Changelog

Privacy Policy completely rewritten: 19 sections covering data roles and responsibilities, AI processing disclosure, GDPR legal bases, international data transfers, California CCPA/CPRA rights, employee monitoring disclosure, data breach notification, and updated retention schedules. Contact address updated to privacy@signalplaybookai.com.

Terms of Service rewritten: 12 sections including customer data ownership, AI services disclaimer, confidentiality obligations, IP ownership, limitation of liability, and governing law (Commonwealth of Virginia). Legal notices now routed to legal@signalplaybookai.com.

Data Processing Addendum (DPA) at /legal/dpa: covers processing roles (Customer = Controller, Signal PlayBook AI = Processor), processing purposes, personal data types, security measures, subprocessor delegation, international transfer safeguards, data subject rights assistance, security incident notification, and data return/deletion on termination.

Enterprise Trust Center at /legal/trust: four sections in one page — Cookie Policy (essential/functional only, no advertising or tracking cookies), authorised Subprocessor List (infrastructure, payments, AI, communications), AI Acceptable Use Policy, and a Security & Compliance Statement covering identity and access controls, data protection, monitoring, business continuity, privacy commitments, and compliance alignment (GDPR, CCPA/CPRA, SOC 2, HIPAA, government contractor).

Legal sidebar navigation: all four legal documents share a sticky floating sidebar (visible on large screens) and a horizontal scrollable pill strip (visible on mobile) linking between Privacy Policy, Terms of Service, DPA, and all four Trust Center sections.

Signup consent notice: the workspace creation form now displays "By creating a workspace, you agree to our Terms of Service and Privacy Policy" with both documents linked, directly below the Create workspace button.

Landing page footer: "Privacy Policy" link renamed to "Legal" (linking to the legal hub), Terms of Service removed as a standalone footer link (accessible via the legal sidebar), and social media channels added — LinkedIn, Facebook, X, Instagram, and YouTube — grouped alongside the logo.

Achievement unlock modal: when a user visits My Achievements for the first time after earning new badges, each newly unlocked badge is shown one at a time in an animated modal with a spring scale-in, a glowing pulse ring, and confetti accents. A "Got it!" button advances through the queue (e.g. "Got it! 1 of 3"). Seen badges are tracked per device via localStorage so the animation only fires once per badge.

CC recipients: Heads of Office can designate one or more CC recipients for any staff member in their office (Admin → Users → Mail icon). CC recipients receive submission notifications and gain read access to that staff member's reports, exactly like a manager or Chief of Staff would, without being in the reporting chain.

CC notification: newly added recipient. When a Head of Office adds someone as a CC recipient, that person immediately receives an in-app notification explaining that they now have access to the staff member's reports and will be notified on submission.

CC notification: report author. The staff member whose reports are being shared receives an in-app notification listing exactly who was added as a CC recipient, so they always know who can see their work.

CC removal notifications: when a CC recipient is removed, they receive an in-app notification that their access has ended, and the report author is notified that the recipient was removed. Both sides are informed on every change.

Head of Office access to Admin → Users: Heads of Office can now access the Users page with view-only access scoped to staff in their own office. The "Add User" button and edit/deactivate actions are hidden; only the CC management button is shown.

User profile from the Users page: clicking a user's name in the Users table opens their public profile page (the same view shown when clicking a @mention tag). An additional profile button (↗ icon) is also available in the Actions column.

Achievement badge colours: all achievement chips (Milestones, Streaks, Quality, Leaderboard, Recognition) now use the platform's primary colour instead of separate amber and grey palettes. Recognition badges on the profile hero row match the same style as the Achievements section.

Achievement badge tooltips: clicking any badge chip on a user's profile opens a popover explaining what the badge means and how it is earned. Badges earned multiple times show a count.

Leaderboard badges (Podium Finisher, Leaderboard Champion) were shown on user profiles even when the Leaderboard feature was disabled in settings. They are now correctly hidden when leaderboard is off, regardless of whether Achievements are still enabled.

"How the score is computed" modal on the Leaderboard page overflowed the screen on smaller displays. The modal is now wider (max-w-2xl), caps at viewport height, and the dimension rows scroll independently while the header and footer stay pinned.

Leaderboard composite score rebuilt from four dimensions to seven: Business Impact 35%, Goal Execution 20%, Accountability 15%, Report Quality 10%, Timeliness & Consistency 10%, Management Assessment 5%, Self-Assessment 5%. The weights are permanently visible in the Score Formula modal (the ⓘ button on the leaderboard page).

Business Impact (35%): Phase 1 evidence proxy. Measures result presence (45% of the sub-score), text specificity of reported outcomes (120 characters approximates a specific, quantified statement, at 30%), and strategic signal richness (25%). Phase 2 will replace this with AI-graded analysis of actual report content, rewarding concrete outcomes over volume.

