Product Updates
What shipped, when it shipped, and what it changes for the way your team works.
Encrypted content and hardened access
Task titles, descriptions and comments are now encrypted at rest with AES-256-GCM, alongside the integration tokens that were already protected. Encryption and decryption happen inside the data layer, so nothing changes in how you work — but a database dump on its own no longer reveals a single line of client work.
Behind that, Postgres row-level security is switched on deny-by-default as a second line under the app's own authorization, and the Content-Security-Policy moved from report-only to enforced.
Everything on this board — titles, descriptions, comments — is stored encrypted and decrypted transparently for members of the project.
Search still works across encrypted fields: matching moved in-app rather than reaching into the database, so nothing had to be left in the clear to stay findable.
New
- SecurityApp-layer field encryption for task titles, descriptions and comments
- SecurityPostgres row-level security, deny-by-default on every table
- PrivacyData-retention sweep for expired notifications and audit records
Improvements
- SecurityContent-Security-Policy enforced rather than report-only, with violation reporting
- SearchContent matching runs in-app so encrypted fields stay searchable
Fixes
- TestsMoney, webhook-ingestion and task-isolation paths now covered end to end
Alignment and routing
Nalaras now tells the right person, on the tool they already have open. A nudge goes to one person rather than a channel, and it travels across Slack, email and GitHub — so a blocker owned by a contractor outside your workspace still reaches them.
"My attention" collects everything waiting on you in a single inbox, and a daily digest sends each person their own list instead of a firehose. The board also looks forward: "Likely to slip" flags work that is still open but trending late, before the due date passes.
Focus ranks what needs you right now — at risk, likely to slip, waiting on someone.
New
- RoutingPer-person nudges delivered across Slack, email and GitHub
- Attention"My attention" inbox with its own home sidebar
- DigestPer-person needs-attention digest by email and Slack
- RiskForward-looking "Likely to slip" bucket
Improvements
- RoutingThe nudge picker only offers people we can actually reach, and says why
- RoutingAcknowledging a nudge signals the sender
- ConnectGuided connect flow for Trello and Asana
Fixes
- GitHubAccept a repository invite without leaving Nalaras
- CronNudge schedule corrected to daily
Project versions and two-way integrations
Versions let you run sprints and releases inside one project instead of standing up a new board every cycle. Tasks move between versions three ways — an import flow, a field on the task itself, or a roll-forward when you release.
Integrations became two-way in the same release. GitHub issues, Trello cards and Notion database rows now sync in both directions — edits, comments, checklists and status — with echo guards so a change never loops back on itself.
Connect the tools your team already uses. Their activity flows into this project — no one has to switch tools.
Link a repo and its commits, PRs, and issues appear here — attributed to their GitHub author. New issues become tasks automatically.
Connect GitHubLink a board and its new cards become tasks here — attributed to the Trello author. Card moves and comments appear in the activity feed.
Connect TrelloLink an Asana project and its new tasks become tasks here — with the notes and tags carried over. One-click; no keys or setup.
Connect AsanaPost updates to a Slack channel — when something is waiting on someone, a teammate is @mentioned, or a new report goes out. Uses an Incoming Webhook — no app install required.
Watch a Notion database — new pages become tasks here, page edits appear in the activity feed.
Connect the tools your team already uses; their activity flows into the project verbatim.
Every ingested task keeps a link back to the issue, card, email or meeting it came from, so nothing arrives without provenance.
New
- VersionsSprints and releases inside a single project, with hard board scoping
- NotionCollections — browse a database as a table, open a row, write back
- AsanaNative connector with one-click OAuth
- PortfolioCross-project Home dashboard
Improvements
- TrustSource evidence recorded on every ingested task
- GitHubOutbound sync for task edits, status and comments
- TrelloChecklist sync and outbound card edits
Fixes
- IngestionHistorical backfill for GitHub, Trello, Notion and Asana