Sep 30, 2026
White-label domains you can trust, and the partner rail
Partner custom domains now serve with automatic certificates and are probed from outside. A partner can also be set up in your product before they have their first customer.
New
Automatic TLS for partner domains: certificates are issued on demand, only for hosts that pass verification, and renewed automatically.
Outside-in domain probe: every custom domain is checked for DNS, then TLS, then a real HTTP request. Badges and readiness read that verdict (live, HTTP error, no certificate, no DNS, unreachable) rather than any claim, and certificate expiry is tracked.
Portal host vs product host: a partner domain serves either the partner portal or the vendor's product, and it can be repointed without losing verification.
Token-on-host proof: besides a DNS TXT record, a domain can be proven by serving a token on the host itself.
Brand icon: a brand now carries a square icon next to its logo, used anywhere a compact mark is needed.
Partner rail: partner.connected, partner.updated, and partner.disconnected events set a reselling partner up in your product before their first customer.
Improved
Each provisioning delivery stores the vendor's reply and shows it in the console, so you can see what your product did with an event.
A short outage during a vendor deploy no longer drops a partner event; delivery retries.
Oct 1: a customer who already has an account in your product is no longer asked to create another.