Release Notes

What is new in TruStar Connect, newest first.

v2.601October 8, 2026

Buy an Academy course without an account

TruStar Safety Academy courses can now be bought from their own public page, and the buyer gets a free account to take the course in.

Added

TruStar Safety Academy has a public course catalogue, with a page for each course you can share.
Anyone can buy a course from its page with just a name and an email address, and pay through Stripe.
Once the payment clears, the buyer gets an email saying the course is ready, and a free TruStar Connect account if they did not have one.
If the email already belongs to a TruStar Connect account, the course is added to that account instead.

v2.599October 8, 2026

Your training stays yours between jobs

Leaving your last company no longer locks you out: you keep your training, your certificates and TruStar Safety Academy courses until you join the next one.

Added

If you leave your last organization, or are taken off its roster, you can still sign in to see your training, your certificates and your profile.
Without an organization you can buy and take TruStar Safety Academy courses at the regular price, and a finished course gives you a TruStar Safety Academy certificate.
That certificate goes with you to any company you join and counts toward its course for the same credential.
Joining a company that approves new people moves you into it as soon as they approve you.

Fixed

Creating an account from an emailed invitation failed with an error; it works again.
Workers’ changes to their own profile, photo and language were not being saved; they are now.

v2.598October 8, 2026

Your training comes with you

Approved training records follow a person to every company they work for, and a shared list of standard credentials lets one company’s card count for another’s course.

Added

Approved training records now show in every organization a person belongs to, labelled with the company that issued them.
Each training course can name its standard credential, such as WHMIS, H2S Alive or Standard First Aid, chosen from a shared list with a suggestion from the course name.
A card issued by another company for the same standard credential counts toward your course on the training matrix, on the person’s training page and in their required training.
The certificate scan travels with the record, so you can open it wherever the record shows.

Changed

Only the company that issued a training record can change or remove it.
Someone who leaves your organization keeps their records, and you keep the ones you issued while they worked for you.
Training reminders and required-training emails go to the supervisor and owners of each company where the training is required.
Everyone now has a hire date in each organization they belong to: the day they joined, unless an owner or admin sets another.

v2.597October 8, 2026

One login for every company you work with

Belong to more than one organization with the same account, switch between them, and join a new one without making another login.

Added

One TruStar Connect login now works for every organization you belong to, so somebody who works for two companies, or moves from one to another, keeps the same account.
If you belong to more than one organization, a bar at the top of every page shows which one you are working in and lets you switch.
Your organizations, on your profile, lists every organization you belong to, with a way to switch to one or leave one you no longer work for.
An invitation or join code now works for somebody who already has an account: they sign in and join with it instead of making a new one.
Owners and admins can remove a switched-off member from the organization for good; their records stay with you and they keep their account.

Changed

Waiting for approval at a new company no longer stops you working at the one you are already in.
Switching organization or signing out clears what the device saved for offline use, so one company’s screens never open in another.

v2.596October 7, 2026

Host your own training, and take it inside Connect

A new Available Training page, hosted courses for owners and admins, and the first look at TruStar Safety Academy.

Added

Available Training, under Training in the menu, lists every course you can take, with the ones assigned to you or required for your role at the top.
Owners and admins can host their own courses under Settings, Training, Hosted courses: Articulate Rise 360 and Storyline, any SCORM 1.2, SCORM 2004, xAPI or cmi5 package, a video, a PDF or a link.
A hosted course can be required by position or by project, using the same requirements as the rest of your training program, or assigned to named people with a due date.
Finishing a course adds an approved certificate to the person’s training profile and the training matrix automatically, with its expiry date.
Each hosted course has a progress list showing who has finished, who is part way, who has not started, and who is past their due date.
TruStar Safety Academy is coming: Connect subscribers will save 25% on every course, and owners, admins and managers can buy course codes to hand to their crew.
Have a course code lets anyone enter a code their employer gave them and take that Academy course without paying.

v2.595October 5, 2026

Fix a new hire’s details before you approve them

Added

When someone who joined with a code is waiting for approval, Edit details lets you correct their name, phone number or position before you let them in.
Save and approve does both in one step, and their training tasks open for the corrected position.

