side regression suite guards all of it — shared-network scenarios, header-spoofing chains, exact lockout boundaries and a concurrency race on passkey challenges — and runs on every deployment.

  11. Drive shares that explain themselves — and Companion goes personal

    Drive gets a Sharing column that shows exactly how every item is shared, external recipients automatically receive working no-login links, renaming works Explorer-style right in place, linked email accounts finally sync their entire history — and the Companion extension grows personal superpowers: clip anything to Tasks, boards, Drive or Mood Boards, and track website time.

    • NewA Sharing column in Drive: see at a glance how every file and folder is shared — hover for the full picture (links, people, groups, guest links, expiry, restrictions), click to copy the link when there is one, and the Properties panel gained the same detail in a new sharing section.
    • NewSharing with someone outside your company just works: FlowOne detects external recipients and automatically provisions a no-login access link (office files open straight in the editor), and the invite email says exactly what the recipient gets — including a caution when a personal link should be kept private.
    • FixedExternal-recipient detection is now scoped to your organization — a stale record could previously classify an outsider as a FlowOne user and email them a login-only link they could never open.
    • NewInline rename everywhere in Drive, Windows-Explorer style: press F2 or pick Rename and the name becomes an input right where it is — grid, list, compact view and the folder tree, with the file extension preselected out of harm’s way. The rename dialog is gone.
    • ImprovedLinked email accounts became actually usable: “Sync now” pulls the entire history in rounds instead of the newest slice, all remote folders come along (custom folders recreated, Sent and Archive merged into your own), the Linked Account filter works even mid-backfill, and label chips finally find labeled mail older than the newest page.
    • NewCompanion grows personal superpowers, fully separate from the property pairing: clip pages, selections and images to Tasks, board cards, Drive folders and Mood Boards from the context menu or side panel; optional idle-aware website time tracking that credits work to the right client without ever double-billing a second; and a next-meeting strip from your Calendar. A reception PC can stay property-only while your own browser holds both identities.
    • ImprovedThe extension now speaks FlowOne’s actual design language — Outfit type, glass cards, gradient accents, real toggles — pinned to light theme, with image clipping fixed and one-click save to a preset folder.
    • FixedThe shared Team Leave calendar is strictly per organization: a global bridge could previously show every organization’s absences to everyone. Affected calendars clean themselves up on the next sweep.
    • PlatformContinuous integration moved to a self-hosted build runner on our own hardware — image bakes no longer depend on hosted build minutes, so every push to production ships through a freshly built, verified image.

  12. Price Watch — see the competition, price with confidence

    Bookings gets a revenue-management layer: watch competitor listings on Airbnb, Booking.com and szallas.hu, get pricing alerts backed by a market band — with the fetching done by the new FlowOne Companion browser extension, because OTAs block server addresses. Meanwhile the booking widget gains a real Airbnb-style availability calendar with crossed-out booked dates and a per-unit mode.

    • NewPrice Watch: track competitor listings on Airbnb, Booking.com or szallas.hu — scheduled checks sample the weeks ahead, draw a market band around your own rates, and raise pricing alerts you can dismiss or apply, with every applied rate audited.
    • NewFlowOne Companion, a Chrome extension, does the fetching from your own browser: OTAs block datacenter addresses, so a paired browser worker pulls the prices instead — pairing codes come from the app, tokens are hashed at rest, and the panel lives in Chrome’s side panel right next to FlowOne.
    • ImprovedPer-competitor activity: click a watched competitor to see the freshest pulled prices (per-night, totals, sold-out flags) and the last ten check runs with honest statuses — “prices unchanged” instead of a confusing empty run, and anti-bot blocks reported as exactly that.
    • ImprovedAirbnb pricing now uses the same interface Airbnb’s own site uses (prices left the page HTML long ago) and learns each listing’s minimum stay; Booking.com checks ride the browser’s own cookies past the anti-bot wall — those cookies go to the OTA only, never to FlowOne.
    • ImprovedCheck timing is randomized so the traffic carries no scheduling fingerprint, and check frequency became friendly presets — every 6 hours up to weekly.
    • NewAirbnb-style availability calendar in the booking widget: past and fully-booked dates render crossed out, a stay may still end on a changeover day, and the checkout picker never lets a selection span occupied nights.
    • ImprovedThe date picker collapsed into a compact check-in | check-out field that expands on click, jumps to the month being edited, and closes itself once the range is complete.
    • NewPer-unit calendar mode: a property can let guests pick a specific unit and see that unit’s own availability — switchable in the Widget panel, with an instant preview before anything is published.
    • FixedReports no longer crash on bar and pie charts, and calendar days no longer shift by one in timezones east of UTC.

  13. Point your phone at the passport

    Guest data collection goes scan-first: the booking widget reads passports, ID cards and driving licences with the phone camera — entirely in the browser, the image never leaves the device — hosts verify identities with one click, compliance state is visible on every check-in row, and a new Reports builder turns bookings and guests into filterable, exportable charts.

