Organization administration · Organization updates

Updates the organization can see and schedule

Proposed interface concept Not released. A design for discussion, drawn in HTML and CSS; not a screenshot of working software.

What the provider has scheduled for the organization, what changes for users, the security severity, deferral within the provider’s policy (not for critical security fixes), release verification and update history. The figures shown are example data.

View full size Download image (WebP, 1600×1382) Security and transparency

Proposed interface concept Not released · example data · subject to change

Office UnboundAdminSearch users, groups, settings and logs/3MO

NANorthfield AccountingManaged by Ridgeline ITOverviewUsersGroupsDomainsMailStorageService healthSecurityRolesUpdates2MigrationAudit logSettingsBack to apps

AdminUpdates Updates for Northfield AccountingExample data

Notify me Full history

Managed byRIRidgeline ITYour provider installs updates

Your ringBroadAfter Pilot and Early, usually 7–10 days

Maintenance windowSaturdays 02:00–04:00US Central · emergency fixes any night

Deferral allowedUp to 7 daysTwice a quarter · 1 used · not for critical security fixes

Feature updatesNeed your approvalSecurity and maintenance apply on schedule

Scheduled for your organization4 updates

Update	Type	Rollout	Your window	Status
Sign-in service 3.2.1OU-SA-2026-019 · Sun 15 Nov, 01:00–01:30	Critical security	PilotEarlyBroad · you	Sun 15 Nov, 01:00–01:30	Deferral not available	Release notes
Mail service 1.14.3OU-SA-2026-018 · Sat 21 Nov, 02:00–04:00	Security · high	PilotEarlyBroad · you	Sat 21 Nov, 02:00–04:00	Scheduled · deferral possible	Request deferral
Document editor 2.9.0No advisory · Sat 28 Nov, 02:00–04:00	Feature	PilotEarlyBroad · you	Sat 28 Nov, 02:00–04:00	Needs your approval	Review
Calendar and contacts 1.8.0No advisory · Sat 5 Dec, 02:00–04:00	Maintenance	PilotEarlyBroad · you	Sat 5 Dec, 02:00–04:00	Scheduled	Release notes

Mail service 1.14.3Security · highRelease notes

What changes for people

Mail may pause for up to 10 minutes during the window. Phones and desktop apps reconnect on their own.
Nothing looks different. No settings change; no one needs to do anything.
Calendar invitations from outside senders are checked more strictly; malformed ones arrive as attachments.

Security

AdvisoryOU-SA-2026-018 SeverityHigh · CVSS 7.5 IssueCrafted invitation could crash mail processing ExploitedNot known to be exploited Affects1.12.0 – 1.14.2

Release verificationVerified

Signature verifiedOffice Unbound release key · 7F3A 91C2 … 0D4E
Checksums matchSHA-256 for all 14 images
SBOM availableSPDX · 412 componentsDownload
Built from source tagmail/v1.14.3
Rollback readySnapshot before install · automatic if checks fail

Approve or defer

Ridgeline IT will install this on Sat 21 Nov at 02:00 unless you ask for a deferral.

Install as scheduledSat 21 Nov, 02:00–04:00

Defer up to 7 daysNext window Sat 28 Nov · uses 1 of 2 this quarter

Deferral is not available for critical security fixes, such as Sign-in service 3.2.1. Requests close Fri 20 Nov, 18:00.

Confirm scheduleRequest deferral…

Update historyExport

Date	Update	Type	Result	Duration	Verified
7 Nov	Files and sync 4.3.2	Maintenance	Completed	12 min · no downtime	Signature · SBOM
31 Oct	Mail service 1.14.2	Security · medium	Completed after 7-day deferral	9 min	Signature · SBOM
31 Oct	Chat 2.1.0	Feature	Completed	6 min	Signature · SBOM
18 Oct	Sign-in service 3.2.0	Feature	Reapplied after fix	14 min	Signature · SBOM
17 Oct	Sign-in service 3.2.0	Feature	Rolled back automatically	Health check failed · 4 min	Signature · SBOM

OverviewUsersSecurityUpdatesMore

What the provider has scheduled for one organization, what changes for people, how each release is verified, and when the organization can defer.

Shape this before it is built

This screen is a proposal. Register interest to follow development and test early releases, or help build it.