Changelog

New features, improvements, and fixes. Follow our journey as we build the future of HR.

v1.0.0 Launch

Anthropon Launch — Production Ready

We're thrilled to announce the official launch of Anthropon — a workflow-first HRIS platform built for modern teams.

Core Modules

  • People Management — Employee directory, profiles, org chart, legal entities
  • Leave Management — Request, approve, business day calculation, multi-level approvals, balance tracking
  • Workflow Automation — Onboarding (21 tasks), offboarding (5 tasks), template gallery
  • Document Management — Upload, download, categories, templates, file security scanning
  • Approvals — Multi-step approval workflows, decline with reason, revoke, reassign
  • Reports & Analytics — Headcount, leave utilization, department breakdowns
  • Audit Log — Immutable event trail with search, filters, CSV export, pagination
  • Notifications — In-app + email notifications for all key actions

Multi-Tenant SaaS

  • Public self-serve signup with email verification
  • Tenant isolation on every table (16 tables with tenant_id)
  • Per-tenant legal entities, workflows, and data
  • Plan-based limits (Free: 10 users, Starter: 50, Business: 500, Enterprise: unlimited)

Security

  • MFA (TOTP) with recovery codes
  • JWT + refresh token rotation with replay detection
  • CSRF protection on all state-changing requests
  • Per-email login lockout (5 failures → 15 min lock)
  • Max 5 concurrent sessions per user
  • Role-based access control (HR Admin, Manager, Employee, IT Admin)
  • Corporate email enforcement on signup
  • Rate limiting (login: 5/min, signup: 5/15min, API: 100/min)

Infrastructure

  • Docker Compose deployment (Caddy + PostgreSQL + Backend + Frontend)
  • 13 database migrations, 20 tables
  • 530 backend unit tests, 28 E2E tests
  • SMTP email provider (hosting email compatible, no SendGrid required)
  • Terraform configs for AWS deployment
v0.9.0 Beta

SaaS Beta Hardening

  • Email verification enforcement — unverified tenants blocked from all app endpoints
  • Signup abuse protection — dedicated rate limit, corporate email only, CAPTCHA hook
  • 5 security vulnerabilities found and fixed via paranoid audit
  • 18 cross-tenant attack tests added
  • Production config validator — crashes on missing/weak secrets
  • Backup/restore drill proven end-to-end
v0.8.0

Multi-Tenant SaaS Transformation

  • Tenants table with plan, billing status, lifecycle (active/suspended/deleted)
  • tenant_id added to all 16 data tables
  • Public signup endpoint with tenant + admin + workflow seeding
  • JWT includes tenantId — all queries filter by tenant
  • Unique constraints scoped per tenant (email, employee number)
  • Frontend: signup page, tenant name in sidebar, login with org slug
v0.7.0

Production Hardening — 22 Gaps Fixed

  • Leave overlap prevention with SERIALIZABLE transactions
  • Document tenant isolation + file security (magic bytes, ClamAV)
  • Forgot/reset password with hashed tokens
  • Invite-based user onboarding (no temp passwords)
  • Business day calculation (weekends/holidays excluded)
  • Leave accrual/rollover with carryover limits
  • Workflow idempotency (advisory locks + unique constraints)
  • Multi-level approvals (approval_steps table)
  • Manager circular reference detection
  • Per-email login lockout, session limits, date validation
v0.5.0

Backend Foundation

  • Hono API server with TypeScript + Drizzle ORM
  • PostgreSQL schema with 16 tables
  • JWT authentication with refresh token rotation
  • All CRUD endpoints for employees, leave, approvals, workflows
  • Docker Compose setup with Caddy reverse proxy
  • 496 unit tests across 42 test files
v0.1.0

UI Prototype

  • Next.js 16 + React 19 + Tailwind CSS + shadcn/ui
  • 51 pages, 52 routes, 4 role personas
  • Dashboard, People, Leave, Approvals, Documents, Workflows, Reports
  • Dark mode, command palette, responsive design

Stay up to date

Follow us for the latest updates, or start using Anthropon today.