What we've shipped

Production-ready Standard tier — docs, status, trust, bulk import

Six quick-start guides, a public /status page, a consolidated /trust page for InfoSec teams, and bulk CSV user import on /finance/users. Setup checklist on /home gets per-step deep links.

• /docs — six 2-5 minute quick-start guides
• /status — live operational status with subsystem health
• /trust — single URL for procurement / InfoSec teams
• /finance/users — bulk-import CSV button next to Export
• /home — per-step deep links + welcome banner for fresh tenants

Wave 5 commercialisation stack

Self-serve infrastructure for $3/user/month (or $2.50 annual). Onboarding wizard, Stripe Checkout + Customer Portal + 14-day refund + auto-upgrade enforcement. ROI calculator and competitor comparison page now live.

• /pricing — three tiers, schema.org markup for SERP price chips
• /signup → /onboarding/{workspace,seats,checkout,success} — 3-step wizard
• /settings/billing — Customer Portal entry, seat utilisation, invoices
• /roi-calculator — public ROI tool, lead-capture
• /compare — GreyScape vs Vendr / Spendesk / Cledara / Microsoft Agent 365
• Admin-issued refunds at /system/refunds with hard tenant suspension

PostgreSQL row-level security

Defence-in-depth tenant isolation at the database layer. Policies installed on every tenant-scoped table; gradual rollout via /api/admin/rls toggle.

• 21 RLS policies installed (dormant until per-table enable)
• withTenantTransaction() + withSystemTransaction() helpers in lib/tenancy
• Per-table enable/disable via SETUP_TOKEN-gated endpoint

Mobile portal completion

Every authenticated page renders cleanly at 375px. Sidebar shell flex-direction fix, 14 data tables wrapped in horizontal-scroll containers, dashboard subscriptions grid collapses to 1 column on mobile.

Chrome Web Store live

Shadow-AI detection browser extension shipped to the Chrome Web Store with stable extension ID for MDM rollout. Permanent ID: ocebekopgknkpjbkalbcljjldfggoioi.

Enterprise scale + CSV exports

CSV exports on Subscriptions, Approvals, Shadow AI, Members, Dashboard, Browser-ext intakes, and Receipts intakes. Audit-log filters by actor / action / date range. Hierarchical Budgets at four scopes.

• CSV export from every list view
• Audit-log filters
• Hierarchical budgets — org / team / project / user
• StatusPill component with hover tooltips across the app

Intake-to-findings parity

Every intake source now has a matching findings page so you can pivot from 'configure' to 'see what landed' in one click.

• /shadow-ai/browser-extension — browser-extension findings
• /shadow-ai/email-receipts — receipt-derived findings
• /shadow-ai/csv-detections — CSV-upload findings