What changed (6 October 2026)

Saudi e-invoicing (ZATCA Phase 1) completed, customers’ cards, personal data kept away from AI, US sales tax and state and local payroll, fund accounting, India compliance, panel interviews, and the console’s own dialogs.

Saudi e-invoicing: ZATCA Phase 1

A Saudi tax jurisdiction (Accounting → Tax → Tax Jurisdictions, Country SA) has Name (Arabic) and E-invoicing regime. ZATCA Phase 1 (generation) is accepted only once the jurisdiction is registered with a Saudi VAT number (fifteen digits, starting and ending with 3) and the letterhead carries the Arabic legal name and Arabic address; a Saudi company’s letterhead also asks for the building number, district and additional number.
Switched on, the AR invoice, credit note and debit note series are numbered by the system, never reset and only forward, and the bilingual ZATCA-A4 and ZATCA-A4-MEMO forms become the defaults.
AR Invoices has New invoice: customer, dates, currency, Tax invoice (B2B) or Simplified tax invoice (B2C), supply dates and lines with a VAT category (S, Z, E, O) and exemption code. Under ZATCA a draft is numbered DRAFT- and the VAT is worked out by the server from the category.
Post issues the invoice: everything is checked at once, the next number is taken, the time is stamped from the server, the seller and buyer are copied onto it, VAT is shown in SAR and the QR code is made. An issued invoice cannot be edited, deleted or reversed — issue a credit note, which names the invoice and the reason and cannot credit more than the invoice plus its debit notes.
Issued invoices and notes, their print history and the audit log are never archived or purged by Data Retention. Phase 2 (XML and clearance) is not part of this. See Saudi e-invoicing: ZATCA Phase 1.

Card payments

New: Accounting → Card Payments — Cards, Card Mandates and Card Charge Batches. A card is shown only as brand and last four; its number is encrypted with a key of its own, and the security code, PIN and stripe data are never stored. The same card is recognised rather than stored twice, and Delete destroys the number for good.
A mandate records what the customer agreed to be charged, how often and until when, with their consent word for word. Charge due mandates makes one charge per mandate per date; Export for the bank is the only place a number is decrypted, needs the Card Batch Export grant, and is recorded without card numbers.
Websites and apps can store cards and mandates through the card API (/api/accounting/card-api/v1/…), with a service account whose role is granted Card API (external integrations) by name, over HTTPS, rate-limited and locked against card testing. All five card grants are under Roles & Authorizations; ASK and agents are refused every card route. See Customers’ cards and recurring card charges.

AI and personal data

Everything sent to ASK or any AI engine is filtered on the server first: email addresses, phone numbers, IBANs and bank accounts, national IDs (Iqama, Aadhaar, SSN, PAN), card numbers and the names of people on file become placeholders, and answers are scrubbed on the way back.
Placeholders are put back only inside the actions ASK carries out for you, never in the text shown; card numbers are never put back. National IDs, passports, IBANs, bank accounts and cards are withheld from what ASK looks up.
Images and recordings sent to be read or transcribed cannot be redacted — only the text that comes back is — and a name not yet on file cannot be recognised. See What ASK and the AI engines never see.

Later on 6 October: ZATCA Phase 1 completed

Invoices and notes posted before ZATCA was switched on are issued after the fact (the back-fill), at noon Riyadh time on their posting date, and marked Back-filled; nothing posted moves.
Tax codes carry a ZATCA category (S, Z, E, O) and exemption reason, and a line coded to one takes its category, rate and reason from it.
A Saudi customer has Name in Arabic, CR number, Building number, District and Additional number; its VAT number is checked on save.
Change invoice type switches a draft between standard and simplified, and the change is logged. A credit note needs its reason on save, never takes a receipt and is never overdue (all companies). A correct invoice prints with no warning. See Saudi e-invoicing: ZATCA Phase 1.

US sales tax and US state and local payroll

Invoices, quotations and sales orders work out US sales tax from the ship-to address — state, county, city and district — where the company is registered, honouring exemption certificates and Taxability Rules, and keep every jurisdiction on Line Tax Detail. An explicit tax on a line is never overwritten. See US sales tax by state, county, city and district.
US payroll now withholds graduated and flat state taxes, applies reciprocity and the resident credit, state SDI and paid-leave programs, and local taxes (NYC, Yonkers, PA Act 32 and LST, Ohio municipal and school district, Detroit, Maryland and Indiana counties, Denver OPT and more), with W-2 boxes 14–20 and Payroll Tax Accounts. Verify the rates before a live run. See US payroll: state and local taxes.