v2.594October 4, 2026

Join codes: a whole crew signs itself up

Added

Owners and administrators can make a join code on the Users page, so new hires create their own accounts instead of waiting for an emailed invitation.
A join code can be for one project and offers the positions you choose; each new hire picks their position, gives their phone number, joins as a worker, and is put on the project.
A new hire’s training tasks open the moment they join, for every ticket their project and position require.
Share a code as text, as a link that fills it in, as a QR code, or as a printable one-page orientation sheet in English or French to hand out or attach to an onboarding email.
Turn on approval to check each new person before they can sign in; owners and administrators are emailed when someone is waiting, and approve or decline them on the Users page.
A code never takes your organization past its plan’s user limit; the next person is asked to contact whoever gave them the code.
A code can stop working after a set day or after a set number of people have joined, and can be revoked at any time.
Each code shows who joined with it, the position they chose and when.
The sign-in screen has a new Join with a company code link for people starting a new job.

Changed

Every email from TruStar Connect now has the same look, with the TruStar Connect header, a clear link to open what it is about, and a line saying why you received it.

Fixed

Project training that applies only to certain positions now turns into a training task for the people in those positions, as the Training page already showed.

v2.593September 7, 2026

Edit the talking points, and more screens that stop guessing

Added

The talking points on a toolbox talk can now be edited while you deliver it, so the record says what you actually covered. Your edits apply to that talk only — the copy in your library is unchanged.

Fixed

A subcontractor whose documents could not be read showed as holding nothing on file, with no insurance and no clearance. It now says it could not check.
The same problem is fixed on document sign-offs and acknowledgements, the COR assessment, the Safe Start mentorship lists, driver training files, and inspection photos.
Assigning projects to a subcontractor worker could clear their existing projects if the permitted list could not be read.
Hours of service used the default time zone instead of your carrier’s if the setting could not be read, which moved every day boundary.
A scheduled report that could not read its recipient list sent to a smaller group without saying so, and a failure to load the schedule itself stopped every report quietly.

v2.592September 7, 2026

Pick a toolbox talk from your library while delivering it

Added

The topic box on a toolbox talk now searches your library as you type. Pick a talk and its talking points come with it.
Typing a topic that is not in the library still works exactly as before, with your own notes in the notes box.

v2.591September 7, 2026

A report that cannot be worked out now says so

Fixed

A scheduled report whose data could not be read printed the section empty instead of failing. On the Training and Certifications report that read as "nobody is missing a certificate", which is the opposite of what an empty answer meant.
The same problem is fixed on the COR and SECOR readiness score, where evidence that could not be read counted as evidence you did not have, and on the analytics trends, where it counted as a quiet month.
Auto-awarded COR credits no longer overwrite answers an assessor set by hand if the existing answers cannot be read.
Hours of service and IFTA imports stop with an error if the device and driver links cannot be read, rather than importing nothing and reporting a short quarter.

v2.590September 7, 2026

Review questions for actions that did not come from an investigation

Fixed

The review questions on an effectiveness review would not prepare when the corrective action came from an inspection rather than an investigation. They prepare now.

Improved

The questions are written from the deficiency on the form that raised the action, the way they are written from the causal factor on an investigation.
A corrective action with no control level chosen and no verification method recorded no longer gets questions that assume it had them.

v2.589September 7, 2026

Effectiveness reviews open again

Fixed

The effectiveness reviews page failed to load with an application error. It works again.
A review of a corrective action that came from an inspection rather than an investigation could not be opened at all. It now opens, and simply shows no investigation line — because there is not one.

v2.588September 7, 2026

Limits on public endpoints

Added

Filing an inspection from a QR code, the assistant on the public website, and trial invite codes now have limits on how many requests one connection can make. The limits are set well above what a busy site does in a day — they stop a script, not a shift.
Somebody who does hit a limit is told plainly, and told that nothing they typed is lost.

v2.587September 7, 2026

What the chasing did

Added

Settings → Workflows now shows what your reminders and escalations have actually done over the last ninety days.
The list that leads is the short one: open corrective actions somebody above the owner has already been told about, most escalations first. An action escalated sixty times and still open is a piece of work nobody is doing, not a line in a mail log.
Underneath it, the last twenty messages sent — for checking that a reminder you have just set up actually went out.
Any message the mail provider refused is called out at the top, because that is the one thing on the screen that is wrong rather than merely informative.

v2.586September 7, 2026

Reminders on your own schedule

Added

Settings → Workflows now lets you choose when a corrective action chases the person who owns it, and how many days overdue it has to be before somebody above them is told.
Escalation can go to the owner’s manager, as before, or to a person you name — a safety manager who wants to hear about anything running late.
You can turn off advance reminders entirely without turning off the overdue chase.

