What we shipped

What's live, what's beta, what's roadmap

A factual snapshot of what TrainSync ships today versus what's on the roadmap. No marketing fog.

Need something not on this list? Book an assessment — many roadmap items move forward when a customer commits to one.

Credibility pass — for QA, Training and IT buyers

• Compliance wording softened across every page. "Part 11 compliant" → "Part 11-aligned" or "designed to support customer compliance." Customer QA validates per engagement.
• Sub-processor list aligned in the privacy policy and the DPA: Microsoft Azure, Supabase, Clerk, Plausible (all active); Paddle and Resend (planned).
• Integration Status table added to the homepage. Live, beta, roadmap and "available on request" labels next to every capability.
• "Not replacing your validated LMS/QMS" callout made prominent on the homepage.
• Quickstart split into two paths. Path A: sandbox / planning data, go live in hours. Path B: validated GxP use, go live after customer-side validation.
• Smart scheduler reframed — "rule-based scoring, human approval required" instead of "AI suggests." Avoids black-box concerns for regulated buyers.
• New /security.html page covering hosting, authentication, tenant isolation, audit trail, encryption, backups, sub-processors, incident response, vulnerability management, and data export/deletion. Honest about what's drafted vs operational.
• New /qa-pack.html page covering intended use, GAMP 5 categorisation, audit trail mechanism, e-signature control matrix mapped to Part 11, EU Annex 11 paragraph mapping, data retention, and template versioning.

Auth, tenant isolation, and audit trail

• Clerk authentication wired into all app pages with auth-guard.js. Per-user accounts, role-based access control via JWT claims, SSO available on request.
• Supabase row-level security deployed on all 11 application tables. Cross-tenant queries are now blocked at the database level.
• Audit triggers active on 7 critical tables. Every insert, update and delete writes to an append-only audit log with the actor, action, before/after values, IP address and timestamp.
• Demo mode preserved as a separate tenant — anyone can still explore TrainSync at /?demo=1 without affecting real data.
• Mobile navigation polish. Main nav shows icons-only on mobile with the active page expanded to icon + label; sidebar toggle is a clean hamburger.
• Site positioning sharpened: TrainSync is now positioned as the GxP training operations layer beside your LMS, not a replacement for it. Pharma and biotech manufacturing is the beachhead.

Eight modules, full demo coverage

• Dashboard, Calendar, Smart tools, Signatures, Templates, Charts, Pages, Trainer scheduler — all eight modules live in the demo.
• Sequential signature flow with N/A reasoning, admin reassignment, and append-only audit. Designed against 21 CFR Part 11 and EU GMP Annex 11 requirements.
• Skill matrix with configurable levels (0–5), per-training required level overrides, and pulsing open-slot indicators.
• Smart trainer slot matching with rule-based 0–100 scores across skill, availability and site.
• Signature template builder with 11 field types, standard texts, mass send, and PDF overlay mode.

Schema, infrastructure, public site

• Multi-tenant Supabase schema designed and deployed (Brussels region, GDPR-compliant).
• Azure Static Web App hosting with HTTPS, cache headers, and a CDN-fronted deployment pipeline.
• Marketing site at trainsync.io with feature showcase, FAQ, pricing, and blog.
• Legal pack drafted — privacy policy, terms of service, cookie policy, GDPR rights summary.