We list known limitations openly. The-Y CRM is in an early Alpha — things change. Unfixed security issues are deliberately not listed here (see note at the bottom).
As of: 2026-09-02 · Phase: Alpha
| Item | Impact | Status / workaround |
|---|---|---|
| Founder purchase | Public Founder purchase active: €10.00/month (total incl. any VAT), clean B2B checkout with company name, VAT ID and binding consent | ✅ Active (Alpha) · businesses only (B2B) |
| Founder scope | Defined (price, scope, reactivation, voluntary 14-day return right, hosting) — Terms §6 | ✅ Released in v1.1.1; license key sent by email right away |
| Terms · DPA · Privacy · In-app terms | Released version v1.1.1 with immutable snapshot + SHA-256 in the Legal Archive | ✅ v1.1.1 released (2026-09-02) |
| Backup guarantee | Automatic backups run, but during the Alpha there is no formal recovery commitment | Also back up yourself via snapshot/CSV; binding backup policy from Beta (DPA Annex 3) |
| Item | Impact | Status / workaround |
|---|---|---|
| Security log without search/filter/export/pagination | Limited traceability | Expansion planned (Beta) |
| API keys without scopes/expiry/rotation | Coarser access control | Planned (Beta) |
| SMS send-only, no receiving | Incoming SMS don't (yet) land in the inbox | Inbound SMS planned (Beta) |
| Meta channels (WhatsApp/Messenger/Instagram) | A real live round-trip needs the customer's valid credentials | Guided setup |
| Registration/contact form | Not fully accessible throughout (labels/required fields) | Improvement planned |
| Item | Status |
|---|---|
| Guides for 2FA/recovery, security log, API keys/webhooks, export/deletion & backup are added. Open: dedicated detail guides for calendar/booking, tasks and CSAT/SLA | Docs keep being aligned with the feature set |
Found a bug? Report it directly in the app via the feedback widget or at office@the-y.at. For security reasons we do not list unfixed security vulnerabilities here — only after they are fixed, in the Release Notes.