Changed

Nothing changes for anyone until they change it: every organization starts on the same schedule it already had — reminders three days and one day ahead, escalation after a week, to the manager.
Somebody who works for two organizations under the same email now gets one summary per organization instead of one email mixing both.

v2.585September 7, 2026

A rule can do more than one thing

Added

Workflow rules can now send a notification as well as raise a corrective action — to the project lead on shift, to whoever filed the form, or to a named person, with a line of your own if you want one.
A rule can carry several actions at once. Raise the corrective action and tell the supervisor from one rule, instead of keeping two rules with identical conditions in step.
The rule’s summary line now reads out everything it does, in the order it does it.

Changed

One notification per form, however many items failed on it — five failures on one walkaround is one thing that happened.
A notification that cannot reach anybody, because a project has no leads or the person chosen has left, is reported as a failure in the run log rather than being sent to whoever happens to be nearest.

v2.584September 6, 2026

Follow-up reviews when they are worth it

Changed

Effectiveness reviews are now scheduled automatically only for an investigation’s corrective actions — something caused harm, so the fix gets checked whether anybody feels like it.
For anything else — an inspection finding, a maintenance deficiency — the person signing it off decides. A checkbox on the verify screen schedules the follow-ups when the finding is serious enough to warrant them, and leaves them off when it is a set of wiper blades.
Audit snapshots, readiness by site and workflow rules are now simply part of the product for every organization, rather than features switched on one account at a time.

Added

The rule editor now warns you when a form you have picked already opens a maintenance deficiency on its own, so you can decide whether you want a corrective action as well rather than finding out from the second record.
Correcting a submitted form now re-runs your rules against it. An item that was already failing keeps the one action it has; an item you have newly marked failed raises its own.

Fixed

Editing a trip inspection recalculated its score without counting the defects on it.

v2.583September 6, 2026

Effectiveness reviews load again

Fixed

The effectiveness reviews list failed to load. It works again.

v2.582September 6, 2026

Actions from inspections show up everywhere

Fixed

A corrective action raised by a workflow rule was missing from Tasks, Corrective Actions and your dashboard, while the counts above those lists still included it. It now appears wherever any other action appears.
Each of those screens now links back to the inspection that raised the action, the same way an investigation action links back to its report.
Verifying a corrective action raised from an inspection failed silently. It now completes and schedules its effectiveness reviews like any other.

v2.581September 6, 2026

Project leads

Added

A project now has leads, set under Settings → Structure when you edit it. Add everyone who runs it, including people who cross-shift each other.
A workflow rule that assigns to the project lead now uses whoever the crew schedule says was on shift the day the form was filed. The primary lead covers days the schedule cannot answer for.

Changed

Workflow rules no longer pick a hierarchy of controls. The control level records what somebody chose after looking at the hazard, so an action raised automatically arrives with that question still open, for the person doing the work to answer.
A corrective action with no control level yet is shown as such on the action, counted separately in the hierarchy breakdown, and marked "not set" in the investigation report rather than being reported as a weak control nobody chose.

