Updated 25 October 2026 Product update
- Added: API administrators can create named integration keys, assign only the required read and write permissions, review active or revoked credentials, and revoke a key together with every access token issued from it.
- Changed: API authentication now exchanges a key for a 30-minute token and checks each task against fine-grained permissions for general data, personal information, costings, identity documents, booking notes, attendance, shifts, hours, units, client finance, directory updates, events, and non-working days.
- Added: API integrations can retrieve paginated event summaries and full event data by date or person, find an exact event by reference or HireTrack ID, and read booking notes, vehicles, accommodation, staff shifts, attendance, and recorded hours.
- Added: API integrations can retrieve separate paginated shift-unit, lieu, and event people-cost records. The older combined unit and complete event-cost requests remain available but are marked as deprecated in favour of the bounded replacements.
- Added: API write permissions now support creating and updating clients, contacts, and venues; creating events and shifts; updating events or individual event days; and creating, updating, or deleting non-working days.
- Added: The API can create a confirmed meeting with its location and scheduled team-member or freelancer attendees, automatically include the booker, reject invalid dates, spaces, or attendees, and roll back the meeting if any part cannot be saved.
- Changed: API list requests now have consistent pagination, range and result-size limits, while request throttling protects each company and integration key and returns a retry interval when a limit is reached. Version 1.1 documentation and an importable Postman collection are available from API Key Management.
- Added: The TimeCard app now supports visitor pre-registration windows, custom visitor questions, site directions and parking information, email and SMS delivery tracking, confirmation, and Google or Apple wallet pass activity.
- Added: TimeCard app support now includes new emergency roll-call sessions and safety marks, device-assigned training videos, browser push-notification registrations, device modes and branding, and company or device-specific settings.
- Changed: Team members and freelancers can use six-digit personal or temporary TimeCard app PINs, with expiry support for temporary PINs and separate permissions for the new TimeCard app administration areas.
- Fixed: TimeCard exports now decide whether a row is export-approved from the shift approval itself; approving only its clock record changes the clock-status label without incorrectly releasing the shift for export.
- Changed: TimeCard exports use the person's saved report-timing preference when present and apply a consistent default otherwise. Sterling exports retain their clock-only default for people without an overtime group.
- Changed: TimeCard managers now see only their assigned people in the export screen, matching the management scope used elsewhere in TimeCard.
- Fixed: Google and Microsoft sign-in now verifies the returned token and identity directly with the provider before matching an active TeamTrack account. Invalid, expired, tampered, unverified, or mismatched identities are rejected with a safe retry message.
- Changed: TeamTrack Files now builds and displays folder trees at any depth, preserves the configured order, and keeps orphaned or circularly linked folders visible at the root instead of losing them from the browser.
- Fixed: Moving a TeamTrack Files item now reports a failed move instead of changing the screen optimistically. Recursive folder deletion skips items already removed through a selected parent and continues when a stored file is already missing, so the rest of the tree can still be cleared.
- Fixed: Xero purchase-order references now decode stored event names and remove ampersands alongside other unsupported punctuation, preventing encoded or invalid characters from being sent in references generated from event names.
