ROADMAP

What we're building next.

Public + live. We update this as work ships. If something's missing that you need, email [email protected] — we read every one + it actually shifts what we prioritize.

SHIPPED
Multi-user signup, GitHub install flow, trust ladder, /uptime, /security. See changelog →
IN FLIGHT
Stripe billing, transactional email, password reset, demo seed data for new Drives, SOC 2 controls.
PLANNED
RBAC for teams, Manifest Drive, Tread Drive, EU data residency, SSO (SAML/OIDC), bug bounty.

Now (this quarter)

Stripe billingSelf-service Checkout for the per-exec + full-team tiers. BILLING_DISABLED env flag flips when the webhook + plan-tier wiring lands.
Transactional emailWelcome + password reset + weekly digest via Resend. Email helper already shipped in stub mode; just needs the API key + verified domain.
Password reset flowToken table + /reset?token=… handler. Forgot-password form + reset email already in place; just needs the token-validation route.
Email verificationGate first-login on verified email. Schema column already shipped; needs the verify-link handler.
SOC 2 Type IIAudit kickoff Q3. Controls being implemented in parallel. Status letter on request →
AES-GCM cred encryptionIntegration credentials encrypted at rest with INTEGRATIONS_ENC_KEY. Today they're stored as JSON; rolling out per-row encryption next.
Demo seed polishRealistic populated data for Redline / Gauge / Ignition Drives so demo walkthroughs land more cleanly.

Next (next quarter)

RBAC for teamsSix default roles (admin, operator, AE, recruiter, accounting, employee). Today every authenticated user is admin within their tenant.
SSO (SAML/OIDC)Custom Enterprise plans. Okta, Azure AD, Google Workspace.
Manifest DriveBulk eCommerce content (Shopify/Woo). Hundreds of SKUs at once. Tier 2.
Tread DriveProduct-led growth — onboarding flows, in-product nudges, activation events.
EU data residencyMulti-region for tenants on custom Enterprise plans. EU-West first.

Later (someday-but-not-yet)

Bug bounty programFormalized public program with payouts. Post SOC 2 audit kickoff.
Mobile MerkavaNative iOS app for the operator on-the-go. Web works on mobile today; native is a future bet.
Drive marketplace APIThird-party developers ship specialists into the Garage. 70/30 placement commission. Platform Contract is published; SDK + docs are next.
More external DrivesSquarespace, Framer, Wix, WordPress for marketing-site Drives. More CMS surfaces = more places GROWTH can ship.

Won't do (intentionally)

Want something on this list moved up?

Email [email protected] with what you need + when. Customer pull is the strongest signal we get.

Run audit
QUESTIONS

Roadmap, plainly answered.

How often is this roadmap updated?

Continuously. This page is hand-maintained alongside shipping work — when something moves from "Now" to "Shipped" it gets logged to /resources/changelog the same day. There's no quarterly newsletter or annual roadmap reveal; the page you're reading is the live source.

Can I influence what gets prioritized?

Yes — that's the most reliable lever. Email [email protected] with what you need and when you need it. Customer pull is the strongest signal we read. Items move up the list when paying operators ask for them; theoretical demand moves nothing.

What do "Now", "Next", and "Later" actually mean?

Now = active work this quarter, expected to ship in weeks. Next = scoped and committed, scheduled for the following quarter. Later = on the list, not scheduled — usually because it's gated on Now/Next finishing first. Won't-do items are explicit on this page so you don't have to guess.

If I sign up now, will I get features that haven't shipped yet?

Yes. Pricing is per AI executive hired, not per feature gate. Anything on this roadmap ships into your existing tenant when it lands — no upgrade tier, no migration, no re-onboarding. Stripe billing, transactional email, RBAC, SSO and the rest become available on your account the day they ship.

What's already shipped versus promised?

Shipped capabilities are listed in the green SHIPPED tile at the top of this page and on /resources/changelog with dates. Anything marked Now / Next / Later is unshipped — we don't sell what isn't running. The system status board shows what's live in production right now.

Is there an SLA on roadmap items?

No formal SLA on unshipped work. Production uptime has an SLA (see /security and /uptime); roadmap dates are good-faith estimates that move with reality. If a Now-quarter item slips, it gets called out in the next changelog entry — we don't quietly delete missed dates.

Why isn't [thing] on the roadmap?

Three possibilities: (1) it's already shipped — check /resources/changelog and /garage; (2) it's intentionally on "Won't do" — look at the bottom of this page; (3) we haven't heard the demand yet — email [email protected] and it gets logged. The roadmap reflects what customers ask for, not what we imagine they want.

Related: Changelog · System status · Security