Fixed

A workflow rule set to assign to the project lead was using the project’s permit issuer, or failing that its equipment manager, because there was no such thing as a project lead. Actions could land on somebody with no connection to the finding.

v2.580September 6, 2026

Workflow rules

Added

You can now write a rule that raises a corrective action the moment an inspection item fails, so nothing waits for somebody to notice a failed form and type one out.
A rule reads as a sentence: which forms it watches, how many failures it takes, and who the action goes to and by when.
Choose one action for the whole form, or one for each failed item so each finding is fixed and verified on its own.
Every action a rule raised is listed under Settings → Workflows, including the ones that failed, so you can see what the automation actually did.
A rule cannot fire twice on the same form, so a form that syncs twice after being filled offline still produces one action.

v2.579September 6, 2026

Evidence by site

Added

COR readiness now shows what each site and project has actually produced in the last twelve months, so you can see which ones are quiet before an auditor picks one.
A project with nothing on record is named as such, along with exactly what is missing from it — no inspections, no toolbox talks — rather than being given a score.

v2.578September 6, 2026

Freeze a COR assessment

Added

You can now freeze a COR or SECOR assessment as a dated record. A frozen score never changes, even after the documents and training behind it do — so it still says what you were ready for on the day you took it.
Each frozen assessment keeps the reasoning as well as the score: which requirements were met, and whether a person, the AI assessment or your own records credited each one.

v2.576September 6, 2026

Settings tiles light up like the dashboard

Changed

The tiles on the Settings overview now respond to the mouse the same way your starred shortcuts on the dashboard do — the edge brightens and a soft light crosses the card, while the words stay exactly where they are.

v2.565September 6, 2026

Safer spreadsheet reading

Security

Replaced the library that reads uploaded spreadsheets. The old one had a published flaw with no fix available, and every place it was used was reading a file somebody had uploaded — a hazard register, a workforce list, or a document handed to Tru.
Updated several smaller components to their patched versions.

Changed

Spreadsheets saved in the Excel 97-2003 format (.xls) can no longer be imported. Open one in Excel, use Save As to make an .xlsx, and upload that — the app now says so plainly rather than failing part way through. .xlsx and .csv are unaffected.

Fixed

Cells holding a formula, a link, or mixed formatting now import as the value you see in the spreadsheet. They previously came through as unusable text, so rows containing them were quietly skipped.

v2.564September 6, 2026

Under-the-hood updates

Changed

The framework the app is built on, and a dozen other components, are on their current versions. Nothing looks or behaves differently; this is the routine maintenance that keeps security patches applicable.

Fixed

Corrected the Workday connection for one of those updates. The library that reads Workday’s replies changed how it reports a malformed response, and without the fix a roster sync would have failed on the first reply.

v2.563September 6, 2026

Security hardening

Security

Closed a hole that let an unauthenticated request switch every TruStar agent off duty. Nobody used it, but it was reachable, and the duty switch decides whether somebody asking for a person reaches one.
Platform-wide usage statistics are no longer readable by signed-in customers. Nothing in the app was showing them, but the database would have answered.
Internal database routines that were only ever meant to run behind the scenes are no longer reachable over the web at all.
Every database routine now runs with a locked-down lookup path, which closes a known way of getting a trusted routine to call the wrong thing.
Browsers are now told to refuse plain HTTP for this site for the next two years, so a connection cannot be downgraded after your first visit.

v2.562September 6, 2026

Samsara telematics

Added

Samsara is now a telematics choice alongside Geotab. Pick it under Fleet → Telematics, paste an API token from your Samsara dashboard, choose your region, and your vehicles and drivers come across to be matched.
Hours of service from Samsara fill the log book for matched drivers, with a yard move recorded as on duty and personal conveyance as off duty.
Each Samsara driver’s entries are measured against the part of the standard their own ELD ruleset names, so a run north of latitude 60 is not held to southern limits.
Odometers come from the engine where Samsara has diagnostic coverage and from GPS where it does not, so distance-based services keep coming due on their own.
The fleet map shows last known position, speed and heading for Samsara units.
Distance by province for a fuel tax quarter comes from Samsara’s own IFTA report.
A new Knowledge Base article walks through connecting Samsara, including which permissions the token needs.

Changed

An hours pull from Samsara re-reads the last fortnight each time, because Samsara logs can be edited after the fact. An entry that was withdrawn or re-timed is retired here to match rather than left standing beside the corrected one.
The connection troubleshooter is shown only for Geotab. It asks for records by name in a way that has no Samsara equivalent; Samsara refusals carry an identifier we keep instead.

v2.561September 6, 2026

Groundwork for a second telematics system

Fixed

Fleet no longer assumes every telematics connection is a Geotab one. That assumption was harmless while Geotab was the only choice and would have quietly read the wrong connection once there were two, so it is gone ahead of the second system arriving.

v2.560September 6, 2026

An Integrations page, and a guide for every HR system

The public site now lists every system TruStar Connect connects to, and the Knowledge Base walks through connecting each one.