    • NewDocument scanner in the guest form: the phone camera reads the machine-readable zone of passports and ID cards (ICAO 9303, with check-digit validation) entirely in the browser — the image is never uploaded anywhere — and autofills the statutory guest fields.
    • NewDriving licences too: an EU licence parser steps in where there is no machine-readable zone, and printed extras like birth place and mother’s name are harvested from ID backs after a scan — always flagged for verification, never blindly trusted.
    • NewHost identity verification: scanned and manually-entered data sit side by side in the booking detail, every guest carries a Scanned / Manual / Verified badge, and arrival reporting politely waits for guests the host hasn’t verified yet.
    • NewCompliance strip on the Today panel: every check-in row shows NTAK data completeness, document-scan state and host verification at a glance — plus an NTAK/VIZA summary box that warns about unclosed days.
    • NewReported guests ledger: a per-guest view of every NTAK and VIZA transmission — what was reported, when, and with what result.
    • NewVisual Reports builder: pie, donut, bar and line charts over bookings and guests — revenue, nationalities, age groups, document types, scanned vs manual — with deep filters, year-over-year comparison, CSV export and a print view.
    • ImprovedBookings on small screens: the sidebar becomes a slide-in drawer, views adapt to their pane width instead of the window, and detail-modal footers fit phone screens.
    • Improved“Arrivals / Departures” became “Check-ins / Check-outs” across the dashboard and the digest email — hotel wording, not airport wording.
    • FixedThe scan-on-arrival QR code no longer fails with “No guest portal link” on older bookings — missing portal tokens now heal themselves for every active booking.

  14. Statutory reporting goes live — and the company gets one CRM

    Hungarian accommodation compliance lands end to end: NTAK data supply and VIZA guest-document reporting run armed on production, a channel manager takes shape alongside — and a new Shared Company CRM turns personal client lists into one permissioned company registry with a unified, attributed activity timeline.

    • NewNTAK reporting built in: per-property guest identity generation exactly per the specification, an operational queue with daily close, an admin panel that shows every message — and the booking widget now collects the statutorily required guest fields.
    • NewVIZA guest-document reporting end to end (per the official PMS-THF-VIZA specification): arrivals, corrections and departures flow to the authority automatically with the official retry ladder, check-in/out hooks that never block a guest on a reporting hiccup, a live status panel and per-guest registration badges — armed and verified on production.
    • NewChannel Manager takes shape: a provider-independent foundation plus the Airbnb-first connect path (OAuth, listing mapping, lifecycle) — with a plain-language explainer on why each OTA can or cannot connect yet, and a step-by-step Airbnb software-partner guide.
    • NewShared Company CRM: promote personal clients into a company-wide registry with viewer / editor / manager grants for colleagues and departments, manager-only financials, multi-domain client identity and opt-in email-thread sharing — everything the team does (emails, calls, meetings, deal moves) flows into one attributed timeline.
    • NewThe company registry is a Monday-style table: status tabs, visibility filters, apartment badges, primary contacts and permission-gated hourly rates — plus CSV import with domain-deduplicating merge, and permission-gated export.
    • NewCustom pipeline stages: the fixed deal pipeline becomes fully editable per user or per organization — chevron stage header, stage editor, and a lost-reason dialog.
    • ImprovedClient timelines read like a feed: a month/week axis with a today marker, per-day activity strips, colored type chips, date-range filters and clickable day headers that spotlight a single day.
    • FixedZoom and Outlook meeting invites no longer render as “No message content” — calendar parts are found even when the mail server classifies them outside the regular body, and a consumed invite no longer doubles as a phantom attachment.
    • ImprovedEvery native browser confirm() across the CRM surface is replaced with the app’s own dialog — consistent look, real translations.

  15. Chat gets buttons — and the servers press them first

    Chat messages can now carry real Accept / Decline buttons, and the first system to use them ships the same day: a file watcher that guards critical server files, reloads the web server on its own for trusted .htaccess edits, and asks in chat — with the exact diff — before anything sensitive counts. The popout chat grew wider so those diffs read comfortably — and the Panel’s network topology map grew into a proper IT-ops tool the same morning.

    • NewInteractive chat messages: apps and webhooks can attach real Accept / Decline buttons to a message. The first click decides — everyone else sees the outcome instantly, the buttons grey out, and the decision is recorded with who clicked and when.
    • SecurityButton callbacks are protected by one-time server-side tokens that never appear in the message, in URLs or in access logs — they travel exclusively in a dedicated header, and a used or superseded token is dead.
    • NewFile watcher on the server fleet: critical files (tenant .htaccess, wp-config.php) are hash-watched. Plugin edits to .htaccess reload OpenLiteSpeed automatically — no more “why isn’t my rewrite live” — while sensitive files wait for an explicit approval.
    • NewApprovals where you are: risky file changes arrive in chat with the exact diff, the file owner and Accept / Decline buttons — declining restores the previous version from a snapshot. The same queue lives in the Panel, with rule management, pending approvals and a filterable audit view.
    • PlatformEvery watched-file event is audited: who changed what, which policy fired, every web-server reload, and every accept or decline with the actor — a machine-readable trail plus a human-readable log, both rotated.
    • ImprovedThe popout chat window is wider (up to 720px maximized), and messages with code blocks or diffs use nearly the full width, wrap long lines, and can no longer push the conversation past the window edge.
    • ImprovedDecision confirmations in chat are color-coded: accepted arrives in a green bubble, declined in red, expired in amber.
    • NewThe Panel’s network topology map became a real IT-ops tool: discovered devices re-classify as new evidence arrives, cards take their device kind’s color (printer, server, IoT, TV…), and a live search and type filter dim everything except the hits — even in zen mode.
    • ImprovedThe map draws real network tiers instead of an everything-to-router fan: switches and access points group their attached devices under them, driven by evidence only — uplink facts, the Wi-Fi network reported by the Drive agent, or a manual “connects to” override — and every card shows which Wi-Fi it is on.
    • FixedClearing one notification tab no longer silently wipes the others: the requested scope finally reaches the server, and campaign notifications clear separately from email ones.