Fund accounting and India compliance

New: Accounting → Fund Accounting — funds, grants, programs and functions on every line, derived by rule sets you write in Derivation Studio, with Test derivation and a trace on every posted line. See Fund accounting and GL derivation rules.
New for companies in India only: India Compliance (since 12 October a group in Accounting, not a module of its own) — GST, e-invoices and e-way bills, GSTR-1 and GSTR-3B, UPI collection and settlement, PF, ESI, professional tax, labour welfare fund and TDS. See India compliance: GST, e-invoicing, UPI and statutory payroll.

Hiring and approvals

Panel interviews: weighted scorecards, a panel with a chair, each panelist marking their own row, the outcome by a rule set in advance and overridable only with a reason, and candidates ranked, with selection out of rank only with a reason. See Panel interviews: scorecards, marks and ranking.
Approval Levels lists the levels in the order they sign: by rule priority, then level.

Everywhere

Every confirmation and message is the console’s own dialog: Esc cancels, Enter confirms. A list with a pager shows its record count once, in the footer. Dates follow your own date format. Pinning ASK no longer rearranges the page. See Questions the console asks, record counts and dates.
Assessment results cannot exceed the assessment’s maximum, and take only the section’s students; Fill results from section makes the sheet. See Assessment results: the maximum and the section’s students.

Configure a product built from configurable sub-assemblies (TG310 = TG100 + TW310)

Configuring a product now creates its configurable sub-assemblies at once and writes the answers down into them while you answer (value propagation), with a Characteristics across the product table (Characteristic | TG310 | TG100 | TW310).
Sub-assembly questions nothing filled in are answered on the same screen; locked ones cannot be changed there.
New rule actions: exclude, replace and re-quantify components; a variant bill of material (BOM =) and a variant routing (ROUTING =) that replace the base ones; remove an operation, change its time or its work center; validations (ERROR/WARNING); defaults that are overridable or LOCKED, for choices as well as typed values; propagation into sub-assemblies; BETWEEN in conditions; MIN QTY and MAX QTY are enforced.
Resolving gives every sub-assembly its own configured item, bill of material and routing, and the parent's bill names them; a production order raises the sub-assemblies' orders too.
New screen Configurator · Workbook: the whole definition of models and their sub-assemblies as one Excel workbook (download, Check, Import) and many rules pasted at once as IF ... THEN ... sentences.
The configurations import template downloads as Excel.
Models can now set overhead, scrap, freight, packaging, default work center and whether a routing is made.
The TG310 / TG100 / TW310 worked example is in the demo company, and downloadable as an example workbook.

Forecast your quarter and roll up your team

CRM: quota plans cut from the fiscal calendar, quotas per salesperson, team or territory, and a Forecast Board with attainment, weighted pipeline and coverage.
CRM: configurable forecast categories mapped from stages, with a reasoned per-deal override on the opportunity.
CRM: salespeople submit their call; managers roll up and adjust with a note; weekly snapshots show forecast against actual.
CRM: mailbox and calendar sync for Microsoft 365 and Google, per person and opt-in, logging matched mail and meetings as activities, and pushing CRM meetings to the owner's calendar.
CRM: lead scoring models -- weighted rules or a logistic model trained in-process with a holdout AUC -- with grades A-D, auto-qualify and routing; Score uses the active model.
CRM: the customer portal at /portal/customer -- invoices with PDF, balance and aging, pay online, orders and tracking, quotation acceptance, cases, and returns requested and tracked through Supply Chain's RMA.
Platform: the customer portal joins the supplier portal's identity -- one set of tables, one sign-in library; portal tokens are now signed under a key of their own and refused ahead of every non-portal route; per-company portal policies (on/off, required second step, session and invitation length, lockout).
CRM: point of sale -- stores, tills, sessions with float and cash count, sales and returns with tax from the tax rules, split tenders, an offline queue, and a Z report posting one balanced journal and the stock issue.
CRM: Shopify, Magento / Adobe Commerce and Amazon connectors with signed webhooks, once-only order import, SKU mapping, stock and tracking pushes and payout import.

