Every shipped capability, in order.

1. April 26, 2026

   14 vertical-specific landing pages and 6 new founder operational dashboards

   The marketing site now reflects the depth of vertical coverage that's been shipping for months. Pharmacy disclosure profiles, B2B credit-memo flow, modest-wear extended windows, and 11 more — each with a dedicated page describing the defect taxonomy and routing. Internal operations gained 6 new cross-tenant dashboards.

   • Per-vertical landing pages for eyewear, wine/food, instruments, watches, modest-wear, POD, sneakers, jewelry, cosmetics, pet, mattress, trading cards, pharmacy, B2B
   • Pricing matrix expanded from 4 to 8 categories — subscription lifecycle, shipment intercept, vertical fit, security posture
   • New TrustBand on the homepage surfaces real compliance posture (AES-256-GCM, App Bridge, GDPR Art 17 chained-batch, App Proxy HMAC)
   • Founder dashboard: shipment intercepts, cancellations, defect distribution, AI-verified deliveries, custom-rule adoption, learning-loop hit rate

   Vertical coverageMerchant dashboard
2. April 17, 2026

   Lakhs-scale GDPR shop_redact with chained batches

   Merchants serving Indian and EU customer bases at scale needed a redact path that doesn't time out on millions of conversations. The webhook now runs as a chained batch across every merchant-scoped table and completes regardless of merchant size, with an immutable audit log that survives the redact.

   • shop_redact runs as chained batches — completes for merchants of any size
   • gdprAuditLog table is immutable and survives the redact (proof of work for regulators)
   • customers/redact and customers/data_request webhooks fully implemented and Shopify BFS-ready

   ComplianceSecurity
3. April 10, 2026

   Strict App Proxy HMAC enforcement on every public endpoint

   Every chat, escalate, clear, rating, redeem-token, and verify endpoint now requires a valid Shopify-signed signature with a ±5 minute timestamp replay window. Production fails closed.

   • App Proxy HMAC verification on chat, escalate, clear, rating, redeem-token, verify
   • ±5 minute replay window blocks captured-signature replay attacks
   • Production fails closed; non-production retains a permissive path for local dev only

   Security
4. April 3, 2026

   Subscription cancellation lifecycle (cancel · skip · partial)

   Subscription customers can now cancel, skip the next shipment, or partially cancel through the conversation. The AI computes prorated refunds when applicable and routes them to your AR/finance team automatically.

   • cancelSubscription tool — full cancel with confirmation flow
   • skipNextSubscriptionShipment tool — pauses without cancelling
   • Partial cancel routes per-line items to your subscription team with the LineIDs ready to remove
   • Prorated refunds on mid-cycle cancels auto-route to ar_finance

   AIOperations
5. March 26, 2026

   AI-verified delivery via two-photo identity gate

   When tracking shows in_transit but the customer says they have the order, the AI now runs a two-photo verification (label + product) and unlocks the return path when the cross-check passes the confidence threshold. False-positive control via fraud-flag heuristics.

   • Two-photo verification: shipping label + product
   • Composite 0..1 confidence after cross-check + AI score fusion
   • Fraud flags: reused-photo, blurry, screen-recap, label-mismatch
   • Verified verdicts unlock return eligibility despite tracking lag

   AIOperations
6. March 19, 2026

   Carrier-aware shipment intercept (refuse_at_door + api_intercept)

   Customers asking to stop an already-shipped order now get the right answer based on what their carrier supports. UPS / FedEx / USPS get the API intercept path where available; long-tail carriers get a copy-paste-ready CS action card on the merchant dashboard.

   • refuse_at_door light path — log the intent, wait for scan-back
   • api_intercept path on supported aggregators with proper too_late handling
   • cs_fallback path with pre-baked subject + body for the carrier's portal
   • Refund policy snapshot at request time (refund_on_refuse / refund_on_scanback / no_refund)

   AIIntegration
7. March 12, 2026

   21 AI tools factored into per-tool files for maintainability

   The internal tool catalog grew large enough that the monolithic registry was hurting both us and merchants asking about specific tools. Each tool is now in its own file under app/ai/tools/ with a typed factory pattern. Easier to test, easier to extend, easier to reason about.

   • 21 AI tools in app/ai/tools/ — one file per tool
   • Typed factory pattern with per-tool ToolContext + shared deps
   • Test coverage per tool, regression suite per shipped capability

   Performance
8. March 5, 2026

   EU 14-day withdrawal floor + UK CRA 30-day defect floor

   Merchants serving EU and UK customers now get statutory floor enforcement out of the box. The AI honors the EU 14-day withdrawal right and the UK Consumer Rights Act 30-day defect floor regardless of the merchant's standard policy.

   • EU 14-day withdrawal right enforced on EU customers
   • UK CRA 30-day defect floor enforced on UK customers
   • Bespoke / made-to-order goods get the Art 16(c) exemption
   • Merchants set the country override; AI applies the matching floor automatically

   ComplianceAI
9. February 26, 2026

   Disclosure profiles (gift / luxury / pharmacy / modest_wear / fast_fashion)

   Same AI, different posture per merchant context. Gift recipients never see prices. Pharmacy patients never see medication names. Luxury claims require serial-engraving authentication. Modest-wear stores get extended return windows. Set the profile once; the AI adapts every conversation.

   • Gift profile redacts pricing and references the gift recipient
   • Luxury profile requires serial-engraving authentication on flagged SKUs
   • Pharmacy profile redacts medication names from logs (HIPAA-aware)
   • Modest-wear profile extends return windows and disables fit-photo asks
   • Fast-fashion profile shortens windows and prioritizes store credit

   AIComplianceVertical coverage
10. February 19, 2026

    Risk scoring 0-100 with 6 factors and auto-approval tiering

    Every return request gets a 0-100 risk score based on order age, account history, return reason, prior return rate, item value, and conversation signals. Low and medium-risk returns auto-approve. High-risk lands in your queue with the risk factors named.

    • Risk score 0-100 with 6 factors
    • Tier classification: low / medium / high with auto-approval policy
    • Risk factors named on every escalation ("new account, $400 order, 3rd return this month")
    • Stores typically auto-approve 70-85% of requests

    AIOperations
11. February 12, 2026

    50+ vertical-specific defect categories

    Cork taint on wine. Optical Rx mismatch. Tonewood crack on guitars. Gem-cert mismatch on jewelry. Sneaker authentication mismatch. Each defect category controls the photo flow, the routing department, and the SLA the customer hears. Generic returns apps refund all of these the same way; we don't.

    • 50+ defect categories tuned per vertical
    • Per-defect photo evidence shot list
    • Per-defect routing destination (warranty / atelier / luthier / pharmacist / vet / authentication / etc)
    • Per-defect SLA the customer hears truthfully

    AIVertical coverage
12. February 5, 2026

    AES-256-GCM encryption for Shopify offline access tokens

    Shopify offline access tokens are now AES-256-GCM encrypted at rest with PBKDF2-derived keys. Key rotation supported. The same token never appears in plain text in our database or logs.

    • AES-256-GCM encryption with PBKDF2-derived keys
    • Key rotation supported without merchant re-auth
    • Tokens never logged in plain text
    • Multi-strategy resolution at API call time (offline session ID, session search, encrypted fallback)

    SecurityCompliance

Want a sneak peek at what's next? Email support@eturns.app and we'll send you the live roadmap.