  16. Workplace arrives: tickets, leave and assets

    An entire internal-operations suite ships in one day — JIRA-style tickets with request participants, leave management that flips your chat status to “On vacation”, and a company asset registry — with roles assigned per module from the Panel, while call rooms stop swallowing microphones and Bookings picks up NTAK completion, filters and batch offers.

    • NewWorkplace tickets: report IT issues and requests as JIRA-style tickets — categories route to the right team, WR-numbered refs, comments with agent-only internal notes, attachments, and a full audit trail with notifications on every hand-off.
    • NewLeave management: request time off with real working-day math (weekends, public holidays, half days), balances that never drift, designated approvers and a team absence timeline. Pending and future requests stay editable — and approved leave flips your chat status to “On vacation” by itself, clearing it after the last day.
    • NewAsset registry: every company device gets an AST-tagged record with assignment and service history, printable QR labels and ticket linkage — resolving an incident writes the asset’s service log on its own.
    • NewRequest participants, like in JIRA: add colleagues to a ticket so they can see it, track progress, comment and receive every notification. The ticket shows who opened it front and center, and “My tickets” includes tickets you participate in.
    • NewThe ticket view grew up: tabbed Comments / Attachments / Activity, real image thumbnails with drag & drop upload, inline title rename, and a details sidebar with one-click status, assignee and priority changes.
    • NewTables you can actually work in: All tickets, My tickets and the asset registry are sortable data tables — click any column to sort (status in workflow order, priority by urgency) and filter by assignee, including “Unassigned”.
    • NewRoles are assigned in the Panel, per module: HR runs Holiday, the service desk runs Tickets, IT runs Assets — none of them sees the others’ data, and everyone else is automatically an employee who can submit requests. No in-app admin setup, ever.
    • NewWorkplace joined the ecosystem: tickets, leave and assets pin to the sidebar, share into chat as live cards, appear in universal search, feed the Automation Hub — and approved leave mirrors into a shared Team Leave calendar.
    • NewCall links can be named: see which link was created for which client, and rename them inline in the public-links list.
    • FixedCall rooms never start silently muted: the microphone enables through a fallback ladder (preferred device, retry, browser default), and if every rung fails a toast points at the mic button — no more joining a call where nobody hears you.
    • FixedMic, camera and speaker menus can no longer be covered by the shared screen — and they always highlight the device that is actually in use, even when you are running on browser defaults.
    • ImprovedBookings keeps rolling: NTAK completeness now includes the address and warns when a document expires before departure, the bookings list and guest directory gained sortable columns and server-side filters, KPIs grew (month/year revenue, ADR, cancellation rate), properties get custom note fields, seasonal offers send in batches with per-guest consent checks — and the widget welcomes returning guests back with their loyalty discount.
    • ImprovedEmail multi-select works properly on desktop: once one message is selected, plain clicks toggle rows in and out of the selection instead of opening them.

  17. Your booking day — digested, printed, automated

    Bookings joins the FlowOne ecosystem: a Today panel opens the workspace, a morning digest email lands per property, everything prints as a clean A4 document, booking events flow into the Automation Hub — and guest emails can now trigger follow-up automations of their own.

    • NewToday panel: the Bookings workspace now greets you with the day at a glance — arrivals, departures, in-house guests, cleaning and same-day turnovers, special-needs flags — switchable to week and month horizons.
    • NewDaily digest email: every property can send a morning summary of upcoming arrivals and departures (6:00 by default, in the property’s own timezone) — pick the day, week or month scope in the Emails tab.
    • NewPrint everything: the booking sheet, filtered booking lists, the day sheet and the timeline calendar all print as clean A4 documents.
    • NewBookings joined the ecosystem: booking events (created, confirmed, arrival and departure due, guest data completed…) flow into the Automation Hub and notifications, bookings appear in universal search with role-aware results, every stay mirrors into a shared property calendar, and guests can be linked to CRM clients.
    • NewBooking email automations: workflows can now react to “guest opened a booking email” and “guest data still missing” — follow up an opened confirmation, chase missing NTAK data weekly until it’s complete (it stops by itself), or follow up an opened seasonal offer. Three ready-made recipes ship in the workflow gallery.
    • NewSeasonal offers with consent built in: send a personal offer to past guests — marketing consent and the do-not-contact list are enforced on the server, one offer per guest per year.
    • ImprovedCalendar month view: multi-day events render as one continuous bar across the week instead of a chip repeated in every day — with “+N more” overflow and arrows where a bar continues into the next week.
    • ImprovedBooking events mirrored into the calendar carry a one-click “Open booking” button straight to the reservation.
    • ImprovedEmail previews can open the guest portal in demo mode — test the check-in data form end to end without saving anything real.
    • FixedBooking polish: the email template tabs no longer freeze, deep-linked and pinned bookings open with their details filled in, and property logo upload heals its storage folder on its own.

  18. Bookings arrive in FlowOne

    An entire accommodation-booking stack ships in one day — properties, pricing and roles, an embeddable website widget, an operations timeline with NTAK guest-data collection, branded guest emails with open tracking, and loyalty tiers — while Website Chat graduates to a standalone addon and a wave of finishing touches lands across the suite.

