Merge branch 'mendix:development' into development

Author: pieroguerrero-mendix

content/en/docs/control-center/company/dashboard.md

@@ -19,7 +19,7 @@ The Control Center dashboard gives you an overview of various activities for you
 
 These are some examples of what you can find on the dashboard:
 
-* <a id="contract-info"></a> **Company Information** – displays all contracts associated with the company, including the customer name, contract status, expiry date, and remaining time until expiry. For more details, refer to [Contract Management](/developerportal/deploy/contract-management/)
+* <a id="contract-info"></a> **Company Information** – displays all contracts associated with the company, including the customer name, contract status, expiry date, and remaining time until expiry. For more details, refer to [Contract Management](/developerportal/deploy/subscription-management/)
 * **Apps Created** – you can filter these [apps](/control-center/apps/) by date
 * **Mendix Versions** – describes which Studio Pro/Mendix versions your internal and external [members](/control-center/members/) are using for apps, which is especially important as the development of apps on outdated or [non-MTS/LTS versions](/releasenotes/studio-pro/lts-mts/) can lead to security issues
 * **Certification Level** – presents the number of members per [Mendix certification](https://academy.mendix.com/link/certification)

content/en/docs/control-center/security/private-connectivity/configure-private-connectivity.md

@@ -346,6 +346,8 @@ Mendix Cloud Private Connectivity currently supports exposing physical [subnet r
 * Multiple IP ranges separated by a comma, such as `192.0.2.0/24,198.51.100.0/24`
 * A single IP address, such as `10.100.0.5/32`
 
+Do not expose broad IP ranges such as `0.0.0.0/0` and `::/0`. Mendix recommends only exposing the IP range of the target service or database.
+
 #### Exposing Subnet Routes on a Windows Server {#private-connectivity-resources-expose-routes-windows}
 
 To expose subnet routes for an agent that is already running, run the following script on the machine where the agent is installed.    
@@ -477,3 +479,10 @@ The Mendix internal systems operate on the following subnets:
 
 As such, when you expose a subnet or a single IP address, it must not conflict with our private IP ranges.     
 If you absolutely must use the subnets on which Mendix operates, please configure [Network address translation (NAT)](https://en.wikipedia.org/wiki/Network_address_translation) on your infrastructure.
+
+### Restricted IP Ranges
+
+To maintain robust security, network access to services and databases must be strictly controlled. As such, do not expose broad IP ranges such as:
+
+* `0.0.0.0/0` for IPv4
+* `::/0` for IPv6

content/en/docs/deployment/general/populate-user-type.md

@@ -1,8 +1,8 @@
 ---
-title: "Contract Management"
-url: /developerportal/deploy/contract-management/
-weight: 20
-description: "Understand your Mendix subscription lifecycle, contract statuses, renewal timelines, and critical actions to ensure continuous service and prevent data loss."
+title: "Subscription Management"
+url: /developerportal/deploy/subscription-management/
+weight: 10
+description: "Understand your Mendix subscription lifecycle, subscription statuses, renewal timelines, and critical actions to ensure continuous service and prevent data loss."
 ---
 
 ## Introduction
@@ -16,7 +16,7 @@ This document provides detailed information about the status of your Mendix appl
 Your Mendix subscription is categorized into three main statuses: Active, Expiring, and Expired, based on your contract's expiry date.
 
 | Account Status | Timeline | Impact |
-|---------------|----------|--------------------|
+| --------------- | ---------- | -------------------- |
 | **Active (Green)** | Until 30 days before contract expiry | Your account is fully active, with all services available and application runtimes functioning normally. This is the optimal state for uninterrupted Mendix usage. |
 | **Expiring (Orange)** | From 30 days before contract expiry until contract end date | All services continue to function normally. You receive email reminders, notifications, and banner alerts on Mendix Platform about your upcoming renewal. |
 | **Expired (Red)** | From the day after contract expiry up to 60 days | Your account and applications are downgraded to **Unlicensed** mode. You can manually restart apps, but they will automatically shut down after 2-4 hours and are limited to 6 concurrent users. Platform features are not disabled.|
@@ -58,7 +58,7 @@ While Mendix services continue to function normally, this is the critical period
 
 #### 7 Days Before Contract Expiry{#7-days-before-contract-expiry}
 
-* **Final impact emails** – You receive final detailed explanations about the impact of non-renewal
+* **Final impact emails** – You receive final, detailed explanations about the impact of non-renewal
 * **Data offboarding instructions** – Administrators and Technical Contacts receive tailored instructions for offboarding application data
 
 {{% alert color="warning" %}}
@@ -68,7 +68,7 @@ This is your final opportunity to renew your contract and avoid service disrupti
 #### Pre-Expiry Timeline Summary{#pre-expiry-timeline-summary}
 
 | **Days Before Expiry** | **Key Actions** | **Status** |
-|------------------------|-----------------|------------|
+| ------------------------ | ----------------- | ------------ |
 | **90 days** | Contact Account Team for renewal | Active |
 | **30 days** | Finalize renewal discussions | Expiring |
 | **15 days** | Download data if not renewing | Expiring |
@@ -81,7 +81,7 @@ If your contract is not renewed by the expiry date, your account transitions to
 #### 1 Day After Contract Expiry{#1-day-after-contract-expiry}
 
 * **Mendix Platform banner** – All Mendix Platform users see a banner clearly stating that the contract has expired
-* **Restricted access** –  Account access is downgraded and apps are transitioned to **Unlicensed** mode
+* **Restricted access** –  Account access is downgraded, and apps are transitioned to **Unlicensed** mode
 * **Deployment restrictions** – Application data is available for download for the next 60 days
 
 #### 60 Days After Contract Expiry{#60-days-after-contract-expiry}
@@ -95,7 +95,7 @@ Application data deletion is irreversible. Make sure to download all necessary a
 #### Post-Expiry Timeline Summary{#post-expiry-timeline-summary}
 
 | **Days After Expiry** | **Key Actions** | **Status** |
-|------------------------|-----------------|------------|
+| ------------------------ | ----------------- | ------------ |
 | **0 days (Expired)** | Contract expires | Expired |
 | **+1 day** | Limited access | Expired |
 | **+60 days** | Data permanently deleted | Expired |