Hand big agent work to a licensed Claude worker

Agents can hand work too big for one model turn to a licensed Claude worker with a new tool kind, 'Hand to a licensed worker' (delegate_heavy). The run waits with the status Waiting for input.
New screen: Agentic AI > Operate > Delegated Tasks. Claim, renew, submit with a file, release, accept or reject, and cancel.
Claiming a task shows a short-lived, revocable worker token with ready-to-paste connections for Claude Code (VS Code), the Agent SDK and managed agents.
New governed MCP server at /api/v1/mcp/run. Its tools are the agent's own grants plus find_endpoints, call_api, get_delegation, check_approval, attach_file and submit_result. Every call is checked against grants, guardrails and approvals, and recorded.
The Tool Catalog form has fields for delegate tools: what the worker is told, whether a person reviews the result, when the task expires, and which kind of worker it is for.
Agent approvals now expire when they pass their expiry time, and the run is told nobody answered.
The run trace shows work handed to a worker. The Push it on action also works for runs waiting for input.
The run trace no longer fails to open: it asked a view for a column the view does not have.
New role: Heavy Worker. New segregation-of-duties rule SOD-66: doing delegated work and accepting it.
New command-line worker: server/scripts/heavy-worker.mjs (list, show, claim, renew, submit, release, run).

Send a prescription to a pharmacy electronically

Prescriptions are sent to pharmacies as NCPDP SCRIPT 2017071 NewRx messages, signed, with the pharmacy chosen from a new directory; Status, Error, RxFill, renewal and change requests come back and become prescriber tasks.
Controlled substances (EPCS) need a dual-approved permission, the prescriber's own sign-in, the password and an authenticator code at signing; every attempt is in an append-only signing log.
Decision support runs again at transmit: allergy, duplicate therapy and major interaction stop the send unless overridden with a reason.
Submit on a claim writes an X12 837P or 837I and sends it to the clearinghouse; 999 and 277CA acknowledgements update the claim.
835 remittances are posted automatically with every CARC/RARC adjustment and the patient's share, with a reconciliation that checks the payment balances.
Check eligibility sends a 270 and writes the 271 answer (active, copay, deductible remaining, coinsurance) onto the policy.
A FHIR R4 API at /fhir/r4 with OAuth2 client_credentials and SMART scopes: 15 resource types, search, $everything, Observation and AllergyIntolerance create, every access audited.
An HL7 v2 interface engine: ADT A01/A03/A04/A08, ORU R01 and RDE O11 in with ACKs; ORM O01 and OML O21 out; optional MLLP listener.
Medication reconciliation at admission, transfer, discharge or a visit, signed and applied to the medication list, with a printable list for the patient.
Patient statements by billing cycle with ageing, dunning, holds and suppression, PDF, and the patient portal.
Network connections (Surescripts, clearinghouse, HL7) store credentials sealed; with none configured the sandbox answers.

My Workspace

New Employee Self Service tab: My Workspace with cards for time, leave, pay, benefits, details, dependents, documents, onboarding and leaving.
Every user linked to an employee is given the new Employee role, which opens self service and not HRMS.
Timesheets, leave, address and bank changes and resignations are routed to the manager or HR and appear in My approvals.
Bank account changes are sealed, masked to the last four digits and applied only after HR approves them.
Payslips can be opened and downloaded as a PDF by the employee.
Benefit choices can be made in self service inside open enrollment or a life event window; outside one they are refused.
Approved resignations open an offboarding with its checklist and a confidential exit interview; HR reads the answers and an Exit Reasons report.
New HR screens: Change Requests, Exit Questionnaires, Exit Questions, Exit Interviews, Exit Reasons, Checklist Template Tasks.
Benefits eligibility in HRMS no longer reads every open-enrollment window as closed.

