Feature log & updates

What we've shipped, improved, and fixed — newest first. We add to this log with every release.

June 24, 2026

Privacy-first naming for the encryption tiers

The two highest encryption tiers are now called Vault and Vault for Education — named for what they do (keypair-sealed encryption for your most sensitive data) rather than for any regulatory program.
Nothing about the protection changed: same per-submission public-key encryption sealed to each authorized viewer, same reviewer access by key re-wrapping (never password sharing), same price.
Collecting protected health information (PHI) still requires our Business Associate Agreement (BAA); collecting student education records still requires our Data Privacy Agreement (DPA) — accept either from Account → Security.

June 21, 2026

Version 1.0 — paid plans and a launch offer

EzFormBuilder is out of beta. This is version 1.0 — the core platform (forms, pages, documents and e-signature, the encryption tiers, teams, and the developer API) is stable and ready for everyday use.
Paid plans are now available — Base, Plus, and Pro, plus Vault encryption tiers (and a school edition) for your most sensitive data — billed monthly or annually. À-la-carte packs let you add extra signing, form capacity, archiving, or team seats without changing plans. Need something larger? Contact sales for a custom plan.
Launch offer: new customers get 50% off their first two months — use code WELCOME50 at checkout. Regular price after.
Try before you buy: start an optional 7-day trial of a paid plan’s features, no card required (one per account).
Billing made clearer: your account page now shows any active discount alongside the regular price, you can enter a promo or access code right on the billing page, and checkout returns you to a simple confirmation.
Gentler free-plan limits: if an account goes over the free limits, your content stays visible and is simply paused until you upgrade — nothing is deleted, and upgrading restores everything instantly.

June 21, 2026

More protection for your account

Added defense against clickjacking: your account, sign-in, billing, and admin pages can no longer be embedded inside another website. Public forms and pages stay embeddable, so anything you intentionally share keeps working.
Continued security hardening across sign-in and billing from ongoing security review.

June 16, 2026

Cleaner records for multi-part fields

Answers from Name, Address, Person, Table, and Price fields now appear as clean, labeled text everywhere they’re shown — the downloaded submission PDF (your legal record), the submissions table, and CSV / Excel exports. The information was always captured in full; this corrects how a few of these multi-part fields were displayed.

June 14, 2026

Developer API, bulk sending, conditional signing, and signer verification

Developer platform: a public REST API and outbound webhooks let you create and manage forms, documents, and signing envelopes programmatically, and get notified of events like new submissions and completed envelopes. Create and manage keys under Account → API keys; see the Developers page for the full reference.
Bulk sending: send a document or form to many recipients in one action, with delivery tracked per recipient.
Conditional signing fields: fields and signatures can now appear based on earlier answers, so a signing document adapts to each signer.
Signer verification: optionally require a signer to enter an access code before they can open and sign a document — added assurance for sensitive envelopes.
Continued security and reliability hardening across billing, e-signature, encryption, the new API, and access controls, from several rounds of security review.

June 12, 2026

Security hardening, encryption self-test, and signing reliability

New admin Encryption & Compliance self-test (Admin → Encryption): one button verifies, on demand, that encryption round-trips and rejects every tampered/wrong-key case, that the audit logs cannot be altered or deleted, and that stored regulated data holds only ciphertext. Run it anytime — it writes nothing.
Signers can now recover an expired signing request: an owner’s “Remind” re-opens a request whose link lapsed (fresh link, new window) instead of dead-ending — so a multi-step signing order can no longer get permanently stuck.
Signed-copy delivery: every signer is emailed a link to view or download their completed document (with the certificate of completion) for 7 days; owners can re-send a fresh link anytime with “Resend signed copy.”
Broad reliability & security hardening across billing, e-signature, encryption, and access controls — including stronger protection against duplicate/double-charged actions, spreadsheet-export safety, and consistent enforcement of team and regulated-data permissions.

June 11, 2026

E-signature legality & evidence

New Certificate of Completion: download a per-envelope PDF summarizing the signing evidence — signer consent and completion timestamps, the document’s SHA-256 fingerprint, and envelope status.
Signing now records an explicit, timestamped consent to transact electronically on every signature (the consent statement itself was already recorded verbatim).
New e-signature legality page mapping each ESIGN/UETA element to the DocuBuilder feature that produces its evidence, with honest notes on excluded documents and eIDAS.

June 11, 2026

Vault for Education tier

Vault for Education tier for student records, requiring a DPA before student data may be collected, mirroring the Vault tier: per-submission encryption sealed to each authorized viewer, reviewer access grants, a dedicated audit log, and signing support.
This tier requires a Data Privacy Agreement (DPA) on file — accept it from Account → Security once an admin enables the tier.
Available as a dedicated plan or à-la-carte packs (access unlock + form packs), priced at parity with the Vault tier.

June 11, 2026

Session control, product explainers, and a refreshed front door

New session timeout controls: sessions now sign out automatically after 15 minutes of inactivity by default. Admins manage the site-wide default, and every user can pick their own (5–25 minutes, or never) from Account → Security.
New admin Modules panel: platform admins can switch entire modules (Forms, Pages, Menus, Sheets, DocuBuilder) on or off site-wide.
New explainer pages for FormBuilder, DocuBuilder, and Encryption — including what the encryption tiers mean and which agreements (BAA / DPA) regulated data requires.
The home, sign-in, sign-up, and password-reset pages were restyled to match the rest of the site.
The footer now shows Log out when you are signed in (it previously always showed Sign in), and signed-in visitors to the sign-in page go straight to their dashboard.
Fixed: logging out now fully clears the session cookie in all browsers.
New About page and this updates log.

June 10, 2026

Security hardening round

A site-wide security review hardened access controls across document signing, file uploads, team invitations, and admin tooling.
Document signing links can no longer be used twice, and completed envelopes can no longer be voided or re-sent.
Signup now has stronger rate limiting, and several internal endpoints return cleaner not-found responses.
Stricter cookie policy (SameSite=Strict) for sessions, and team spreadsheets correctly follow team ownership.
Fixed: the notifications inbox can now scroll when the list grows long.

June 7–8, 2026

Encryption tiers

Vault-tier encryption suite: per-account keypairs, encrypted submissions readable only by authorized key-holders, and reviewer access grants without password sharing.
Vault for Education groundwork: Data Privacy Agreement acceptance flow mirroring the BAA flow.
Encryption audit log viewable from the dashboard.
Export permissions now follow your plan entitlements consistently across CSV and bulk PDF.

June 5–6, 2026

Teams, two-factor, and sharing

Team workspaces: shared items, sealed (encrypted) team content, member roles, and team lifecycle management.
Two-factor authentication (TOTP) with backup codes; platform admins are required to enroll.
Form sharing between accounts, with clean permission boundaries.

May 29 – June 1, 2026

Notifications, presence, and richer forms

In-app notification center with team presence indicators and follow requests.
Media display fields, menu list editor, and file uploads on public forms (with strict file-type validation).
Dashboard auto-save improvements.

May 25–27, 2026

Signatures and multilingual forms

Signature fields with required/optional slots, email-link signing, and document version integrity checks.
Multilingual forms: per-field translations, automatic translation assistance, and a respondent language picker.
Admin user management console.

Questions about a change? Reach us at support@ezformbuilder.com.