Goal Execution (20%): percentage of next-week priorities that were fresh commitments rather than carried forward from a prior week. A high score means commitments were set and delivered. If no priorities were set during the period, a neutral 50 is applied and the dimension neither rewards nor penalises.

Accountability (15%, formerly Carry-Over Resolution at 20%) now includes an aging penalty: −5 points per carry-over item that remains unresolved for three or more consecutive weeks, capped at −20. Chronic blockers hurt rankings more than recently-opened ones.

Timeliness & Consistency (10%) replaces the old flat submission-rate metric. The new score combines submission rate (60%) with on-time rate (40%), so consistently late submitters are penalised even if they never miss a week.

Management Assessment weight dropped from 40% to 5%. The 40% weighting made rankings unworkable for teams with inconsistent feedback coverage. A member with no manager reviews scored 40 points below peers by default. At 5%, manager feedback remains a meaningful external signal without dominating the ranking.

Self-Assessment (5%): average of the five weekly self-score dimensions (Delivery Impact, Signal Awareness, Blocker Responsiveness, Proactive Improvement, Ownership Energy), normalised from the 1–5 scale to 0–100. Only weeks where self-scores were submitted are included in the average.

Leaderboard expanded detail row now shows all seven dimensions side-by-side with colour-coded score bars. Previously it showed only four bars. The row also flags when no manager feedback or self-scores are present for the period.

CEO and Chief of Staff dashboards now include average manager feedback: a stat card in the summary section, a per-entity column in the team breakdown table, and an annotated dot on the 8-week trend chart.

"Manage Recognitions" removed from the Recognition sidebar group. Admins and Chiefs of Staff can now access it via a "Manage nominations" button in the Wall of Fame page header. The manage page shows a "← Wall of Fame" breadcrumb for navigating back.

Recognition settings (Leaderboard, Wall of Fame, Achievements) were not being saved. The backend was ignoring those fields on every update, so Admin → Settings → Recognition showed "Saved" while nothing changed.

Achievement badges were awarded on publish even when Achievements & Badges was disabled in settings.

AI nomination trigger was not plan-gated. Orgs on plans without AI access could still trigger it. It now requires the aiEnabled feature flag, consistent with all other AI routes.

AI nominations did not check whether Recognition or Achievements were enabled, so the leaderboard could be computed and badges awarded even when those modules were switched off.

Duplicate nomination protection was enforced in application code only, so concurrent requests could bypass it. A partial unique index now enforces uniqueness at the database level (REJECTED nominations are excluded, so re-nomination after rejection remains possible).

Manual nominations had no duplicate check at all. They now return a 409 if an active nomination already exists for the same period.

The "All" period option in the filter tabs was leaking into the AI trigger and Manual Nomination modals, causing requests with an empty period value that the backend rejected.

Rejection reason typed by the admin was silently dropped. The backend was reading req.body.reason but the frontend was sending rejectionReason.

Leaderboard pagination response was nested under a meta key, but the frontend expected flat top-level fields (total, page, limit, pages). Pagination on the Wall of Fame was always showing page 1 of 1 regardless of actual data.

Wall of Fame: a curated feed of published recognitions (Employee of the Month, Quarter, and Year) with recipient avatars, citation excerpts, composite scores, and period labels. Cards open a spotlight modal with the full citation, a chronological timeline of completed work highlights from that period, period statistics (reports submitted, feedback rating, carry-over resolution, report richness), manager feedback notes, and any achievement badges unlocked during that period.

AI Nominations: admins can ask the AI to analyse the current leaderboard and automatically nominate top contributors for a selected period. Nominations flow through a confirm → publish workflow before appearing on the Wall of Fame.

Manual Nominations: admins can create recognition entries directly via a searchable recipient picker, a period selector (Month / Quarter / Year), and a period key dropdown populated with the last 24 months, 8 quarters, or 5 years depending on the chosen period.

Admin recognition workflow: each nomination can be edited, confirmed, published, or rejected (with an optional reason) from the Manage Recognitions page. A period switcher (All / Month / Quarter / Year) and a status filter (All / AI / Confirmed / Published / Rejected) help admins triage a large queue.

Performance Leaderboard: a ranked table scored on four equally-weighted dimensions: manager feedback average, report submission consistency, carry-over resolution rate, and report richness. Viewable by month, quarter, or year; visibility can be restricted to managers only or the user's own office.

23 Achievement Badges earned automatically and grouped into five categories: Milestones (First Step through Bicentennial at 200 reports), Streaks (4-week through full-year streaks), Quality (Top of the Game, Clean Slate, Clean Month, Signal Sender, Top Rated, Comeback Kid), Leaderboard (Podium Finisher, Leaderboard Champion), and Recognition (Employee of the Month / Quarter / Year).

