What's new.

The Tally file now carries approved vendor bills as purchases with their GST on a ledger per category and rate, so GSTR-3B in Tally counts the input tax; purchase returns against their bill; payments to vendors against the bill they settle; office and site expenses; GST payments; and transfers between your accounts. Each bank and cash ledger in Tally then moves as the account does in Rebaar. Bills that are draft, waiting for approval or disputed stay out and are counted in the dialog, and a vendor with a client's name gets its own ledger. The vendor side is in the file only for people whose role shows what the company owes vendors. Journal entries are not in it.

The Tally export is on the Growth and Scale plans.

When you have saved your Tally company name, the download dialog asks you to tick that TallyPrime shows that company as open before Download, because the file goes into whichever company is open.

In the new tax regime, the suggested monthly TDS on the employee form now applies the marginal relief of the Income-tax Act, 2025: on a taxable income a little above ₹12 lakh, the tax is never more than the income above ₹12 lakh. Before, someone at ₹12,10,000 was suggested ₹61,500 of tax a year (before the 4 % cess) instead of ₹10,000. It is still a suggestion — check it before you use it.

The Tally file now carries GST line by line, on a sales ledger per rate, for every invoice saved that way, your credit and debit notes on their own date against their invoice, and each payment into the bank or cash ledger it came into. Settings → Integrations → Tally names lets you use the ledger and voucher type names your company already has in Tally. Before the download, a dialog shows what the file holds and which company to open. Importing the same period again updates the vouchers already in Tally instead of adding them twice. Vendor bills and expenses are not in the file yet.

The Tally export is on the Growth and Scale plans.

Each line of a supplier bill now takes its HSN / SAC code and GST rate, and Rebaar works out CGST + SGST or IGST the way the supplier’s invoice shows it. Accounting → GST returns uses that split instead of guessing it from the vendor’s state, and leaves out GST charged for another state, which the GST portal marks as not available. Purchase-return notes take off each line’s own GST. Bills recorded before today keep their single GST figure.

Vendor bills are on the Growth and Scale plans.

rebaar.in/docs/api now has one page per endpoint: every field with its type and whether it is required, an example reply for each outcome, and curl, Node.js and Python samples that rebuild as you type values. Each page has a Markdown copy at the same address with .md on the end.

Settings → API keys can now create a sandbox key (ck_test_). It works on a separate practice company with sample clients, projects, invoices and vendors — never on your real data — and the practice company sends no email, WhatsApp or webhooks. Reset puts the sample data back. Live and sandbox keys are listed in two groups.

The API is on the Scale plan.

Every endpoint page has a Send button that runs the call against your sandbox with a sandbox key and shows the real reply. It never sends a live key.

rebaar.in/security lists each protection, the standard it follows and its status today — including what is not done yet, such as an independent penetration test.

On the web sign-in, the password is checked only after the human check on the email step has passed.

Creating an API key, changing single sign-on or deleting an account asks you to prove it is you. If you have no authenticator app or passkey, we email you a 6-digit code instead.

Each activity-log entry now shows the device and network address it came from, and the activity-log export carries both.

The activity log is kept forever unless the Owner chooses a period, and never for less than 8 years — as long as the invoices it explains.

A new API key stops working after one year unless you pick another date, up to two years. Existing keys keep working; Settings marks the ones with no end date so you can rotate them.

API keys are on the Scale plan.

On a Draft payroll run, someone who runs payroll can add an Incentive to a person’s slip. The run shows the bonus due from Reports → Clients by person for that month, and an adjustment when an earlier month’s bonus came down. Nothing is added on its own. The incentive is not cut for unpaid days, counts for Professional Tax, and is kept out of PF and ESI wages as commission. This follows the published reading of the Code on Social Security; have your CA confirm it. Re-check the month’s TDS after adding one. Nobody can add an incentive to their own slip unless they are the Owner, and the person who adds one cannot finalise that run.

Growth and Scale plans.

You can open, approve, issue or cancel an indent only on a project you are on. Only the person who raised an indent, or an approver on that project, can cancel it, and a rejected indent stays rejected with its reason. "Today" lists only indents from your projects.

The person who raised an indent cannot approve or issue it — someone else does, unless they are the Owner. Store Managers can now raise indents.

Approvers on the project are told when an indent is raised, on the web and on their phone; the person who raised it is told when it is approved, rejected, issued or cancelled; the store hears when one is ready to issue.

The indent list shows what was asked for, for example "Cement 200.00 Bags + 2 more".

New indents are numbered by the Indian financial year, for example IND-2026-27-0001, starting again each April, and a number is never used twice. Existing numbers stay as they are.

Pick whether your machine writes the day or the month first (day first by default). Every row shows the date it will be saved as, and a file with a time we cannot read is refused with the row number — nothing is guessed any more.

A time you type is the time in India, whatever the browser or server clock says, and it shows back exactly as you typed it.

