09.30.2026

Today’s release includes the following updates:

data

  • Added an index to improve searching observations, such as vital signs and lab results, by their code.

portal

  • When Canvas lets a patient know about a new message, lab result, or statement, the link in that email or text message now logs the patient in to the patient portal right away and opens the new item. No username or password is needed.
    • These notifications go only to an email address or phone number the patient has verified and agreed to be contacted at.
    • Message and lab result notifications go out by email or text message. Statement notifications go out by email.
    • Patients can still log in to the portal with their username and password at any time.
    • Each link works once and, by default, stays valid for 30 days.

sdk

  • Plugins can now respond the moment a patient signs in to the patient portal, with the new PATIENT_PORTAL__POST_LOGIN event.
    • For example, a plugin can open a modal over the page the patient lands on to collect a consent, show a tour, or display an alert.
    • The event tells the plugin how the patient signed in: with a username and password, with the sign-in link in a notification, or by registering.
    • Refreshing the page or returning with a remembered session does not count as a new sign-in.
  • Plugins can now read the payment receipts Canvas generates, including a link to the receipt PDF, for example to show a patient their receipts in the patient portal.
  • Plugins that declare several handlers in the same file now load faster after an install, restart, or redeploy.
    • Handlers in the same file now share that file’s module-level variables, rather than each handler getting its own copy.