Our latest release introduces security improvements, enhanced API quote creation rules, and several automation features, including copying User Defined vehicle variants, automated insurance rate updates, and automatic fuel card creation during fuel imports. These enhancements strengthen platform security, improve consistency, and reduce manual administration across key workflows.

Please note: Due to the Melbourne Cup public holiday in Victoria, deployment will occur on Wednesday, 4 November 2026.

🛡️ Security Update: Recently Disclosed PHP Vulnerabilities

Our engineering and security teams have reviewed the Catch-e platform against the recently disclosed PHP vulnerabilities and have taken the following steps:

• The Catch-e API and Driver Portal have been updated to a patched PHP release, and the affected PHP functionality has been disabled.

• Containerised services have been rebuilt on the latest patched PHP releases.

• The Catch-e application is assessed as not affected by one of the vulnerabilities. It is also protected by our web application firewall, which includes AWS-managed rules that detect and block attempts to exploit these vulnerabilities.

• Firewall protections are updated automatically as AWS releases new detections.

We’ll continue to monitor these vulnerabilities and update our protections as part of our ongoing security program. Thank you for your patience and continued trust while we completed this work. If you have any questions, please contact Catch-e Support.

🔌 createQuote: Contract Type Inclusion Rules

The createQuote API now applies the Contract Type’s Inclusion settings when a quote is created. This also covers simulate and simulate-and-compare. Quotes created through the API now match the Contract Type’s configuration, and callers no longer need to know which Inclusions are preselected.

• Inclusions the Contract Type marks as unavailable are rejected, however the request names them.

• Preselected Inclusions with one applicable plan are added automatically when the request doesn’t mention them.

• A Preselected Inclusion with more than one applicable plan must be given a plan or excluded, or the quote isn’t created.

• Inclusions excluded for the client or vehicle are rejected, however they’re named and whether or not they’re marked as included.

Additional Details

• A request that already includes or excludes a Preselected Inclusion is now honoured as sent. Previously Catch-e overrode it.

• A Preselected Inclusion that’s excluded for the client or vehicle is no longer added and no longer causes the whole request to fail.

• Suspended Inclusions and inactive plan versions are never added automatically.

• The inclusionCodeNotAllowedForContractType error key has been retired.

• The request and response formats are unchanged. Copying an existing quote isn’t affected.

✨ Automated Insurance Rates updates

Users can now update comprehensive insurance rates and refresh contract premiums and payment schedules to match, using a standard upload and Scheduler job process available to every client.

This is available when:

• Catch-e has activated the insurance update jobs for your site. They are created for every site as restricted jobs and stay inactive until then, so contact Catch-e Support to have them activated.

Additional Details

• Rate files now include the insurer’s supplier code. If any row can’t be matched, nothing loads and the Scheduler screen shows why.

• After a successful rate load, a draft of suggested new amounts for each contract is emailed automatically for you to check and upload.

• The confirmed amounts are applied overnight with a full audit trail. If the upload has a problem, nothing changes and the reason is shown.

• Sites already running these processes are unchanged.

✨ Automatic fuel card creation during fuel import

Fleet operators can now have Catch-e create a missing fuel card automatically when an imported transaction’s registration identifies exactly one suitable contract, instead of creating each card by hand from ‘Failed Card’ transactions.

This is available when:

• The global control feature_auto_create_card_on_fuel_import_flag is switched on for your site. It is off by default. Switch it on in Global Controls if you have access, or contact Catch-e Support.

Additional Details

• A card is created only where the registration matches exactly one active contract whose Contract Type has a Fuel budget on its Expenses-Approvals tab. Anything less certain stays at ‘Failed Card’ for you to fix as today.

• Created cards appear on the Cards screen with a note recording when and how they were created.

• It works when importing a file, running Check, and on scheduled imports.

• Each transaction still goes through the usual validation checks before it can be posted.

✨ Copy a User Defined Variant

Users can now create a new vehicle variant by copying an existing User Defined variant. This makes it quick to set up each new model year as its own variant, without overwriting the previous one.

This is available when:

• The variant_copy_enabled_flag control is switched on. It’s off by default.

• The variant on display is User Defined and in Display mode.

• The user has access to Edit on the Variant Detail tab.

Additional Details

• Copy opens a new, unsaved variant with the original’s details filled in. List prices start at 0.00, and Variant Code Previous and Next are blank.

• The Variant Code must be changed before saving. A copy can’t keep the original’s code.

• Linked records such as the profile, equipment, discounts, rebates, bonuses and photos aren’t copied.

• Status is copied as it stands, so copying an Active variant gives an Active copy.

• Cancel returns you to the original variant, which is never changed.