Marking a gang twice for the same site and day updates the first entry instead of adding a second one, so the man-days are counted once.

The labour list on the phone can be asked for one site, and a gang marked on a site it is not on is noted in the activity log.

An indent shows the store’s stock in the unit of the indent line, using your saved conversions; materials on order count through the same conversions; and the materials list shows what left the store in the last 30 days.

If the phone resends a receipt after a dropped connection, the second copy is recognised and not stored again.

The person who records a payment, a client advance, a vendor bill or a change order can no longer also confirm, approve or pay it — someone else does, and the screen says "Someone else must confirm this". The Owner can still do both. A payment typed in by hand waits for confirmation in every mode, card and Razorpay included.

Set a limit in Settings → Company. An order above it is sent for approval and placed only after someone who approves bills — not the person who raised it — approves it. With no limit set, every order is approved first.

Above ₹10 lakh (or the limit you set in Settings → Company), the person who prepared a quotation cannot also record that the client accepted it.

A payroll person’s change to their own pay waits for another payroll person to confirm it. The person who started a payroll run — or refreshed it, or changed someone’s unpaid days — does not finalise it, and the person who finalised it does not mark it paid.

Someone who changes the amount or days on a change order, or the lines of a credit or debit note, cannot then approve or issue it — someone else does.

A discount on a project’s BOQ quote above 20 % (or the limit you set in Settings → Company) waits until someone else who approves quotations confirms it; until then the quote keeps its discount. The Owner can set it straight away.

Someone who receives stock but does not manage the company’s stock rules can now enter opening stock; it goes on the site once another person who receives stock confirms it.

Cancelling a sent invoice needs the credit-note right and tells the Owner. Releasing retention needs the payment-verify right. A site expense is voided with a reason instead of deleted. A stock count cannot be undone by reversing it, and a receipt with a bill on it cannot be reversed. Leave goes to the person’s manager or HR. Only someone who may update a project shares its photos with the client. When the system says no, the reason now appears next to the button you pressed.

A quotation with BOQ lines takes its subtotal, GST and total from those lines every time a line is added, changed or removed, so the accepted figure — and the project’s contract value — always matches them. A quotation saved earlier whose total does not match its lines asks you to save it again before it can be accepted, by you or by the client in the portal.

A recurring invoice is now made like one from the invoice screen: with its line, the CGST + SGST or IGST split and the rounding to the rupee, numbered in your company’s normal invoice series and dated the day it is made. Invoices created through the API are stored with their lines too.

Quantity × rate is worked out in whole paise and a half paisa always rounds up, on invoices, notes, vendor bills and BOQ lines — the form shows the same figure that is saved. Invoice quantities take up to three decimals.

Someone who joins or leaves during the month gets a slip for the days they were employed — a person who left on the 20th still gets the final slip, and a joiner on the 25th is not paid the whole month.

When deductions are more than the month’s pay, they are reduced — other deductions first, then TDS, then professional tax — and the slip says how much could not be taken this month.

Maharashtra professional tax follows the schedule by date: the slab edges at ₹7,501 and ₹10,001, the February ₹300 only on the top slab, and nothing for women earning up to ₹25,000 a month.

Retention can be held only on an invoice that was sent, not on a Draft or a cancelled one, and a released amount needs its release date. A vendor payment sent twice by a slow connection is recorded once.

The dashboard’s "Collected" is now the payments you received in the month, by the date each one arrived — a part-payment counts the day it lands, not when the last rupee comes in. A new "Billed" tile shows what you invoiced in the month.

An invoice is overdue from the day after its due date while anything is still owed, net of credit and debit notes — on the dashboard, the invoice list, the client portal, the printed invoice and the aging report. It no longer depends on someone changing the status by hand.

Cash runway is your cash today divided by the average you spent more than you received over the last three full months. It says so when there is not yet three months of history, or when you take in more than you spend.

On a project’s Budget tab, committed is what is on purchase orders and not yet billed, and vendor bills now count in what the project has spent — so the total no longer drops when goods arrive and the bill is booked.

An accepted quotation reads "Contract value ₹…" instead of "+ ₹…", and is not added to the approved changes. The contract tile is hidden when the project has no contract value. An invoice that two stages bill together is listed once. The decision email says the same.

The printed invoice and the PDF show credit and debit notes as their own lines, then the amount paid and the amount still due. The amount in words is the amount due.

Cash flow counts client advances, and keeps each month of each year apart. The P&L shows the current financial year and does not count a credit note issued after payment as revenue. On the balance sheet, retention held back by clients is shown inside receivables instead of being added a second time, and a partly released retention stays held for the rest.

GST payments clear the return period they were paid for, not the month they were paid in. The year-to-date output GST uses the same rule as the month. B2B and B2C follow the customer GSTIN printed on the invoice when it was issued. Without vendor bills, the input GST estimate is the 18% GST inside what you paid (18/118 of it), not 18% on top.

