HighLevel Updates: September 2026 Roundup

September 2026 is young, and the first two releases are both housekeeping with teeth. One adds two required fields to toll-free verification ahead of a hard carrier cutoff. The other lets sub-accounts on SaaS v2 delete a saved card instead of leaving it on file forever.

This page covers September 1 onward and is refreshed every week as new releases publish. The heavy late-August wave is documented in full in the August roundup.

Toll-free verification now asks for your policy links

Toll-free verification picked up two new required fields on September 2. Step 3, the messaging use case step, now asks for your Privacy Policy URL and your Terms and Conditions URL. Both sit directly below the opt-in workflow images. Neither is optional, and the form will not submit without them.

• The deadline is fixed. From September 15, 2026 carriers reject any new toll-free verification that arrives without both links.
• Steps 1 and 2 are unchanged. Only the messaging use case step gained fields.
• Existing verified numbers are out of scope. Nothing to update and no re-verification needed.

Most of the work here happens outside HighLevel. If the funnel or site attached to the number has no published privacy policy and terms pages, build them before you submit. Anyone running SMS follow-up out of the CRM should check this now rather than at submission time, because a rejection costs days. If toll-free capacity is already a bottleneck, WhatsApp is the channel that has taken most of the platform's messaging investment this year.

Sub-accounts can delete a saved card

Sub-accounts on the SaaS v2 system can now delete a saved payment method directly. Expired cards, replaced cards and cards a client asked you to remove no longer sit on file indefinitely. Before September 1 removing one was not a self-serve action.

For agencies reselling under the model in our white-label guide, this removes a small but recurring support ticket and hands card hygiene back to the client. Plan and billing differences are covered in the pricing guide.

Still landing from late August

The last week of August was heavy and several of those releases only reached most accounts in the first days of September. Certificate AI beta, per-workflow email sender domains, targeted announcement banners, up to three meeting durations on a single calendar, and the move to portfolio-level WhatsApp messaging limits all shipped between August 24 and 29. Each one is documented in full in the August 2026 roundup.

What to watch this month

September 15 is the date to plan around. Beyond that, August set the direction: more model choice inside the workflow AI agent, more of the client portal build-out, and steady work on calendars. This page is refreshed every week as releases publish, and the weekly roundup tracks them as they land.

Frequently Asked Questions