Built in public · updated July 23, 2026

Our roadmap. No surprises.

Everything on this page is either shipped, being built right now, or scheduled this year. We update it the day a feature moves between columns — not at the end of a release cycle.

Shipped
19
Available in production today
In progress
11
Building right now
Coming next
10
Scheduled this year
Exploring
7
Validating with customer demand

Shipped

Available today.

19

12 health activity modules

Clinical

Examinations, immunizations, incidents, exposures, treatments, conditions, leaves, vitals, credentials, work restrictions, record requests, file attachments — one consistent pattern across every module.

OSHA 300 / 300A / 301 generation

Compliance

Annual log, summary, and per-incident report rendered in their legally-mandated layout. Ready to post by February 1 in one click.

Employee self-service portal

UX & Mobile

Employees see their own health records, sign assigned documents, view appointments, and update their contact info — without calling your OH team.

Document management + e-signature

Compliance

Upload policies once, assign to any employee or group, and collect typed e-signatures via secure token links. No login required to sign.

Scheduling with automated reminders

Clinical

Calendar per organisation with the full lifecycle (scheduled → complete / cancelled / no-show), plus automated and manual email reminders.

Multi-organisation support

Platform

One platform serves multiple facilities, healthcare districts, or counties — with strict per-organisation data isolation enforced at the database layer.

Five role-based access levels

Security

Super admin, organisation administrator, manager, user, and employee roles with permissions enforced consistently across every screen.

PII encryption at rest

Security

Names, SSNs, dates of birth, addresses, and phone numbers encrypted in the database with AES-256. Sensitive fields masked by default in the UI.

HIPAA-aligned posture

Security

Signed BAA available with every annual contract. Built around healthcare privacy requirements from day one.

Tamper-evident audit log

Security

Every create, update, and delete recorded with user, IP, and timestamp. Reviewable by administrators and exportable for surveys.

40+ built-in reports

Reporting

Absence, call-ins, conditions, demographics, examinations, immunizations, incidents, roster, and schedule reports — exportable to CSV, Excel, and PDF.

OSHA privacy case tracking

Compliance

Privacy-case handling per 29 CFR 1904.29 — sensitive incident types stay confidential while still reporting accurately.

Root cause analysis

Clinical

Full RCA with TJC sentinel-event flag, action items, and follow-up tracking attached to every incident.

Lost time tracking

Compliance

Days away, restricted, workers' comp, FMLA — captured per incident and rolled up to the OSHA 300 automatically.

Bulk employee import

Platform

Upload an Excel roster, map columns, and provision employees and portal accounts in one pass.

Dashboard with live charts

Reporting

Flu shots, incident trend, and expiring credentials — refreshed in real time from the underlying records.

Legacy data migration

Platform

Bring 5+ years of historical employee health, incidents, immunizations, and credentials from any prior system.

Knowledgebase for portal users

UX & Mobile

In-product help so employees and staff can self-serve common questions without opening a support ticket.

Search via blind-index

Security

Search encrypted employee names without ever decrypting the underlying field — a privacy-preserving HMAC index.

In progress

Active development. Next 60–90 days.

11

Medical surveillance programs

Clinical

Auto-enrol employees by job role into recurring programs (respiratory, BBP, TB, hearing). Due / overdue queues built in.

Respirator fit testing

Clinical

OSHA 1910.134-compliant qualitative and quantitative test capture, with annual recurrence tied to surveillance programs.

Post-exposure protocol automation

Clinical

Bloodborne-pathogen exposures trigger source-patient consent, serial testing windows (6 wk / 3 mo / 6 mo), and auto-reminders.

Return-to-work workflow

Clinical

Restrictions → light-duty assignment → clearance form → signed release. One queue, one audit trail.

SOAP clinical notes

Clinical

Structured Subjective / Objective / Assessment / Plan notes attachable to any encounter, with provider attribution.

CSV import wizard

Platform

Drag-to-map column importer with dry-run, validation, and a 48-hour rollback window.

Activity Summary PDF

Reporting

Per-employee unified view across all 12 categories — exportable as a single PDF for record requests.

Hearing conservation

Compliance

Audiogram baseline + standard-threshold-shift calculation per OSHA 1910.95 Appendix F, with age correction.