My Achievements page: a badge gallery showing all 23 badge types with SVG icons, earned/locked state, the date each badge was first earned, and a ×N count for repeatable badges (employee awards). Grouped by category for easy browsing.

Staff profile pages now show the user's profile photo when one has been set (previously always fell back to initials). When achievements are enabled, earned badges appear inline under the user's name (recognition-tier) and in a dedicated section below (all others). When the leaderboard is enabled, the user's current rank, composite score, and a mini score breakdown are shown in the right column with a link to the full leaderboard.

Badge computation is gated by the achievementsEnabled setting and runs asynchronously after report submission so it never blocks the submit response.

Quarter recognition badges were incorrectly mapped to Employee of the Month instead of Employee of the Quarter due to a ternary that collapsed "quarter" into "month".

Badge computation errors were silently swallowed; they now log to the server error log so failures are visible.

Repeatable badges (employee awards) were being overwritten in the frontend badge map so only one instance was counted; the achievements page now correctly shows the earned count (×N) for each repeatable badge type.

Profile photo upload: users can set a personal avatar from their Profile → Account page. Clicking the camera icon opens a file picker; the selected image is shown in a preview modal before saving, so users can confirm or cancel before anything is uploaded.

Photo removal: a "Remove photo" button on the profile page opens a confirmation modal and permanently deletes the stored image, reverting to the initials fallback.

Avatars now appear everywhere a user's identity is shown: the topbar, staff list, staff insight page, team dashboard, standup page, org hierarchy, report author header, report comments and replies, feedback timeline, admin users table, admin roles panel, and org tree.

Initials circles are used as a fallback whenever no photo has been set, preserving the existing look for all users who don't upload a photo.

Three new industry survey segments: HOA Management Companies (15 questions across organization profile, operational visibility, business impact, and value & readiness), Nonprofit Organizations (14 questions), and Self-Managed HOAs (13 questions), each tailored with segment-specific role lists, challenge options, and investment ranges.

Survey picker (/survey) redesigned to a 3-column layout on desktop, with distinct icons and colours for each of the seven industry segments.

Help center articles are now prerendered as static HTML at build time. All 69 /help routes are fully indexable by search engines without requiring JavaScript execution.

Survey post-submission auto-redirect countdown was getting stuck at 0 seconds instead of navigating away; affected users who landed directly on a survey URL rather than navigating from within the app.

Six-tier pricing: Starter ($29/mo) and Professional ($249/mo) join Free, Growth, Business, and Enterprise; each tier carries defined seat limits (Free/Starter: 10, Growth: 25, Professional: 75, Business: 250, Enterprise: unlimited).

Platform Configuration: SMTP and Anthropic API credentials are now managed in Platform Admin → Settings rather than per-organization; a masked view, live test-connection button, and owner-only access are all included.

Email verification: new accounts must verify their email address before accessing the app; a resend link is available from the verification screen.

Capability-based feature gates: AI features, integrations (Jira / Google / Microsoft), snapshots, and bulk import are now controlled by per-tier feature flags rather than a minimum plan check, giving precise control as plans change.

Annual pricing now shows the full yearly commitment (e.g., "billed $228/year") alongside the per-month rate on the pricing and onboarding pages.

Platform analytics now tracks all six plan tiers; the super admin dashboard plan-distribution chart includes Starter and Professional with distinct colour coding.

Seat limits are now correctly carried over to the subscription record after a successful Stripe payment; previously every paid activation reset the limit to unlimited.

Validation: maximum field lengths increased for next-week priorities and several other report text fields to prevent unexpected truncation on longer entries.

Onboarding wizard streamlined: the domain and logo URL step has been removed; both are optional and can be configured later in Admin → Settings, reducing friction at sign-up.

Onboarding wizard now fully supports dark mode.

SMTP credential updates in Platform Admin → Settings now take effect on the next email send without requiring a server restart.

Billing checkout now surfaces a clear, actionable error message when Stripe is not configured or a price ID is missing, instead of a generic server error.

Priority Digest: managers receive a morning email on workdays listing each team member's committed next-week priorities, sent within 30 minutes of the configured office opening time.

Office opening hours and workdays settings (Admin → Org) so the digest fires at the right local time for each office.

Per-user Priority Digest opt-out in Profile → Notifications.

Organisational Impact Areas: blockers now require at least one area (Revenue, Operations, Administration, Technology Infrastructure, Product / Software Development, Technical) so leadership can spot cross-team patterns at a glance.

Signal Types: signals can now be tagged as Achievement, Risk, Blocker, Opportunity, or Decision Needed.

Manager Report Feedback: managers can submit structured feedback directly on a submitted report.