Added

A new Integrations page on the public site lists every HR, payroll and telematics system you can connect, what each one syncs, and what you need to connect it. Find it under Resources in the menu.
The Connecting your HR system guide in the Knowledge Base now has step-by-step instructions for each of the ten HR systems, including where each one hands out its credentials and the settings people most often miss.

v2.559September 6, 2026

HR syncs keep to the pace your HR system allows

Fixed

Reading a large roster no longer fails partway through. HR systems limit how many requests they take in a minute — Dayforce allows a hundred — and an import of a few hundred people used to run past that and stop. Imports now keep under the limit, and if your HR system asks us to slow down, the sync waits and carries on instead of giving up.

v2.558September 6, 2026

Connect Workday

Added

Workday joins the HR systems you can connect under Settings → People & HR. Enter the web services address, your tenant and an Integration System User, and the same preview, import and nightly sync follow.

v2.557September 6, 2026

Connect Oracle Fusion Cloud HCM

Added

Oracle Fusion Cloud HCM joins the HR systems you can connect under Settings → People & HR. Enter the address you sign in at and an integration user, and the same preview, import and nightly sync follow.

v2.556September 5, 2026

Connect SAP SuccessFactors

Added

SAP SuccessFactors joins the HR systems you can connect under Settings → People & HR. Register TruStar Connect as an OAuth client in SuccessFactors, paste the API key, Company ID, API user and the certificate’s private key, and the same preview, import and nightly sync follow.

v2.555September 5, 2026

Connect Avanti or Employment Hero

Two more HR systems, and the example address in each field now belongs to the system you picked.

Added

Avanti and Employment Hero join the HR systems you can connect under Settings → People & HR. Employment Hero is approved in the browser: save the application’s Client ID and secret, press Connect with Employment Hero, and approve it on their page.

Fixed

The example shown in an empty address field is now the chosen system’s own — a UKG Ready field no longer suggests a Dayforce address.

v2.554September 5, 2026

Connect Dayforce, UKG Pro, UKG Ready or Humi

Four more HR systems can keep your people in step every night, the same way BambooHR does.

Added

Under Settings → People & HR you can now connect Dayforce, UKG Pro, UKG Ready or Humi as well as BambooHR. Pick your system, enter the credentials it asks for, and the same preview, import and nightly sync follow: new hires invited, terminated employees deactivated, names, titles and managers kept current.
The Connecting your HR system guide in the Knowledge Base says where each system hands out its credentials.

v2.553September 4, 2026

Support shifts end on their own after twelve hours

Changed

When one of us is on duty for chat, the "Talk to a person" offer now switches itself off twelve hours after it was switched on, so it is never left standing overnight by mistake. Switching on again starts a fresh twelve hours.

v2.552September 4, 2026

The old digests are retired for good

Removed

The five fixed digests — safety review, observations, corrective action effectiveness, leading vs lagging, expiry horizon — that predated the Reports module are removed entirely, along with the settings that scheduled them. Nobody was using them; every report you send is one you built under Reports, and those are untouched.

v2.551September 4, 2026

Small fixes on the Settings overview

Fixed

The Fleet tile on the Settings overview now says Federal or Provincial rather than printing the raw value, and the Organization tile shows your time zone by name — the app default when you have not chosen one.
The chat panel no longer drops the "Talk to a person" offer a minute after our support person looks away from their screen. Somebody on duty stays on duty until they switch off, and a request reaches them on their phone and by email wherever they are.

v2.550September 4, 2026

Your reports, in Settings too

Changed

Settings → Reports & language now shows the reports you actually send: the same builder, list and archive as the Reports page under Analytics. Every report is listed with what it covers, how often it sends and to whom, and you can build a new one from either place — it is one list.
The five retired digests that briefly appeared in that area are gone from Settings.
The Organization settings guide now covers the whole Settings hub — the Overview and every area — and the Reports guide says where else to find your reports.