    • NewBooking addon: set up properties, units, seasonal pricing and team roles, and manage everything from the new Bookings workspace in the Email app — with the legal layer (merchant identity, versioned terms) built in from day one.
    • NewEmbeddable booking widget for your own website: availability search, live quotes, secure holds and checkout with replay-safe booking creation — one script tag or the WordPress plugin puts it on any site, and its look is customizable with an in-app live preview.
    • NewOperations layer: a per-unit timeline calendar of every stay, a guest portal where guests submit the statutory NTAK data before arrival, and self-service view/cancel links for guests.
    • NewGuest emails on autopilot: confirmation, guest-data request and reminder, arrival info and post-stay thanks — branded with your property’s logo and colors, with per-property templates in Hungarian and English, a tabbed editor and a design preview.
    • NewEvery booking email carries open and click tracking: read/click badges on bookings and guests, plus per-email-type statistics for the property.
    • NewLoyalty tiers: returning guests earn spend-based tiers with automatic discounts at checkout — tier badges and engagement history in the guest directory, with a per-guest drill-down.
    • ImprovedThe Bookings workspace opens with a KPI strip: today’s arrivals and departures, occupancy, revenue and active holds.
    • NewWebsite Chat is now a standalone Panel addon with a multi-site registry — one FlowOne, many websites, each with its own key — and its own WordPress plugin.
    • NewMood boards and Drive folders can now be pinned to the right sidebar — the same one-click pin as chats, emails and cards.
    • NewWebsite visitor chats can be answered straight from the floating chat popout — no need to open the full workspace for a quick reply.
    • ImprovedThe spam warning collapses into a slim one-liner and honors trusted senders — mail from anyone marked as trusted never wears the banner.
    • ImprovedThe mobile More panel gained a language switcher tile, and the apps launcher footer holds a single row even with the longer Hungarian labels.
    • FixedThe workflow editor’s left sidebar no longer crashes when a label contains an @ sign — and a new pre-release check compiles all ~25,000 interface strings so this class of crash can never ship again.

  19. Talk to your website visitors

    Live chat lands on the website with a full agent workspace behind it — statuses, assignees and an SLA clock — while spam warnings learn to speak human and App Lock stops nagging when you merely switch tabs.

    • NewWebsite live chat: visitors on flowone.pro start a conversation from a lightweight widget — GDPR notice included — and the widget always follows the page language, even when the visitor switches mid-session.
    • NewVisitor Chat Workspace: website conversations get their own workspace behind a globe button with its own unread badge, hard-separated from your personal chats — status, priority, assignee, tags, internal notes the visitor never sees, a full audit trail, and an SLA clock that arms on the visitor’s message and stops at your first reply.
    • NewPin whole apps to the right rail: hover any launcher tile to pin it — app pins get their own zone under the perspective icons, reorder by drag, and wear their area color.
    • ImprovedSpam warnings speak human: cryptic filter codes collapse into a few everyday reasons and the tone scales with confidence — calm amber for borderline, red for strong verdicts — with the raw codes behind “Technical details”. In the panel, admins see a score ladder showing exactly what each band means: inbox, Spam folder with a warning, or never delivered.
    • ImprovedApp Lock now locks on system-wide idle only — switching tabs while you’re actively working never asks for the PIN again.
    • FixedReaction notification emails show the colleague’s display name instead of the front of their email address — and no longer repeat the emoji.
    • FixedChat bubbles hug their text again — one-word messages no longer stretch across the whole column.

  20. Every project on one timeline

    The Projects Timeline arrives — all your projects on a single Gantt with draw-to-schedule tasks, milestones and live chat embeds — alongside a phone-first fix wave and chat unread counts you can finally trust.

    • NewProjects Timeline: every project on one Gantt. Expand a project, press and drag across days to draw a task, click a day to quick-add, rename inline, wire dependencies, zoom with Alt+wheel anchored at the cursor, and go fullscreen with Zen mode.
    • NewMilestones live on their own lane with name-and-date chips, and subtasks expand with a chevron — schedule them by drawing across days, and see the actually-worked span next to the plan.
    • NewShare a timeline into chat as a live embed — the recipient gets a mini Gantt that stays current and opens the full view on click. Or grab a PNG snapshot, and printing now slices the chart into readable 1:1 A4 pages.
    • ImprovedA phone-first wave across the chat and email apps: call controls moved to a thumb-reachable bottom bar, the More panel adopted the desktop launcher’s card design, the chat chrome is fully localized — and horizontal scroll is gone.
    • FixedMessages no longer vanish silently on iPhone after the app was backgrounded — the connection rebuilds the moment you return and catches up on everything you missed.
    • FixedChat unread badges tell the truth: the header total and per-conversation counts can no longer disagree, archived chats stopped inflating the tally, and unread conversations go bold like unread email.
    • FixedFloating chat widget: channel headers are never blank, history no longer disappears in chats that received a live message before you first opened them, and member counts stopped saying zero.
    • SecurityWork Hub team views only show people from your own organization, and a card you can’t access explains itself instead of rendering a blank page.

  21. Bring your whole company over

    Directory Import lands: connect your Active Directory or LDAP server with a read-only account and move every user, shared mailbox, alias and distribution list into FlowOne in one guided pass — plus every addon now carries its area color so you always know where you are.

    • NewDirectory Import: a five-step wizard reads your Active Directory or LDAP tree with a read-only account and provisions the whole company — user mailboxes, shared mailboxes, aliases and distribution lists — with nothing ever written back to your directory.
    • NewDry run before anything is created: every discovered object is graded — will be created, already exists, or conflicts — and you decide conflicts per entry: skip it, link to the existing mailbox, or stop. Each account keeps its immutable directory identity, so re-runs recognize what is already in place.
    • NewIt knows the Exchange quirks: shared mailboxes are found even though they live as disabled accounts, distribution lists become real mailing lists (not mailboxes), and rooms or security groups are shown as out of scope instead of silently vanishing.
    • SecurityFresh mailboxes get random temporary passwords, stored encrypted and downloadable exactly once as a CSV — then purged from the server. Everyone must set their own password at first login. And if you change your mind, a guarded rollback removes only what the import created and nobody has touched since.
    • NewMigrate everyone’s mail without collecting passwords: the bulk mailbox migration now accepts an admin service account (Exchange Full Access delegation), and a finished directory import pre-fills it — import the people, then pull their mail in one motion.
    • ImprovedEvery addon now wears its area color — communication blue, planning violet, projects orange and five more. The header strip, sidebar rail, app launcher and mobile bar all follow, so you can tell where you are at a glance without reading a single label.
    • FixedThe count badge on stacked sidebar pins no longer gets clipped at the screen edge, and test alerts from internal monitoring drills can never land in real chat channels again.