Research Surveys: a public survey experience for external audiences (Accounting Firms, Fractional CFOs, Government Contractors, Home Healthcare) with a cookie-based completion tracker and an OTP-gated results page with Excel and PDF export.

Survey notification emails: a configurable list of addresses (SURVEY_NOTIFICATION_EMAILS) receives a notification with a direct results link whenever a survey is submitted.

Report submission emails are now bundled into a single digest when multiple team members submit within the same 30-minute window.

Direct-report-late notifications to managers are grouped into a digest when several overdue reports accumulate, reducing inbox noise.

Google sign-in: link your Google account in Profile → Account to use "Sign in with Google" on the login page.

Google Calendar suggestions on the Daily Memo: today's events appear as one-tap chips under "From your calendar", merged and deduplicated with Outlook events.

Jira integration: completed issues (Done and Ready for QA) from the current week appear as chip suggestions on the Daily Memo under "From Jira".

CEO report access toggle (Admin → Settings → Submission Rules): when disabled, the CEO is limited to aggregate dashboards and published summaries.

App update prompt: a dismissible banner and auto-handling of chunk-load errors ensure users always run the latest version without losing their draft.

Back-dated report submissions: when enabled, staff can submit reports for past weeks from the New Report modal. Admins can also reassign a submitted report to a different week.

User exemption from reports: exempt users are excluded from submission rates, reminders, and missing-in-dashboard counts, but can still submit voluntarily.

Privacy Policy and Terms of Service pages.

Carry-over workflow: unresolved priorities surface side-by-side with the new results field and are pre-selected when opening the Results step.

Company Structure page (CEO, Admin, COS): org-wide hierarchy grouped by office with colour-by-office toggle and export to PNG, PDF, and ASCII.

Team Structure page for Managers and Heads of Office: subtree or office-level org chart with the same export options.

Head of Office Dashboard: office-level submission rate, average scores, morale and workload trends, and recurring blockers.

Help Center: searchable knowledge base with categories, quick tips, a Video Tutorials section, and an Ask AI panel.

Comment edit and delete: managers can edit or delete discussion comments on reports.

@mention access grants: when enabled in Settings, users @mentioned in a report, comment, or reply automatically receive a direct link and read access.

Daily Memo: a personal daily work log with a Monday–Sunday week strip, a free-form Notes & context area, and a Push to report button that pre-fills the Results section of your weekly report.

Microsoft / Outlook sign-in: link your Microsoft 365 account in Profile → Account to use "Sign in with Microsoft" on the login page.

Outlook calendar suggestions: today's meetings appear as one-tap chip shortcuts on the Daily Memo when your Microsoft account is connected.

Outlook deadline reminder: when you start a new report draft, a calendar event is automatically created in your Outlook calendar.

User status & presence: staff can set Online, Away, Busy, Offline, or a custom message; managers receive an in-app notification on any change.

Report @mentions and editing: @mention colleagues in any report field; mentioned users receive a notification and, if access is enabled, a direct report link.

Attachment management: upload up to 5 files (10 MB each) to any report; delete is available during the 30-minute edit window.

System snapshots: create manual or scheduled backups (daily, weekly, monthly), download, restore, or email snapshots from Admin → Snapshots.

Bulk import: upload a combined Excel file from Admin → Org to create offices and staff in one pass; valid rows are created, duplicate rows are skipped, and invalid rows are returned as errors.

COS Dashboard: aggregated signals, blockers, and submission funnel across all offices; quick access to draft or view executive summaries.

Admin settings pages: Notifications, Submission Rules, Security, and Audit Log.

Email 2FA with trusted devices: 6-digit code on new-device logins, 90-day trust expiry, revoked by disabling 2FA.

Forgot / reset password flow via single-use, time-limited email links.

CEO role with CEO Dashboard showing org-wide submission rates, office breakdowns, and published executive summaries.

Staff Insights page for managers: AI-generated analysis covering carry-over trends, morale trajectory, recurring signals, and efficiency patterns.

Weekly report submission: carry-overs, blockers, signals, self-scores, morale, workload, efficiency ideas, and next-week committed priorities.

Role-based access: ADMIN, CHIEF_OF_STAFF, CEO, and structural access from manager relationships and Head of Office assignments.

Personal, Manager, and COS dashboards with submission rates, morale trends, and quick-access report links.

AI report chat: ask questions about any individual report, grounded solely in that report's content, discussion, and saved meeting transcript.

Standup prep (COS only): AI briefing of cross-team blockers, submission rates, morale dips, and key wins.

Executive summaries: COS can draft, AI-generate, edit, and publish summaries visible to CEO users.

Deadline reminders and overdue alerts: configurable per office (timing) and per user (frequency, one-time or recurring).

Admin tools: user management, office configuration, roles, and audit log.