diff --git a/src/content/docs/changelog/index.mdx b/src/content/docs/changelog/index.mdx
index 803bf9c9..9dee55a2 100644
--- a/src/content/docs/changelog/index.mdx
+++ b/src/content/docs/changelog/index.mdx
@@ -13,6 +13,7 @@ Notable changes to the kit, newest first.
 
 ## 2026-11-03
 
+- **Dashboard: the overview welcomes the tenant by its name (fix).** The first-run card on a tenant with no subscription read "Welcome to" followed by the tenant identifier (for example `qpb2edshbj`), and the header caption showed the same identifier, because both came from the token's `tenant` claim. Both now use the tenant name from `GET /api/v1/tenants/me/status`, which the overview already loads for its "Valid for" card, and fall back to the identifier while that call is loading or has failed. No backend change. See [Tenant dashboard](/docs/frontend/dashboard/#page-inventory) and [#1437](https://github.com/fullstackhero/dotnet-starter-kit/pull/1437).
 - **Both apps: non-ASCII claims in the access token now render correctly (fix).** `decodeJwt` decoded the token payload with a bare `atob`, which returns one character per byte, while the payload is UTF-8. A display name like "Comitê de Ética" therefore showed as "Comitê de Ética" in the user menu and the overview greeting, even though the token and the database were correct. The payload bytes are now decoded as UTF-8 in both the dashboard and the admin console. No configuration change. See PR [#1439](https://github.com/fullstackhero/dotnet-starter-kit/pull/1439).
 
 ## 2026-10-09
diff --git a/src/content/docs/frontend/dashboard.mdx b/src/content/docs/frontend/dashboard.mdx
index 7c744244..0cd4d818 100644
--- a/src/content/docs/frontend/dashboard.mdx
+++ b/src/content/docs/frontend/dashboard.mdx
@@ -1,6 +1,6 @@
 ---
 title: Tenant dashboard
-lastUpdated: 2026-09-25
+lastUpdated: 2026-10-14
 description: The end-user-facing React + Vite app at clients/dashboard - catalog, chat, files, tickets, invoices, identity admin, plus real-time SignalR + SSE feeds.
 sidebar:
   label: Tenant dashboard
@@ -57,6 +57,7 @@ Plus shared chrome (sidebar, top bar, notification bell, command palette) in `cl
 
 A few notes:
 
+- **Overview** names the tenant (first-run "Welcome to ..." card and the header caption) from `GET /api/v1/tenants/me/status`, not from the token's `tenant` claim, which only carries the identifier. While that call is loading or has failed, the identifier is shown instead.
 - **Settings → API keys** is an honest "coming soon" placeholder, not a hidden 404.
 - **System → Trash** is the cross-module recycle bin (products, brands, categories, tickets, files). Its tabs - and the nav entry itself - are permission-gated client-side to mirror the server's restore/view-trash permissions, so users never click into a guaranteed 403.
 - The dashboard has no per-route `RouteGuard` like admin; auth is enforced by `ProtectedRoute`, and permission checks gate navigation entries + in-page actions.