  22. Your servers report into chat

    Infrastructure alerts now land in chat as color-coded messages, conversations became searchable with severity filters, and reactions got fixed — instant, reliable, everywhere.

    • NewIncoming webhooks post straight into channels: fleet and monitoring alerts arrive live as clean, named messages with an App badge — and severity colors the bubble: critical red, warning amber, info blue, resolved green.
    • NewSearch inside a conversation: full-history search from the conversation menu with one-tap CRITICAL / WARNING / RESOLVED filters, highlighted matches, and jump-to-message.
    • NewWebhook management from the conversation menu and channel right-click: create webhooks, restrict them to allowed source IPs, and rely on built-in rate limiting.
    • FixedChat reactions show up again — instantly. Your reaction appears the moment you tap it, works inside threads too, and teammates’ reactions land reliably in real time.
    • ImprovedText messages stretch to the full bubble width, so long alerts and messages no longer wrap into narrow towers — and the hover actions float neatly over the bubble edge.
    • FixedComposing a long email with attachments no longer fails with a quota error — draft autosave re-uploaded every attachment every 10 seconds; now it only saves what actually changed.
    • FixedNo more white screen when App Lock and an idle logout collided — the lock now resets cleanly at session boundaries.

  23. Sign in with a touch

    Passkey sign-in brings Windows Hello and Touch ID to the login screen, App Lock gained a manual lock and real teeth, and Team Inbox folders got the full management menu.

    • NewPasskey sign-in (WebAuthn): log in with Windows Hello or Touch ID — one biometric tap, no password. After an idle logout a welcome-back screen makes it the primary action; manage your passkeys in Settings → Security.
    • NewLock FlowOne manually: a Lock entry in the account menu plus the Ctrl+Shift+L shortcut — no more waiting out the inactivity timer when you step away.
    • SecurityThe lock screen is no longer a curtain: while locked, the app underneath is fully unmounted, so nothing sensitive exists on the page to reveal.
    • ImprovedShared Team Inbox folders carry the full management menu — rename, move, delete, empty, clean up — same as personal folders, with unread badges that update instantly for every member.
    • ImprovedSidebar pins show an instant hover preview card, and three or more pins of the same type collapse into a stack with a count badge that expands on click.
    • ImprovedEvery right-click menu across the app tightened to native OS density — long menus no longer fill the screen.
    • NewQuick Steps can now remove labels too — one-click “finish it” flows like strip Todo, apply Done.

  24. Pin anything to your sidebar

    A universal pin system lands on the right rail — chats, emails, events, boards, cards, clients and files, one click away — plus chat sending that feels instant.

    • NewPin anything to the right sidebar: chats, emails, calendar events, boards, board cards, clients, Drive folders and files, and todos — one click from their menus, drag to reorder, with a separate pin layout per perspective.
    • NewPinned files quick-look in place: images, PDFs, video, audio and text open in an overlay without leaving your view — and Word, Excel or PowerPoint files open the real Office editor right inside it.
    • NewPinned chats open the floating popout instantly instead of pulling you into the full chat app — and the popout gained a right-click menu on conversations: pin, mute, pin to sidebar, archive.
    • FasterChat sending feels instant: your message appears the moment you hit send and the input is ready for the next line while delivery finishes in the background.
    • ImprovedThe email toolbar was regrouped into purpose-built clusters — reactions, organize, security, productivity, follow-up, star & pin — with animated hover tooltips.
    • FixedChat no longer jumps while someone is typing, desktop notifications name the person who wrote (not just the conversation), and the emoji reaction picker can no longer be cut off at the screen edge.
    • FixedThe calendar right-click “Edit event” action works again.

  25. Team Inbox grows up

    The shared inbox became a real workspace — folders, assignment rules, bulk actions, a full composer — and every server disk now sleeps encrypted.

    • NewTeam Inbox folders: create your own, reorder them by drag & drop, and move conversations by dragging or from the menu — moves show up in the destination folder immediately.
    • NewAssign conversations to teammates from the right-click menu — or automatically with filter rules; assignee avatars in the mail list double as selection checkboxes.
    • NewMulti-select bulk actions, team-wide pins, per-member read/unread tracking, and conversation actions: move, mark as spam, block sender, delete.
    • ImprovedA full composer for new conversations and expanded replies in the Team Inbox — and the compose window can never hang off the screen.
    • SecurityEvery server disk is now encrypted at rest (LUKS) with network-bound automatic unlocking — reboot-drilled, with key escrow and a one-click “server compromised” revocation that locks a stolen machine out of its own data.

  26. Never forget a follow-up

    Reply reminders grew into a full system — arm them on any message, prepare the reply up front — and progress reports learned who to address.

