What we shipped, and what it means for you.
India-first, shipped continuously. Each entry is written in plain English so you can see what changed for your business — not just what got built.
May 2026
- reliability
Refunds — financial-year boundary and retry safety
When a refund lands on the first week of April, the original payment is still tied to last financial year — so the annual GST return reconciles correctly. Razorpay can also redeliver the same refund up to five times and only one ledger entry is ever written. No double-debit, no FY-mislabelled supply.
- reliability
Product analytics — see exactly where users drop off
A funnel from signup through email verification, WhatsApp connect and first message sent is now instrumented end-to-end. Personal identifiers (email, name, phone) never leave the application — only anonymous IDs and plan tier go to the analytics tool. DPDP-aligned by design.
- compliance
Pricing and receipts are honest about GST today
Trinetra is not GST-registered yet, so paid plans are paused and the in-app pricing carries that label clearly. Receipts you do see are issued as a Bill of Supply (Rule 49, CGST Rules 2017) — the legally correct document for a non-registered supplier. The 14-day Growth trial stays available; nothing else moves money until registration completes.
- compliance
Audit log and consent ledger are tamper-evident
The audit log and consent ledger are now structurally write-once — the application role that runs day-to-day cannot edit or delete them at the database level, only insert. A separate admin role retains emergency-repair access for documented incidents. DPDP §6/§7 audit-trail integrity baked into the schema, not just policy.
- release
Receipts you can download from /billing
Every captured payment now gets a downloadable PDF receipt with the supplier identity, the plan you paid for, and the billing period — issued as a Bill of Supply per Rule 49 CGST. Voided receipts stay downloadable for the full eight-year retention CGST §35 requires, watermarked so they can never be mistaken for current.
- infra
We scan every release for known security holes
Each release is checked against a public database of known software flaws before it ships, and we keep a signed list of every component inside Trinetra. The day a new flaw is disclosed, we can answer in minutes whether your business is exposed — and ship the patch the same day if it is.
- infra
Faster release pipeline
The build pipeline now skips duplicate work when a change is reviewed and tested at the same time, and auto-cancels older runs when newer code arrives. Less waiting between "fix is ready" and "fix is in production".
- reliability
Real-time error monitoring across the product
Crashes and unexpected errors in the API and the dashboard now flow into a dedicated monitoring tool, tied back to the exact release they came from. If you ever see a 500 screen, the support reference printed there lets us pull the failure in seconds — no screen-share through stack traces.
- security
Razorpay payments — no double charges, even on retries
Payment confirmations from Razorpay are checked for authenticity, freshness, and duplicates before they touch your invoices. Stress-tested against 50 simultaneous retries — the same payment can never bill you twice, even if Razorpay’s side hiccups mid-delivery.
- release
Wallet — prepaid balance with daily reconciliation
A new wallet ledger backs the prepaid spending model: top-up by UPI or card, every debit is recorded with a stable receipt key, and a nightly job reconciles the running balance against the ledger so a mismatch is caught the same day. Ask anytime and we hand back your full transaction history — your data, your right.
- security
WhatsApp Embedded Signup — your access stays yours
The Embedded Signup flow is now live: a business owner can connect their own WhatsApp Business Account end-to-end without us ever holding the access token in plain text. Each business’s connection is encrypted separately, so a breach on one account can’t touch another.
- release
Marketing site scaffold live
Astro and Tailwind stack with the Trinetra palette, V5 logo kit, dark mode parity, and a public-facing footer covering pricing, integrations, and legal. Ground-zero for the trinetracrm.com surface.
April 2026
- reliability
Custom domain live — trinetracrm.com + api.trinetracrm.com
Production deployment moved behind custom HTTPS domains with Vercel handling the marketing site and Render fronting the API. A five-account demo seed is wired into the deploy so testers can log in immediately.
- security
Login and password reset — safe from brute-force retries
Sign-in, signup, and password-reset endpoints now sit behind a sliding-window rate limiter sized for legitimate retries. A staged password-reset flow replaces the placeholder reset stub.
- compliance
DPDP §6 / §7 consent capture at signup
Sign-ups now capture explicit, auditable consent for personal-data processing before the account is created, with a versioned consent ledger backing every record. The policy-version footer on every legal page lets you match the consent you gave to the policy that was active when you gave it.
- release
Phase 1 MVP — Inbox, Leads, Contacts, Follow-ups
The first end-to-end working slice: inbox, contacts and leads CRUD, follow-up reminders, templates, settings, dashboard. Everything you need to run your WhatsApp sales from day one.
Get release updates
Subscribe in your preferred feed reader, or email the founder and we'll add you to the release list. No tracker, no list- broker, no third-party signup wall.