Changelog
We move fast. Here’s a timeline of the latest updates, features, and security improvements.
Landing Page Expansion & UI Refinement
New Landing Pages: Launched high-intent pages for 'Sign Contract' and 'Electronic Signature' to target specific user needs.
Visual Polish: Complete redesign of the global footer (`LandingFooter`) for a cleaner, professional multi-column layout.
Universal Components: Standardized `TrustBadge` and `PricingSection` across all marketing pages for design consistency.
Content Optimization: Improved messaging clarity around 'Free Usage' limits and 'Personal Signing' use cases.
Production Payments & Bot Enhancements
Payments Live: Full support for Stripe Live Mode payments with secure, auto-healing subscription handling.
Bot Preview Engine: Fixed document preview generation in Telegram by integrating cloud storage access.
Bot Reliability: Refactored Telegram bot core to fully support stateless cloud architectures (S3/Supabase).
Infrastructure: Improved production redirection logic for seamless checkout experiences.
Privacy & Compliance Updates
GDPR & ePrivacy Compliance: Implemented a comprehensive Cookie Consent Bar with 'Accept/Decline' logic.
Privacy Policy: Added a dedicated Privacy Policy page (/privacy) detailing data collection and user rights.
Premium UI: Designed the consent experience to be unobtrusive and visually consistent with the application's premium aesthetic (floating, blurred backdrop).
State Management: Cookie preferences are now persisted locally to ensure a seamless returning user experience.
Telegram Integration & UI Unification
Revamped Landing Page: Simplified copy to focus on user benefits ('Smart Name Detection'), added transparent pricing, and removed technical jargon.
Released full Telegram Bot integration (@signpdf_bot) for mobile-first signing workflows.
Implemented 'One-Click Link' to connect Telegram accounts via secure tokens.
Added real-time bi-directional sync: Unlinking on the web immediately updates the bot.
Unified public design system: Landing, Verify, and Auth pages now share a consistent 'Warm White' premium aesthetic.
Standardized header and footer components across the entire public application.
Production Security & Infrastructure
Implemented persistent signing identities: Cryptographic keys now persist across deployments using environment variables.
Transitioned to S3-compatible file handling for stateless cloud architecture.
Enhanced Audit Logging: Now captures real user IP addresses (X-Forwarded-For) instead of load balancer IPs.
Database Integrity: Added strict foreign key constraints and cascading deletes for cleaner data management.
Infrastructure: Optimized for zero-cold-start deployment on Render.
SES Compliance & Verification Portal
Launched Public Verification Portal (/verify): Anyone can now validate the authenticity of signed documents without logging in.
Simple Electronic Signature (SES) Compliance: Added 'Intent to Sign' workflows and legal disclaimers.
Design System v1.0: Rolled out the official Design System with typography, spacing, and color tokens.
Enhanced PDF Engine: Improved placement accuracy for complex multi-party contracts.
Audit Trails & Privacy
Full-stack Audit Trail: Logs every Upload, View, Sign, and Download action.
CSV Export: Users can now download secure, cryptographic audit logs for compliance.
Telegram Privacy Control: Added settings to opt-out of document forwarding.
Auto-Cleanup: Telegram bot now automatically removes sensitive intermediate files after processing.
Encryption & Core Security
AES-128 Encryption: All documents and signatures are now encrypted at rest using Fernet.
In-Memory Processing: Decryption happens only in RAM; unencrypted data never touches the disk.
Dynamic Favicons: Added SEO-optimized dynamic icon generation for all devices.
Rebranding: Updated project identity to 'SignPDF.org' with Cal Sans typography.