    • NewFollow-up reminders everywhere: the “remind me if no reply” bell lives in every compose window and on any message — sent or received — with presets from 1 to 30 days.
    • NewPrepare the reply when you set the reminder: a real compose window opens with Set Reminder in place of Send, and when the reminder fires your drafted reply is ready to go.
    • NewReminders at a glance — a bell marks watched messages in the mail list, and a “Set follow-up reminder” Quick Step arms one (with an optional prepared reply) in a single click.
    • NewClient hover cards gained a Connections tab: scheduled sends, active reply reminders and every item created from the correspondence, one hover away.
    • ImprovedProgress reports are one click from any board — an always-visible Send Report button plus the Project Hub context menu — with recipients auto-filled from the client’s contacts and a FlowOne-branded footer.
    • ImprovedThe single-message view packs labels, linked items and actions into one tidy uniform line, and the New Watch Folder dialog preselects the client of the open board.
    • FixedLong pasted URLs can no longer push a progress report sideways — they wrap cleanly inside the card.

  27. Email that connects the dots

    Emails now show everything they created across FlowOne, the CRM timeline speaks email, and the desktop Drive app got a full polish wave.

    • NewLinked Items on every message: tasks, board cards, calendar events, chat shares, Drive files and deals created from an email now appear as chips right on the message — the email’s relationship graph.
    • NewThe CRM client timeline carries the email correspondence alongside notes, calls and deals — and any email becomes a deal with one click: “Create deal from this email”.
    • NewA refreshed FlowOneDrive desktop app: mirrors the cloud app’s colors and icons 1:1 and follows your theme and accent instantly over the live sync channel.
    • FixedDrive uploads rejected by the server stop retrying forever — a six-week silent retry loop was found and capped, with verified-success logging.
    • ImprovedThe Office document editor follows the app theme, including proper dark mode for the document canvas.
    • ImprovedChat: message bubbles stay readable over any custom background (opacity now goes up to 100%), and conversations always open scrolled to the latest message.
    • ImprovedRecent emails in the client hover card are clickable and deep-link straight to the message; the inline compose window no longer ignores prefilled recipients.

  28. Panel and mail server, in lockstep

    A deep audit of the admin panel against the email platform — every finding fixed the same day, deployed and verified with live server-side test suites.

    • FixedDeleting a website now cleans up its entire mail footprint too — accounts, groups, forwards and the domain itself are removed from the mail server, so nothing orphaned lingers or silently comes back.
    • Fixed“Unlimited” mailbox quota is truly unlimited again — a rounding clamp had been turning it into 1 MB at account creation.
    • SecurityBackup and Docker service controls are now admin-only across the panel API, with the role verified server-side on every destructive endpoint.
    • FixedNAS health “Check Now” no longer crashes on a failing mount, the history panel feeds live from the storage daemon’s journal, and the operator gets an email the moment recovery escalates to a permanent block.
    • PlatformMail security policy changes now sync to the mail server automatically every hour, and mail backups deleted in the panel are correctly removed from the NAS as well.
    • ImprovedThe panel tells the truth: services replaced by Stalwart say so instead of showing “stopped”, an unreachable panel agent reports a clear gateway error, and quiet failures now surface inline with a retry button.
    • PlatformSFTP user provisioning gained a hard dependency check (ACL tools ensured on every server) and a full live drill — jail, account, keys, repair, teardown — joined the server-side suite, now 100+ tests green.

  29. Migrations with zero manual steps

    The Panel’s mail migration tool now delivers mailboxes exactly the way the webmail expects them — proven with a live migration drill.

    • PlatformMail migrations arrive with folder hierarchies in exactly the shape the webmail renders — nested subfolders from the old server land correctly with zero manual fix-up, and repeated delta syncs can never duplicate messages.
    • PlatformMailboxes migrated by older tools self-heal: a safety net renames leftover nested folders automatically on the next sync, and the Panel shows how many folders were fixed per account.
    • PlatformA full server-side test suite now guards the migration path — command safety (nothing is ever deleted on either side), transfer verification and the folder logic, drilled live with a real migration.

  30. Meet the FlowOne Assistant

    An AI help guide that actually knows the product, mailboxes that convert into Team Inboxes, and read receipts fixed on the container stack.

    • NewFlowOne Assistant: an in-app AI help guide that answers product questions from the real documentation with citations — and translates articles to your language on demand.
    • NewExisting mailboxes can be converted into shared Team Inboxes right from the admin panel — every message, folder and flag survives the move.
    • FixedRead receipts and link-click tracking work again on the container stack — the proxy hid the real reader’s address, so every open looked like the sender’s own.
    • ImprovedQuote drafts follow client changes instantly, and the period row label is customizable — “Campaign period” is no longer forced onto every quote.
    • FixedTeam Workspace no longer gets stuck on “Folder not found” when two accounts load folders at the same time.

  31. Drive & preview week

    Drag & drop like Google Drive, a rebuilt document preview, and public shares that feel like the real thing.

    • NewGoogle-Drive-style drag & drop in Drive — gather animations, snap-back on cancel, drop straight onto folders.
    • NewDocument preview rebuilt: in-app PDF rendering with page thumbnails, clickable comments, docx/xlsx in the same paged viewer, and print from every preview surface.
    • NewPublic folder shares reached Drive parity: full document previews, selection, context menus and properties — for visitors without an account.
    • NewLabels can be reordered by drag & drop, and the order sticks.
    • ImprovedSaving an attachment to Drive auto-links it to the CRM client and defaults into the client’s folder.

  32. Proposal-grade quotes & anti-spoofing

    The quote builder grew into a proposal engine, and the mail server now refuses letters pretending to be you.

