- Shipped
- November 12, 2026 at 6:49 PM UTC
- Author
- Kamo
- Commit
- aada06d
The SSN row sits in the Contact card with the other identity fields. Everyone sees the last four. A member with the View Full SSN right can show the rest after typing their password again (shown for a minute, hidden when the window loses focus, never kept anywhere); anyone who may edit the lead can REPLACE the number without being able to read it. It saves in its own request, so it is never in the contact card's draft or the edit-lock heartbeat. History rows for the number show the last four, with the same password-gated reveal for holders. Also: write-only field on Create Lead, an 'ssn' field for import mapping (canvas samples of an SSN field show only the last four), reveal proxy routes that log and cache nothing, and the View Full SSN right mirrored (plus the picture-frames right Java already had).