The Tally export makes one receipt voucher for each payment received, on the day it arrived, instead of one per invoice on the day it was fully paid.

For developers: invoices in the public API now also return balanceDuePaise and isOverdue, worked out the same way as the screens. No field was renamed or removed.

The phone asks for the site’s progress so far — "45 %" on a site at 40 %. That is now stored as +5 % for the day, so the project’s progress reads 45 %, not 85 %. Two people sending at the same moment no longer count the same work twice.

Each person files one log for a site and a day. Opening the form again on the web opens the log you already filed, to change it.

You can change your own log until midnight that day. After that, or after someone else’s log, a Project Manager or the Owner corrects it and must give the reason.

History on each log shows every version — who changed it, when, what changed and why. A log is never deleted: a wrong one is withdrawn with a reason, stays visible struck through and stops counting toward progress.

A Project Manager can mark a site’s day complete once everyone has filed, which closes it to new logs and edits, and reopen it the same day with a reason. Site day shows every log of a date, and who completed it.

Workers left empty now read "not counted" and are left out of the average crew, instead of pulling it down as 0.

The web framework, the error reporting and the server runtime were updated for security fixes published this week. Nothing changes in how you use Rebaar.

From a project’s Materials tab, send site stock back to the store, or back to the supplier against the delivery it came on — with a reason, your challan number and a photo. The site’s stock goes down at once.

Scale plan.

A return to the supplier prepares a purchase-return note on the vendor bill. When your accountant issues it, the amount due on the bill goes down by the note; if the bill was already paid, the vendors list shows what the supplier now owes you. The note is your record of the return, not a GST credit note — the supplier’s credit note decides GST, and you can note its number on the return note.

Scale plan.

Count what is really on a site. Rebaar works out the difference from the stock on record for the count date; it changes the stock only when someone other than the person who counted approves it.

Scale plan.

Each site’s materials show how many days the stock will last at the current rate of use, what is already on the way, and which ones run out before a new order could arrive.

Scale plan.

Tag a daily log’s material to a BOQ line, note the work done, and set how much of each material one unit of work takes (Settings → Material norms). The Materials tab then shows, for every BOQ line, what was planned, what the work done should have used and what was used — in red where the site used more.

Scale plan.

Print a stock statement for any period — opening, received, used, wasted, returned and closing for each material. Download each site’s stock, or every movement for a period, as Excel. Values show only to people who can see vendor amounts.

The stock statement is on the Scale plan; the Excel downloads on Growth and Scale.

Marking a project Completed while material is still on site lists what is left and asks before closing.

Growth and Scale plans.

For developers: two new webhook events, when stock moves on a site and when a movement is reversed — quantities only, no amounts or names.

Scale plan.

Inventory → Site stock: one page for every site’s stock, its value and the materials used most (by value, or by bags / brass / MT), each project’s use, a 13-week trend and one list of what needs action — running low, finished with nothing on order, below zero, untouched for 45 days. Raise indent fills in the site, material and a suggested quantity.

Growth and Scale plans.

When a material on a site drops to its reorder level or runs out, the site’s project manager and store manager get a notification in Rebaar and on their phone — once, not for every daily log. Each morning one email lists what ran out with nothing on order, what is below zero and what has not moved in 45 days.

Set a default reorder level and a lead time on each material (Inventory → Materials → Edit), the depot’s own level there too, and a site’s own level on the project’s Materials tab — a big site can reorder at 100 bags and a small one at 10. The Materials page now shows where each material is: "Depot 40 · Casa Verde 70".

Settings → Security now lists the phones signed in to your account. Sign out any one of them from the web: it stops working at its next request and gets no more notifications from Rebaar.

Sign out of every other device, "This wasn't me" and changing or resetting your password now stop your phones at their next request, instead of up to 15 minutes later.

If the phone loses signal just as it sends a check-in, safety incident, toolbox talk or inspection, and sends it again later, it is now recorded once — one attendance entry, one alert to the team.

Every delivery adds to the site, every daily log takes from it. The daily-log picker shows only what is on site and how much is left; a material used up reads Finished ✓ and comes back with the next delivery.

Growth and Scale plans.

Log a delivery that came with no PO — material, quantity, challan number and a photo of the challan — from the project’s Materials tab, Goods receipts or the daily log. The same challan entered twice asks first. Set the opening stock a site already holds once per material.

A daily log’s material line is Used or Wasted (with a reason). More than the site holds is refused with what is left. The Owner can let a site go below zero, which flags the material to reconcile, and can close stock up to a date (Settings → Company → Site stock). A wrong entry is reversed with a reason, never edited.