    • NewQuotes became proposal-style documents: sections, net/gross totals and branded public pages where clients accept with one click — in their own language.
    • NewEstimates: a freeform page builder with templates and finalize snapshots.
    • NewClient hover cards got tabs — projects, billing, quotes, automation and recent emails at a glance.
    • SecurityThe mail server rejects unauthenticated senders claiming your own domain — a classic spoofing door, closed at SMTP time.
    • ImprovedCompose: compact subject row with an inline Templates dropdown; read messages dim in the list so unread mail stands out.

  33. Email meets chat

    Drag an email into a chat, a brand-new quote builder, and the CRM moves into your inbox.

    • NewShare email snapshots into chat — drag a message from the list onto a conversation or use the context menu; the recipient sees a rich preview card.
    • NewQuote builder v1: costs and profit per line item, revisions, and one-click conversion to invoice.
    • NewInbox rows show which CRM client a message belongs to — chips or a dedicated client column, with a hover card full of live client details.
    • FasterBulk mail actions feel instant — the UI reconciles silently in the background.
    • ImprovedThe apps launcher was redesigned: a wider, airier grid with the main addons front and center.

  34. Honest headers & one-click defense

    Security actions moved onto the toolbar, and “Show original” stopped guessing.

    • ImprovedSpam, phishing and block actions moved from the overflow menu onto the email toolbar — with reverse actions (not spam / unblock) appearing in context.
    • FasterPin/unpin applies instantly, just like stars.
    • Fixed“Show original” reports SPF/DKIM/DMARC honestly: outgoing copies get neutral N/A badges instead of scary false verdicts, and each header’s verdict stays its own.
    • ImprovedSpecial folders are localized across every naming scheme — Sent Items, Sent Mail, Deleted Messages and friends all show up in your language.

  35. Instant conversations & mail that defends itself

    The biggest speed win in weeks plus a connected security loop: every spam report now teaches the server.

    • FasterEmail conversations open instantly — the thread renders right away and all message bodies arrive in one batched request instead of dozens of round trips.
    • FixedTimestamps no longer drift by your timezone offset anywhere in the app — the API now speaks explicit UTC at every boundary.
    • SecuritySpam and phishing reports now train the mail server itself: every “mark as spam / not spam” improves filtering for the whole domain.
    • SecurityThird-party tracking pixels in received email are detected and blocked, with a header badge and a personal on/off setting.
    • SecurityThe spam banner explains verdicts in plain language, and the link-confirmation dialog learned per-domain “don’t ask again”.
    • NewDrive shares and collaboration invites send beautifully designed notification emails — and can reach people outside your organization.
    • NewPublic shared folders got a full redesign: fullscreen password gate, grid/list toggle and the encryption shield.
    • NewShare activity stats: see how many times a shared link was opened and each file downloaded.
    • New“Download all” button for message attachments.
    • FixedRead-receipt and link-click notifications find their email again; filters created in the IMAP era were migrated to the new mail engine automatically.

  36. Polish, localization and permanent safeguards

    A UI refinement pass, two more addons fully in Hungarian, and hard guarantees learned from a live incident.

    • ImprovedUI refinement pass: pins follow your accent color, scrollbars auto-hide, context menus are unified, and Quick Steps opens as a proper side flyout.
    • NewWork Hub and Time Tracker are now fully localized in Hungarian.
    • FixedPDFs open and edit in FlowOne Office and save back to Drive — no more browser-viewer detour.
    • ImprovedThe demo inbox grew to 64 realistic messages with real attachments.
    • PlatformServer configuration re-renders can never wipe live credentials again — a permanent merge guard landed after a production incident was caught and fixed the same day.

  37. Speed week

    Three “it has to be instant” fixes in one day.

    • FasterOpening a folder is instant — heavy rule processing moved off the response path.
    • FasterThe calendar paints immediately instead of waiting on two sequential requests.
    • Faster“Clean folder” now runs as an instant background batch like every other bulk action.
    • NewDocuments got a companion side panel — check mail, chat or tasks without leaving the editor.
    • FixedDeeply quoted reply chains no longer squash the message into a one-character column; Sent shows the recipient instead of you; image-heavy emails no longer hit rate limits.

  38. The demo tells a story

    The live demo became a guided tour, and two more addon families speak Hungarian.

    • NewThe live demo now seeds a full business storyline — CRM pipeline with real money figures, running automations, campaigns — plus a visual “how it all connects” guide.
    • NewCRM Pro, Clients, Automation Hub and Email Marketing are fully localized in Hungarian.
    • FixedVideo calls work on the container stack — the LiveKit call server is now part of the deployment.
    • FixedThe chat GIF picker works again after Google discontinued the Tenor API — GIFs are now proxied server-side.

  39. The mobile pass

    A day dedicated to phones.

    • ImprovedMobile UI parity: reworked email action bar, readable lists, Contacts reachable from the navigation, native calls in the mobile app, and sessions that never log you out.
    • New“Try the demo” on the login page — one click into a fully seeded shared demo account that resets itself after every visit.
    • FixedBulk mail operations on very large selections no longer trip server request limits.

  40. Team Inbox

    Shared mailboxes became a real team workspace.

    • NewTeam Inbox: shared mailboxes with assignment, priorities, tags, SLA tracking, presence, internal notes and analytics — a full Missive-style conversation workspace.
    • NewA shared mailbox now acts as a complete account context: folders, calendar, tasks, search and reactions all work inside it.
    • ImprovedThe setup wizard asks for your language on the very first screen, merges theme and color into one step — and celebrates with confetti.
    • ImprovedThe news ticker pushes the app content up instead of covering it.

  41. Many clusters, one platform

    The multi-cluster program landed, and Drive learned to edit PDFs.