State OSHA variants

Compliance

Cal/OSHA, WA L&I, MI MIOSHA, and other state-plan equivalents alongside the federal 300 / 300A / 301.

Email template engine

Platform

Customise every notification — welcome emails, reminders, document assignments — per organisation.

Reminder subsystem

Platform

Standalone reminder records, distribution lists, printable letters for employees without email, and full send-tracking.

Coming next

Scheduled this year.

10

Single sign-on (SAML 2.0 + OIDC)

Security

Azure AD, Okta, and Google Workspace out of the box. JIT provisioning with claim-based role mapping.

HRIS sync (SCIM v2 + scheduled CSV)

Integrations

Targets: Workday, UKG, ADP, Paylocity. New hires and terminations flow in automatically.

SOC 2 Type I

Security

Audit underway. Type II follows after six months of evidence collection.

Public REST API + webhooks

Integrations

Versioned, Sanctum-authenticated, rate-limited. Subscribe to events like incident.created, document.signed, exposure.reported.

Drug & alcohol testing workflow

Clinical

Random pool management, chain-of-custody, DOT and non-DOT variants, and MRO result intake.

Outbreak / communicable disease

Compliance

Line-list, contact tracing, exposure groups, and per-outbreak status — built for the post-COVID hospital reality.

Custom report builder

Reporting

Drag fields, save views, schedule email delivery. Permission-aware so PHI never leaks via aggregate views.

Workers' comp case linkage

Compliance

Tie OSHA incidents to claim numbers, indemnity, medical costs, and TTD days — direct line to the CFO's P&L.

Multi-employer support

Platform

For staffing agencies and shared-employee structures — one employee can belong to multiple employer identities.

Lost-time auto-recalculation

Reporting

Adding or editing a lost-time entry instantly recomputes the parent incident's totals across days away, restricted, FMLA, and return-to-duty.

Exploring

Listening to customer demand.

7

Native mobile apps (iOS + Android)

UX & Mobile

Employees sign documents, capture incidents with photos, and confirm appointments on their phones. OH staff can intake incidents at the bedside.

HL7 / FHIR lab integration

Integrations

Auto-file titers and immunity screens from LabCorp, Quest, and hospital LIS systems directly into immunization records.

AI assistance

UX & Mobile

Incident-narrative classification, credential photo OCR, and one-click chart summarisation. Always advisory — humans confirm.

Dynamic questionnaire engine

Clinical

OSHA respirator questionnaire, pre-placement medical history, return-from-leave forms with skip-logic and scoring.

Contractor / vendor compliance

Compliance

Track non-employee health requirements (TB, flu, N95 fit, BBP training) for travelling staff, students, and vendors.

BLS SOII + state IIS submissions

Reporting

Annual occupational-injury survey file generation and state immunisation-registry submissions via HL7 VXU.

Training / LMS-lite

Platform

Course catalog with assignment, completion tracking, and recertification — plus integration hooks for Relias and HealthStream.

Customer-led roadmap

Need a feature that's not on this page?

Every quarter we ship the most-requested customer feature — at no extra charge to the customer who asked for it. If your team needs something specific to win an internal sign-off, tell us before the deal closes. Most of the time we'll commit to it on your contract.

How we ship

A few honest notes about this list.

We update it the day a feature moves between columns — usually once a week. The "updated" date in the hero reflects the most recent change.
No timeframes are contractual unless they're written into your specific contract. The columns are good-faith categories: "In progress" means we're actively building it now; "Coming next" means it has scope, owner, and target window for this calendar year.
It happens. If a feature in "Exploring" never makes it to "Coming next," we will say so on this page rather than letting it sit there forever. We'd rather move something to "Not building" than pretend.
Every quarter we tally feature requests across our customer base and prioritise the highest-volume / highest-revenue-impact item for the next cycle. Customers who request the chosen feature pay nothing extra for it.
Yes — most "In progress" features have a beta cohort. Tell us at signing if you want in. Beta access is free; the only ask is a 30-minute feedback call when you've used it for two weeks.
We will quote it as a custom build with a delivery commitment. If it ends up benefiting other customers, we credit a portion of the build cost back to your renewal.

Have a feature that has to ship before you sign?

Most "In progress" items have a beta cohort. Most "Coming next" items can be moved up the queue when a customer asks at signing. Bring it up on your demo call — we'll be straight with you about what's possible.