Changelog

What's new in Backstop.

Backstop 1.0 is live — everything below ships today. New releases land here as they go out; ping us if you want a heads-up.

  1. Jun 18, 2026

    v1.1.0

    Themeable portal, invoices & tighter offers

    • designPortal themes. Set your hosted portal, cancel, and update-card pages to light, dark, or auto (follows each customer's device) under Settings → Email branding. The Stripe card form matches the theme too, so dark mode is dark end-to-end — no white card box on a black page.
    • featureInvoices in the portal. Customers can now see their full invoice and receipt history right inside the hosted self-service portal — fewer “can you re-send my receipt?” tickets.
    • featureCustom portal domains. Serve the whole customer experience — cancel flow, self-service portal, and update-card page — from your own subdomain like portal.yourcompany.com instead of ours. Add it under Settings → Portal domain, confirm ownership with a TXT record, and TLS is provisioned and auto-renewed for you. Available on Pro.
    • securityOffer farming, shut down. Save-offer coupons are now single-use and gated by a per-customer cooldown, so discount-shoppers can't cancel-and-save every month to hold a permanent discount. Set the cooldown window in Settings → Offer policies.
    • infraDeliverability tools. A live DMARC check and a missing-DMARC warning in your send-domain settings, plus an admin send-diagnostic that surfaces silently-rejected emails — so a misconfigured sending domain shows up before it quietly eats your recovery emails.
    • fixReliability. The hosted card-update page now recovers gracefully from a dropped network request instead of hanging on “Loading…”, and a customer-tag save permission error is fixed.

  2. Jun 8, 2026

    v1.0.0

    Backstop 1.0 — launch

    • featureRecovery. Decline-code-aware smart retries — soft declines get the +3 / +5 / +7-day cadence, hard codes get one polite retry, all capped at 6 attempts in 30 days inside Visa's safe-harbor. A 4-touch dunning sequence sends from your own verified domain, and every email links to a hosted one-tap card-update page that auto-closes the moment the invoice clears. Tune the cadence per workspace; a quiet-hours clamp and an 18-hour rate-limit keep a customer with three failing subscriptions from getting three emails before breakfast.
    • featureCancel flows. A visual builder — survey, save stories, offer, confirm — sits behind your “Manage subscription” button, with a one-tap cancel exit from every step — easy-cancel (ROSCA, state auto-renewal laws, and the EU cancel button) by default. Make a real offer: discount, pause, downgrade, gift months, trial extension, annual upsell, or book-a-call — chained as multi-step fallbacks, branched by the survey reason, and gated to a customer segment. A/B test individual offer arms and whole flow versions, brand the page with custom CSS, and serve it from your own domain.
    • featureWin-back. A cancel doesn't have to be the last word. A couple weeks out, the customer gets a one-tap link that drops them straight back onto their old plan — their card is still on file, so there's nothing to re-enter and no signup to redo. The copy adapts to why they left, a second touch follows, and every reactivation is attributed in your dashboard.
    • featureCustomer touchpoints. A hosted self-service portal lets customers pause, cancel, undo a cancel, update their card, and switch plans. A drop-in modal SDK runs the cancel flow, the portal, and a failed-payment wall on the merchant's own domain — the customer never leaves their site. Trial-end reminders, a weekly operator digest, one-click unsubscribe, and an in-app feedback widget round out the lifecycle.
    • featureAnalytics you can act on. Recovered and lost MRR, recovery and save rates, decline mix, a cancel funnel, top cancel reasons, and a Quick-Wins panel ranked by dollars at stake. Go deeper with per-customer health scores and history, named segments, cohort retention, a retry-timing heatmap, and a searchable feedback inbox.
    • securityBuilt to be trusted. A scoped, revocable Stripe Connect grant — encrypted at rest, never used to move money to us, one click to revoke. Tenants are isolated by Postgres row-level security; embeds are HMAC-signed and rate-limited; hard bounces and complaints suppress the address automatically. Plus an audit log, a public status page, GDPR data export, and one-click account deletion.
    • featureBuild on it. A read REST API and HMAC-signed outbound webhooks fire for recovery, cancel, trial, reactivation, and win-back events — so Backstop drops into whatever you already run.
    • featureOne price. Flat $79/mo or $759/yr, a 14-day Pro trial, and a free tier to try the recovery loop. No revenue share, ever.