What we shipped, in plain language.

Risk Management now supports ongoing monitoring so risks don't go stale:

• Periodic reviews — schedule recurring re-assessments (monthly, quarterly and so on) with an outcome and a next-review date; overdue reviews trigger alerts.
• Key Risk Indicators (KRIs) — track metrics against amber/red thresholds, record readings over time, and have each reading automatically classified Green, Amber or Red.
• Breach & overdue notifications — owners, risk owners and Risk Managers are notified in-app and via web push when a KRI breaches its threshold or a review falls overdue.

The Purchase Order list view now presents amounts more clearly:

• Base, Tax and Total columns — each PO shows a pre-tax base amount, the total tax (line plus header), and the payable grand total, all consistently rounded to two decimal places.
• Correct currency code — the list and detail views now display the proper currency code instead of a blank or incorrect value.

Resolved issues in the Plant Maintenance Defect Analysis and Maintenance Resource forms so they load and save reliably, with matching support added on the server side.

A new GRC Core layer underpins the organisation's governance, risk and compliance capabilities. It provides:

• Shared scoring — a common scoring matrix and service so risks, assessments and controls are rated consistently across modules.
• Source linking — a standard way to connect a risk, control or finding back to the record it originated from anywhere in the system.
• Workflow, CAPA & incident facades — reusable hooks into the Workflow Engine, Corrective & Preventive Actions and incident handling, so each GRC module plugs into approvals and remediation without re-implementing them.

This release lays the groundwork; the Risk Management app is the first module to build on it.

Coloured status badges in Payroll grids (for example on the Payroll Results screen) showed the colour but no label — the text inherited the dark cell colour and was clipped to zero width. Badges now use their own colour, are no longer clipped, and sit centred in the row, so the status is always readable. The fix applies to every status badge across the application's grids.

Several Payroll configuration and processing screens were tidied up for more reliable behaviour, including Bank File Generations, Employee Tax Configs, Final Settlements, GL Configs, Off-Cycle Payrolls, Payslip Templates, Posting Logs, Tax Declarations and Tax Slabs.

The new Risk Management module gives you a single place to record and govern enterprise risk:

• Risk Register — capture each risk with its owner, description and context, and manage the full list from one workspace.
• Risk taxonomy — organise risks using configurable categories, sources and risk-appetite definitions so they can be grouped and reported consistently.
• Built on the GRC Core foundation, with dedicated Risk Officer, Risk Manager and read-only CRO / Executive Viewer roles.

System administrators can now manage tenant users from a dedicated User Management area (/admin/users) instead of the Django admin:

• Full user CRUD — create, view, edit and deactivate users, set names, email, phone, department and user type, reset passwords, and toggle staff/superuser, force-password-change and MFA opt-in flags. Each user's assigned roles are shown at a glance.
• User preferences — review and adjust a user's preferences and scoped defaults from the same workspace.
• The new screens are linked from the navigation menu and are restricted to system administrators.

Creating a Point of Sale cash sale could fail when the sale date and posting date were left blank — the empty values overrode the default and tripped a required-field constraint, and even when a default was applied the response could not be produced. Cash sales now default to the current date when one is not supplied, so they save and return correctly every time.

Two Point of Sale cash-sale blockers fixed: product search no longer errors out (it now searches on the correct material code and unit fields and returns a valid base unit for checkout), and the general-ledger journal entry now records its posting period so the posting no longer violates a required-field constraint.

The row-level data-authorization engine gains three new dimensions: Warehouse, Storage Location, and Sales Point. Once a tenant is set up and users are assigned, each user only sees the storage locations, sales points, goods movements, and cash sales for the org units they are authorised for.

The rollout is non-breaking by default — unassigned users remain unrestricted until you assign them under /admin/data-access. Run setup_authorization per tenant to register the new dimensions.

A new Accounts Payable dashboard brings the key payables metrics together on one page — outstanding and due amounts, aging, and recent payment activity — so the AP team can see the overall payables position at a glance.