Every client shows "Brought in by" — a person in your company — with its Source and, when an outsider sent them, who referred them. A client made from a lead takes the lead’s owner and source. Whoever adds a client is put down unless they pick a colleague. Changing it later is for the Owner (or a role the Owner allows), needs a reason and is kept in the activity log.

Settings → Company → "Split client credit". When it is on, a client can be shared, e.g. 60 % / 40 %, or split equally. Turning it off keeps the shares and counts each client 100 % to one person.

For any period: each person’s new clients, the value of their projects, the money collected from their clients and, if you set one, the bonus due — a % of collected or a ₹ amount per new paying client. Download as Excel. The bonus is a figure on the report; it is not added to salary slips.

If you pay an architect or broker for sending a client, note it on the client (paid to, amount, date). It is a note only — it is not added to your accounts, so record it as an expense too.

With your GSTIN in Settings → Company, bills charge GST and the e-Invoice, e-Way Bill, credit / debit note and GST returns screens appear. Without it, bills are plain invoices with no GST and those screens are hidden, so nothing suggests GST you cannot charge.

e-Invoice and e-Way Bill need your own account connected and tested for your GSTIN. Until then the buttons stay hidden and the invoice says what is missing — Rebaar never shows a number the government has no record of.

Changing your GSTIN, or a client's, no longer changes a bill already issued. A bill is titled Tax Invoice, Bill of Supply or Invoice by what it really is.

A GSTIN is checked offline when you save it, including its last (check) character. With your e-Way Bill account connected, Verify GSTIN checks a client's or vendor's GSTIN with GST and shows the answer next to it.

EPF uses the ₹25,000 wage ceiling from 17 Sept 2026 (September 2026 is split by days, as the EPFO asks). ESI and EPF use the Code on Social Security's definition of wages from 21 Nov 2025: allowances above half the pay now count. Karnataka Professional Tax starts at ₹25,000, with ₹300 in February. Each run uses the law of its own month.

A TDS or other deduction typed for one month's run is kept when you edit unpaid days or refresh the run.

Payroll shows finalised months the new law would have computed differently, and anyone marked "no EPF" who must now be enrolled. Nothing past is changed — decide any correction with your CA. Download it as CSV.

A company that never chose a plan is no longer closed a fixed time after its trial ends. It is closed only after 120 days in which nobody from the company signed in. We email the Owner at least 30 days before, and again 7 days and 2 days before. Signing in stops it — the company then stays read-only until a plan is chosen.

On the GST screen, pick a month or a quarter and download the GSTR-1 CSV files — B2B, B2C large, B2C small, credit and debit notes, the HSN summary (split B2B / B2C) and the documents table — in the format of the government tool’s own sample files. Import them into the Returns Offline Tool, which makes the file you upload on gst.gov.in. Rebaar does not file the return.

A wrong or missing HSN code on a B2B line, a bad customer GSTIN, a missing place of supply or a tax type that does not match the place of supply is listed and stops the download until fixed. HSN codes are checked against the official HSN / SAC master. e-Invoices with an IRN are left out of the B2B file because the portal fills them in from the e-invoice.

A second download lists every invoice and note by GST rate, what to check, and the GSTR-3B figures to type into the portal. It is not a file the portal accepts. Exports, advances, nil-rated supplies and amendments are not in the files yet.

Lower what a client owes on an issued invoice with a credit note (rate too high, goods returned, an agreed discount), or raise it with a debit note — without cancelling the invoice. Each note has its own number, prints with the original invoice’s number and date, and can be registered for an e-Invoice IRN. Open an invoice → Credit & debit notes.

An invoice with notes shows Credited, Debited and Net payable, and turns Paid once the payments cover the net. Reminders, the client portal, the dashboard and the reports use the net. A credit on an invoice already paid shows a Refund due.

GST returns count each note in the month of its own date. Credit notes to GST-registered clients are listed with a reminder that they lower your GST only after the client reverses the credit in IMS.

When someone else issues a credit note, the Owner gets an email with the amount, the invoice and who issued it.

If your company uses vendor bills, the GST screen now adds up the GST on your paid vendor bills from GST-registered suppliers, instead of estimating 18% of your spending. It lists the bills it left out and why. Always check the figure against GSTR-2B on the GST portal before you file.

Recording a delivery now has three boxes: Received, Rejected at the gate (with a reason, and a photo if you have one) and Not arrived. The purchase order list in the form shows only what is still to come.

A delivery can go past the order by up to 5 %, with a reason. Change the limit (0–25 %) in Settings → Company → "Extra goods allowed on a purchase order". Anything beyond it is refused, with the message under Received.

A bill line can charge only for what was accepted on site and not already billed on another live bill. Billing an order in parts is normal and reads as a match. While a bill is on an order, its delivery quantities are locked.

Entering a bill number this vendor already used is refused (a cancelled bill frees its number), and a number that looks like an earlier one asks you to confirm. A cancelled purchase order cannot be billed until it is reopened.