Landed cost

Landed cost vouchers: freight, duty, insurance, handling and brokerage spread onto goods receipts by value, quantity, weight, volume or manual percentages, with a preview, posting to inventory and cost of goods sold, and reversal.
Landed cost templates estimate the charges for a receipt; Accrue landed cost on Goods Receipts posts the estimate, and an actual voucher trues it up.
E-invoicing for Peppol BIS 3, XRechnung (UBL and CII), Factur-X (with the XML embedded in a PDF), FatturaPA, KSeF FA(2)/FA(3) and CFDI 4.0, with EN 16931 validation and sending by file or HTTP.
XBRL and Inline XBRL filings of the balance sheet, income statement and cash flow against IFRS, ESEF, US GAAP and UK FRC taxonomies, with mappings and validation.
Action results can now offer a file to download (an e-invoice, an XBRL document).

Payroll outside the United States

Payroll now follows the company's country: a company outside the United States no longer sees the federal and state tax tables, Form W-4 setup, local taxes or the W-2 / 941 / 1099 forms, and their addresses answer with a sentence.
Statutory Forms lists the company's own country's forms: Form 16, 24Q, 12BB, EPF ECR, ESI and PT returns in India; the GOSI statement, WPS salary file and end-of-service settlement in Saudi Arabia.
The common payroll screens use neutral words (Income tax, Employer tax reference, Region) or the country's own (Employer TAN, GOSI establishment number).
An employee's work region is chosen from the regions of their work country, shown by name and stored as the code; the old Illinois default is gone outside the US.
Overtime rules carry a country: India's Factories Act rule and Saudi Arabia's article 107 rule are seeded, and US rules apply to US employees only.
New HRMS > Saudi Payroll: GOSI Rates, GOSI Statement, WPS Salary File and End of Service; Saudi payslips carry GOSI annuities, SANED and occupational hazards.
Companies in India and Saudi Arabia get their own pay codes, monthly pay group, national holiday calendar and liability accounts; US-only rows left by older seeds were retired where unused.

Set up an EDI trading partner

Structured EDI: trading partners (X12 004010/005010, EDIFACT D96A/D01B), connectors (sandbox, AS2, VAN, SFTP placeholder), document maps and an interchange log with per-partner control numbers.
Send via EDI on purchase orders (850/ORDERS), sales orders (855/ORDRSP), deliveries and shipments (856/DESADV) and AR invoices (810/INVOIC).
EDI Inbox: check and receive partner files; inbound 850/ORDERS make sales orders, 855/ORDRSP update PO confirmations, 856/DESADV make expected receipts, 810/INVOIC make supplier invoice drafts; 997/CONTRL generated and consumed; duplicates refused.
Supplier portal at /portal/supplier: suppliers confirm or change orders, send ship notices, submit invoices with PDF, answer enquiries and auctions, see payment status, and ask for contact or bank changes; carriers book dock slots.
Portal sign-ins are a separate identity shared by every portal, with invitations, optional second step, and access to the portal API only.
Drop-ship: items and sales order lines can be drop-ship; vendor orders ship to the customer; the vendor's shipment confirmation delivers and invoices the sales order without moving stock.
Dock scheduling: dock calendars, closures, door capabilities, bookings with double-booking prevention, check-in/out linked to the yard, no-shows, and a dock board.
Returns (RMA): request, approval with instructions, receipt into quarantine, inspection (restock, scrap, repair, return to vendor) and resolution by credit note, replacement or refund.

Rooms and the term timetable

Student Lifecycle has Buildings, Rooms, Room Closures and Room Bookings; a class meeting now names a room on file (the old room text is kept and matched to rooms by code or name).
The database refuses a room or a lecturer booked twice at once, an approved booking or closure under a class, and (by setting) an over-full room or students in two sections at once.
New Timetable page: the week by room, instructor, section, student, programme or term, with clashes marked.
New automatic timetable builder (Timetable Runs): a deterministic, time-limited proposal for a whole term, with unplaceable sections and the reason; applied or discarded.
New Exam Periods, Exams and Exam Clashes: a scheduler that keeps every student to one exam at a time and the day's limit, splits large exams across rooms, assigns invigilators, and publishes to the student portal.
New Financial Aid (US): ISIR import with a versioned layout, sealed SSNs, matching, verification and C-code tasks, cost of attendance budgets, need, packaging within the COA, over-award refusal, award letters and acceptance in the portal. Dormant for companies outside the US.
New roles: Timetable Scheduler, Exams Officer, Financial Aid Officer.