Changelog

Create scoped API keys from Settings → API keys, then call the REST API with Authorization: Bearer nl_…. Full reference at /docs/api.

Every activity now fans out to your webhook endpoints with an HMAC-SHA256 signature, exponential-backoff retries, a per-hook delivery log, and one-click replay.

PRD generation, meeting notes, and full data exports now run as background jobs with live progress so they don’t time out on large workspaces.

New /legal/security trust page, workspace data export as JSON, 30-day soft-delete for workspaces with undo, full audit log for OWNER/ADMIN roles.

Email verification, password reset, per-email login lockout (5/15min), constant-time bcrypt comparison, and audit log entries for every auth event.

Stripe checkout + billing portal, 14-day Pro trial for new workspaces, usage metering, and per-workspace monthly AI spend caps with 50/80/100% alerts.

Stride is now production-ready with Sentry error tracking, distributed rate limiting, legal pages, and a first-class deployment pipeline.