Adding or editing a vendor with a GSTIN that another vendor in your company already has is refused, with the message under GSTIN.

Projects → Ledger → Record cash move keeps each person's cash given, spent and returned. If someone spends more than they were given, the card shows "Company owes <name>"; a return can never be more than they hold.

Each coupon can be used once by a company. If a purchase is never paid, the coupon is given back when that purchase is dropped (at once if checkout fails or you start again, otherwise after 48 hours) and can be used again.

The link in a sign-in alert now works one time only, and the link to set a new password is sent by email instead of opening straight away.

Generating an e-Way Bill for a purchase order or from an invoice's IRN twice at the same moment now registers one bill with NIC; the second click is asked to wait. Cancelling from an invoice works only for the bill Rebaar generated for that invoice.

Deleting a client is refused while anything is recorded against them (invoices, quotes, projects, recurring invoices, advances, tasks, messages, documents, meetings, sign-offs or issues they raised), and the message counts what is there.

Progress posted through a subcontractor's portal link is kept and shown as "reported by subcontractor", but the project's % complete adds up only your own team's daily logs.

Approving and cancelling an indent at the same moment now leaves one result, and an approval cannot be more than was requested. A payroll run's salary entry cannot be deleted from Office expenses. CSV import refuses a negative or malformed rate, stock or lead time on that row. The retentions on one invoice can never add up to more than the invoice.

POST /api/v1/invoices/create now refuses a total that is not subtotal + taxAmount (rounding to the rupee, up to 50 paise, is allowed and kept as the round-off) with 400 totals_mismatch. DELETE /api/v1/clients/{id} refuses for the same records as the app and counts each kind in held.

A payroll run now fills in each person's unpaid days from approved unpaid leave and from days marked Absent (a Half day counts as half), and takes them off that month's pay. A day covered by approved leave is never counted twice, and a day nobody marked is never counted.

Settings → Payroll rates asks how one day's pay is worked out: the days in that month, or a fixed number from 20 to 31. Rebaar does not choose for you; until you do, runs show the unpaid days but take nothing off, and a run with unpaid days cannot be finalised.

On a Draft run, HR can change anyone's unpaid days in whole or half days. The slip and the run totals update together, the change survives "Refresh from leave", and the activity log shows the old and new figures next to what leave and attendance said.

The payslip, the payslip email and the employee's own payslip view now show the unpaid days and how much less than the full month they made the pay.

The leave form now says how many days you have left and how many will be extra, and asks for a reason when a request goes over. Leave approvals show the balance left and a red "days over" badge.

When approving a request that goes over the balance, the approver chooses Unpaid leave for the extra days, or (Owner or HR Manager only) paid Special leave. My leave shows two new boxes, Special leave and Unpaid leave, and a normal balance never goes below zero.

Approving twice, or two people approving or cancelling the same request at once, now counts the leave exactly once.

Settings → Leave policy has a tick box for each leave type. An unticked type cannot be requested any more; past leave, balances and pending requests stay.

Signup, Team → Add, accepting an invite and the Personal tab now ask for gender. Maternity leave is offered to women and paternity leave to men; the Team page lists anyone whose gender is not filled in yet.

Signup, team invites, adding a team member and a client's portal email now check two maintained lists of temporary email services. Security-testing and privacy-forwarding addresses (such as Burp Collaborator, DuckDuckGo and Firefox Relay) stay allowed.

Subcontractor portal links and the signing secrets of your outgoing webhooks are now stored encrypted. Copy link on the Subcontractor portal page works as before, and your webhook receivers need no change.

The unsubscribe link in our newsletter now opens a page with one button to confirm, so a mail scanner opening the link no longer unsubscribes you. Mail apps that show their own Unsubscribe button can use it too.

When an Owner makes two-factor sign-in required, people who have not set it up get one email explaining why — at most once a week each — and the Owner sees how many were emailed.

If you hold more than one role, an approval waiting for any of your roles can now be approved by you, and the "someone else must approve" rule checks all of them.

The personal data export now lists your passkeys (device name and dates, never the key) and your sign-in sessions.

Signing out of the client portal now always clears the saved pages and leaves, even when the connection drops or the server is slow to answer.

The product pages now say that files are kept in Rebaar's own storage (a company cannot connect its own bucket), and the lock screen says to press Unlock once your connection is back.

Deleting a document that a change order, client approval, RFI, submittal, subcontractor agreement or site record points to is now refused, and the message names what uses it. Remove it there first.

On an invoice and on the vendors page, a balance or outstanding total is no longer worked out from amounts your role cannot see. The invoice shows a dash, and the vendors page leaves the outstanding total out.

When a company is scheduled for deletion, Settings shows Cancel deletion only to an Owner of that company, and tells everyone else that an Owner can cancel it.

When a client payment is recorded, the notice now goes only to people who can see amounts on that project. Project Managers no longer get receipts for projects they cannot open.