    • PlatformMulti-cluster platform: per-cluster serving mirrors, smart login that redirects you to your home cluster, and directory-driven mail routing between clusters.
    • PlatformMailbox Migration Engine — mailboxes move between clusters with catch-up sync and archive ferrying.
    • NewPDF editing in Drive, plus “Convert & edit” for legacy doc/xls/ppt files.
    • ImprovedLinked external accounts sync read state in both directions on a background schedule.
    • ImprovedThe fleet dashboard draws the whole placement pool as one topology tree — every cluster, member, witness and backup at a glance.

  42. Inbox superpowers

    Snooze, Quick Steps, antivirus, and a control plane that survives its own failure.

    • NewSnooze: hide an email until a chosen time — it returns to its folder on top, as new.
    • NewQuick Steps: one-click multi-action macros (Outlook-style), available right from row hover.
    • NewNew filter and Quick Step actions: forward, add to tasks, add to board, create calendar event, share to chat, new email to.
    • SecurityAntivirus scanning at the SMTP gate (ClamAV) for the container stack — malicious mail is rejected before it ever lands.
    • ImprovedThe right panel (Tasks / Notifications) can be pinned into the layout and resized by dragging; calendar events can be created from anywhere in a quick popup.
    • PlatformThe Fleet control plane got its own warm standby with one-click switchover and a break-glass takeover path that works even when the primary is dead.
    • PlatformPlatform Readiness page: one view that answers “can I sleep tonight?” by folding every validator verdict together.

  43. Prove the failover, then break it on purpose

    Chaos testing, encrypted backups and the first anti-phishing layer.

    • PlatformContinuous chaos suite: faults are injected on purpose — killed services, partitioned witnesses — and the cluster must detect and recover. Every finding became a fix.
    • PlatformRecovery Node: a dedicated backup role holding encrypted, drill-verified backups of the whole cluster.
    • SecurityAnti-phishing link confirmation: external links open through a dialog showing the real destination, with lookalike-domain detection (paypa1.com gets a red banner, the real PayPal does not).
    • SecurityPhishing watcher: every opened message is silently link-scanned; a pulsing shield appears when something is off, and user reports feed back into detection.
    • NewIncident Response Center: containment tiers, forensics-first evidence collection and audit-ready timelines in the fleet dashboard.
    • FasterBulk restore from Trash and bulk pin/unpin became single batched calls instead of one request per message.
    • ImprovedReaction notification emails got a full redesign in the FlowOne visual language.

  44. The cluster heals itself

    Autonomous failover went live — drilled in both directions on a real cluster.

    • PlatformAutonomous failover: a witness-driven decision layer promotes the mirror with no human in the loop — drilled live, both directions.
    • PlatformThe full HA data plane: GTID database replication, file-volume sync, secret parity and automatic DNS repointing (PowerDNS and Cloudflare providers).
    • PlatformTLS certificates became a cluster citizen: parity is managed and renewals re-sync themselves; webmail survives failover on a stable cluster hostname.
    • SecurityFleet-wide security hardening became a managed system: measured posture score, drift detection, one-click re-hardening and actionable recommendations on every server card.
    • NewThe flowone.pro marketing site launched.

  45. Encryption at rest & the mail UI overhaul

    The security foundation every module will build on, plus the biggest mail UI update yet.

    • SecurityEncryption-at-rest foundation: a shared crypto service with derived keys, a boot-time canary that fails closed, instant admin alerting and one-click key restore from Fleet escrow.
    • SecurityThe “Encrypted” shield appeared in the app header and on every message row — the first user-visible surface of encryption at rest.
    • ImprovedProton-grade mail UI overhaul: hover-select rows, inline row actions, header-bar pagination and a redesigned right-rail app launcher.
    • NewFleet-managed announcement banners with scheduling, seasonal icons and per-user acknowledgment tracking.
    • PlatformHigh-availability groundwork: creating a MAIN + MIRROR pair became a single form, and the mail-store cutover runs from the dashboard — no SSH.
    • ImprovedFull Hungarian localization sweep across the app shell.

  46. The JMAP cutover

    The single biggest architecture change: the whole mail transport moved to JMAP.

    • PlatformThe entire mail transport moved from IMAP to JMAP against Stalwart — batched, stateful, modern. The foundation for up to 9× faster mail operations.
    • NewOnlyOffice document editing and Meilisearch full-text search joined the container stack.
    • FasterMailbox boot no longer takes seconds — initialization wins the server race at startup.
    • FixedBackground jobs (snooze, sync, cleanup) run reliably on container deployments — a dedicated scheduler service.

  47. A new mail engine: Stalwart

    One modern server replaced the whole legacy mail stack.

    • PlatformThe mail stack migrated from Postfix/Dovecot to Stalwart — one service owns SMTP, IMAP, Sieve, DKIM and spam filtering.
    • NewLive mail-engine status badges in the app and the fleet dashboard.
    • ImprovedThe fleet server page was rebuilt into clean tabs: Overview, Access, DNS, Operations, Settings.

  48. The Docker foundation

    The whole platform became a containerized product.

    • PlatformFlowOne became a containerized stack: production images built by CI, and a complete server provisioned from the Fleet dashboard with one action.
    • PlatformHost hardening, RAM auto-sizing, full DNS zone seeding and per-server credentials — all part of every deployment, automatically.
    • NewPanel Task Manager with real CPU accounting, and Docker-aware health checks and audits across the fleet.

Curious where all of this is heading?

See the roadmap

Take control of your business. One system. Infinite possibilities.

Try the live demo Talk to us