10.27.2026

Today’s release includes the following updates:

portal sdk

• Make the patient portal match your brand! Plugins can now theme the whole portal, starting at the login page:
  • Your brand colors on buttons, links, the menu, and the page background.
  • Your font, with corners as rounded or square as you like.
  • Your word for the people you care for: patients, members, or clients.
  • Your own CSS on signed-in pages.
  • A different theme for each business line.

  Start with Theming the Patient Portal, or go straight to the PATIENT_PORTAL__GET_THEME_CONFIGURATION event and the PatientPortalTheme effect. Portals without a theme plugin keep their current look.

• New example plugin: Appointment Copay Collection lets patients pay an upcoming appointment’s copay with a saved card from the patient portal. It brings together:
  • A portal menu application that opens the copay page.
  • A SimpleAPI page that only the signed-in patient can reach.
  • The ChargeStoredCard effect, which records the payment as the copay on the appointment’s claim.
  • The REVENUE__STORED_CARD__CHARGE_RESPONSE event and a WebSocket, which show the patient the result as soon as the charge finishes.

data

• Security audit events sent to your SIEM now carry more detail. See the event format.
  • The instance that produced the event, and whether it’s production or non-production.
  • The names of the fields an update changed. Values are never included.
  • The plugin and handler behind a change.

bugfix

• Fixed an issue where Refill and Adjust from the chart’s Medications list prefilled the directions from the last prescription, missing a newer Change Medication. Both now prefill the medication’s current directions, the same as a Refill added from inside a note.
• Fixed the Forgot password link for staff created through the FHIR Practitioner API, so they can set their password for the first time on instances that don’t use SSO.
• Fixed an issue where Send Reset Password Link in Settings didn’t send the link for staff with no primary practice location set.
• The Audit Report in Settings names the admin who created a staff account or changed its permissions, rather than the account that was changed. See Audit Report export.