Rebaar no longer stores signed-in pages such as the cashbook, accounts or the client portal in your phone's offline storage, and signing out clears what was there. The next person on a shared phone cannot open them. The app needs a connection to load and save your work.

Adding a company bank account with an account number or IFSC now asks for your 2FA code or passkey and emails the Owner, the same as changing one. A cash account without bank details asks for nothing.

If two people edit the same purchase order at once, the second save is told to reload instead of quietly replacing the first. Once goods are received against a purchase order, its quantity and rate are fixed and it cannot be moved back to Pending or Ordered.

When Rebaar support works in your account at your request, the activity log now says "Rebaar support" instead of naming your Owner. A refund Rebaar makes is recorded there too, with the receipt number.

Site engineers, store managers and procurement managers can now change the delivery address of an invoice from the e-way bill screen. They still cannot change anything else on the invoice.

The Tally export and the activity log export no longer show a button that fails on plans that do not include them. The Owner sees an Upgrade button instead; other staff see nothing.

Accounting → GST returns and the GST payable on the balance sheet no longer include draft or cancelled invoices, and "this month" now stops at the end of the month instead of taking in later-dated invoices.

Near the end of your trial you now get one "trial ends soon" email instead of two, timed from the day your trial really ends. The onboarding tips describe Import as it works today.

The onboarding tips quote the current Growth and Starter prices.

Settings → Integrations and the help article used to say re-importing the same period into Tally was safe. It is not: Tally adds the vouchers again. The screen now says to import each period once, or delete that period's vouchers in Tally before importing it again.

The GST & Tax tab now shows your company's own GSTIN and the state it is registered in, and the real e-Invoice and e-Way Bill connection status. Before, it showed sample values for every company.

An invoice with an IRN now prints the signed QR code from the GST portal on its PDF. A cancelled IRN prints no QR code. If the invoice has a delivery address, the PDF now shows it under Deliver to, as the printed invoice already did.

Cancelling an e-invoice now asks for the reason the GST portal needs: duplicate, data entry mistake, order cancelled or other. It starts on "Data entry mistake".

The security page now says exactly what is true: your database is stored in India, backups are taken daily and kept off-site, and we acknowledge a security report within 1 business day.

Only the Owner, and anyone given billing access such as the Accountant, can see which plan your company is on, its price and its renewal date. They get a new subscription card in Settings → Billing. Everyone else keeps every feature the plan includes.

Site engineers, accountants and other staff no longer see locked menu items, upgrade messages or plan names. The Owner and people with billing access still see locked items with an Upgrade button.

If your company requires two-step sign-in, a team member who signs in with a passkey is no longer also asked to set up an authenticator app. Signing in with a password still needs the authenticator code.

When an employee changes their own salary bank account, HR must confirm it before payroll uses it. The change needs the last 4 digits of the current account and a second check, the employee is emailed every time it changes, and the Owner is told. Account numbers are shown as the last 4 digits only.

When the GST portal refuses an e-invoice or an e-way bill, Rebaar now says which field to fix in plain words, including the full 8-digit HSN code where one is needed, and shows the message from the portal itself for any error it does not know yet. If you leave the e-way bill distance at 0, the distance the portal works out is saved on the bill.

If the security check on sign-up or sign-in cannot finish, Rebaar now tells you why and what to try, instead of leaving a button that stays grey. The check also starts loading sooner on slow mobile data.

If you type an address like [email protected], sign-up asks "Did you mean gmail.com?". If the verification code bounces, you are told and can correct the address instead of starting again.

Removing the portal email of a client always works, and the Owner is told in the app when someone changes it. Two people saving the same client or quotation at once can no longer leave a wrong price or email behind. Team invites treat [email protected] and [email protected] as the same person.

On an invoice or an e-way bill, untick "Deliver to the client's address" and enter the site address, or take it from the project. The e-invoice and the e-way bill then name the client as the buyer and the site as where the goods go, and the e-way bill's distance is counted to the site. The printed invoice shows it too.

If the connection drops while an invoice is being registered, Rebaar now asks the GST portal for the IRN it already made and saves it, instead of showing "Duplicate IRN" for ever.

Removing, terminating or marking someone as left now ends their access and frees their login email, so their next company can add them. Their name stays on every record they made, and they move to Past members, where the Owner and HR still see the email they used. Someone added by mistake who never did any work is deleted as before.

Terminate, Mark as left, Remove and Bring back each open a short dialog that says what will happen. If the person's old email now belongs to someone else, Bring back asks for a new one right there.

When a former team member asks, an Owner can erase their phone, address, photo and other personal fields. Their name stays on their work, and the records the law requires (wages, attendance, leave and tax) are kept.

A team member can no longer delete their own account. They use Request removal instead, and the company's Owner and HR are told.

Actions by someone who has since left show their name, not "System". Exports do too.

Creating a user whose email another company's account still uses now answers 409 uniqueness, as the SCIM standard says, instead of a server error your identity provider keeps retrying.

ACTION NEEDED if you use single sign-on: Settings → SSO → "Verify your domains" gives you a TXT record to add at your domain provider. Until a domain is verified, SSO is not enforced for it and SCIM cannot create or rename people on it.

When an Owner deletes a workspace, it is scheduled for 30 days later instead of going at once. Meanwhile it is read-only, every Owner gets an email with a link to cancel, and the Billing card shows the date and a Cancel button.

Type a 6-digit PIN code on a client, lead or project and Rebaar fills in the city, district and state. A state that does not match the PIN is refused.

An invoice becomes Paid when payments covering it are recorded — no longer by changing its status by hand. Voiding a payment reopens it. Your receipts and the invoice now always agree.

Removing a person no longer deletes their salary slips, attendance or HR file. A project that holds invoices, payments, RERA filings, approvals or other records you must keep cannot be deleted — mark it Completed or On Hold instead, and nothing is lost. Deleting a bank account that has transfers or receipts is refused instead of changing another account's balance.

The web app, the public API and payment recording now share the same invoice rules: a cancelled invoice stays cancelled, only a draft can be deleted, and cancelling an invoice asks you to cancel its IRN and void its payments first.

Entra sends "active": "False" as text when it switches a user off. Rebaar now reads text and true/false the same way.

Deliveries carry webhook-id, webhook-timestamp and webhook-signature, signed over {id}.{timestamp}.{body} and base64-encoded — the same scheme Svix and Stripe use, so most verification libraries work as-is. Reject anything more than five minutes from your clock to stop replays. ACTION NEEDED if you had an endpoint before this release: the old X-Signature-256 / X-Rebaar-Signature headers are gone. The API docs carry a copy-pasteable verifier.

invoice.created, project.created, project.status_changed, lead.created, quotation.approved and quotation.rejected were offered but never sent. They now send, alongside invoice.paid, invoice.overdue and lead.won.

Settings → Webhooks now shows every delivery: the payload we sent, your response, the HTTP status and the attempt count. A failed delivery says whether it is still retrying (2/5) or has given up — and gives you a Replay button for the ones that have.

Plan every project on one timeline: drag to move, resize and link tasks (FS/SS/FF with lag), and the critical path recomputes as you work. Working calendars (Mon–Sat + holidays), baselines with slip-vs-plan, milestones, monsoon buffers, and the payment-gate padlock right on the bar.

On Growth and Scale; Starter keeps the phase list.

Bring an existing plan in from a sheet — phases, tasks, dates, owners and predecessors (3FS+2 style), checked row by row with a preview before anything is written. Export the live schedule back to Excel or CSV, or print it to PDF.

Ctrl-Z / Ctrl-Y for any drag or link (refused, never forced, if a colleague changed the row); arrow-key nudge; drag rows to reorder; search, filter and sort with a shareable URL; fullscreen and compact density.

Assign a task to a person and it appears in their My Work with a progress slider and status — they report the work without being able to move the plan. New-assignment notifications included.

Ten adversarial review passes across the release (full authorization checklist + bug hunts): workspace isolation and version-guarded writes verified on every schedule route; dozens of edge cases fixed before they reached you.

The project Accounts tab now projects the FINAL cost from spend-so-far at the current progress — with an early warning when a project is under budget today but heading over at its current burn rate.

New Accounts → Revenue forecast report: the next 3 months of expected money-in from invoices due (by month), recurring invoices (GST-inclusive), and the quote pipeline — shown unweighted, never mixed into the month totals.

Site records → Inspection now carries a proper checklist: pick a template (pre-pour, brickwork, waterproofing starters included), mark each item Pass / Fail / N-A, and the outcome derives itself. Save any ad-hoc list as a reusable template.

Log repairs, preventive services and inspections against each machine with cost, vendor and due date. Completing a preventive service rolls the next-service date forward automatically when a service interval is set — and the existing service-due alerts pick it up.

Adversarial review of the entire release: tenant isolation and authorization verified clean; fixed an empty-update crash, an over-strict checklist limit that could reject long inspections, stale-schedule inflation in the forecast, and a handful of edge cases before they reached you.

The complete NIC e-Way Bill lifecycle, tested end-to-end against the live GSP sandbox: generate (from an invoice or standalone, multi-item), update vehicle (Part-B), update transporter, extend validity, cancel, close, reject, consolidated trip sheets and multi-vehicle movement. A new Reconcile screen pulls e-Way Bills straight from NIC for any date — including bills raised on you by others, which you can reject within 72 hours.

A "Verify" button on the recipient GSTIN auto-fills their registered name, PIN and state — and warns if the GSTIN is inactive or e-Way-blocked. Type an HSN code and its official description appears, so a wrong code never reaches NIC.

Once an invoice has an IRN, generate its e-Way Bill in a single step — the party and goods come from the e-invoice, you just add transport. Refresh live IRN + e-Way status from NIC, and print a scannable B2C dynamic QR on non-IRN invoices.

Every NIC rejection now reads as an action ("HSN must be at least 6 digits", "document date is more than 180 days old", "you've hit the rate limit") instead of a raw numeric code — and the app catches most mistakes before you submit.

Errors now appear right below the field that caused them across the whole app — not just as a toast — so you fix the exact input, faster. Error toasts are red, success is green, no more colour mix-ups.

A full end-to-end review mapped to the OWASP Top 10 — multi-tenant isolation, authorization, injection/SSRF, secrets and payments all swept. Tightened finance-visibility on a few amount-bearing read endpoints, added defense-in-depth workspace scoping, and hardened webhook idempotency to the canonical event id.

Length fields now have a per-field unit picker: m, cm, mm, ft, in, or "ft + in" entered as two boxes the way drawings read. 17 calculators rewired (excavation, PCC, RCC, BBS, shuttering, concrete, brickwork, plaster, staircase, round column, compound wall, concrete pipe, roof pitch, asphalt, top soil, anti-termite, tank, wardrobe). Maths still runs in metres internally — your saved BOQs are unaffected.

On PCC, RCC, concrete, shuttering and excavation, hit "Add this to schedule" to stack F1, F2, F3 calculations under the live inputs. Tick which rows to include, then "Add N rows to project →" sends them straight to a project's BOQ as separate line items.

New 📚 picker modal opens inside quotations (new + edit), project BOQ tab, and the estimator. Search by code/description, filter by category, "+ New rate" inside the picker creates AND picks in one click. BOQ rows from the library are linked back via rateItemId.

Adds a 5th type for small / special jobs — retaining walls, compound walls, sheds, landscaping. Free-form description field is saved into the quotation notes when you export.

7th status "Work from home" (W) sits next to Present (P). Both count as a paid worked day; reports split office vs remote so you can answer "how many days did X come to site" vs "how many did they work".

New /attendance/insights — present-today snapshot, 30-day company attendance %, WFH share, employee × day heatmap (sortable by attendance %), per-employee summary table.

Clicking a manual-entry grid cell now opens a small dropdown with all 7 statuses instead of cycle-tapping through them. Faster on mobile, harder to mis-mark.

Profile attendance tab now reads both biometric punches AND manual entries, with a colored calendar, source pills (Biometric / Manual / Both), and a status breakdown bar.

Rate limits on /api/client-approvals/signoff and /api/account/export; 90-day TTL added to client signoff tokens (migration 0053); OCR storage-path traversal guard; tightened QuickBooks query escaping; webhook retry backoff math fix; OIDC userinfo fallback now requires email_verified.

Several pages (rate library new-rate, sample library, materials, labor, invoices, equipment, drawings, BOQ templates, mood boards) had transparent modal surfaces because the `--bg` CSS token was referenced but never defined. Added the token to both light & dark themes — fixes every affected modal at once.

Connect your own Razorpay merchant in Settings → Integrations. Customer payments on invoices now settle directly into your bank account, not ours. Webhook verification uses your per-workspace signing secret. Same model Shopify and Zoho CRM use.

Per-workspace IRP (e-Invoice) and e-Way Bill credentials. Every invoice registers IRN under YOUR GSTIN at NIC, every EBN is issued in your firm's name. Encrypted at rest.

Connect your own Meta WABA so reminders and updates go from your verified business name and phone number. Step-by-step setup walkthrough inside Settings.

Share your code with another builder. When they convert to paid, you get ₹500 credit auto-applied to your next Rebaar bill. One-click WhatsApp share.

Outgoing emails now show "Your Company via Rebaar" with your reply-to address. Clients reply to YOU, not us.

Constant-time comparisons on OAuth state, SAML RelayState, IP-binding hashes; alg=none JWT defence; race-safe referral ledger with partial UNIQUE index; permission gates on 13 money-path mutation routes.

Operator infrastructure (Sentry, S3, Anthropic, Web Push, Resend provider) hidden from the customer Integrations view. Only the integrations you control are shown.

Bar bending, concrete, modular kitchen, false ceiling, AC tonnage and 11 more.

Mood board, 3D renders, samples, procurement, installation, snagging — replaces construction tabs for type=Interior.

Track laminates, paint chips, fabrics, stone — across all projects.

Output and input GST and the net payable for the period, to check before you file.

Bulk-match webhooks against open invoices in one pass.

Auto-send the day's photos + progress % to client at 7 PM. Opt-in per project.

Owner / PM / Site Engineer / Accountant / Partner / Employee each get a tailored landing.

Vouchers now sync with cost-center and project tags.

Cleaner header, fewer pages, IRN auto-fetched.