January 16, 2026

Features

• V2 Admin API for users and accounts — Superusers can now list and filter users and accounts through the new /api/v2/admin endpoints, with pagination and filters for name, email, account type, subscription plan, and subscription status. Detailed account views include Stripe customer information and full subscription history.
• V2 Admin API for template import and export — Administrators can now import and export Innovation Engine templates as JSON through the new admin endpoints. The same JSON shape works for both directions, so you can export a template, modify it, and re-import to clone or adapt it.
• Image upload endpoint in the V2 API — Background images can now be uploaded through the V2 API with synchronous virus scanning and an 8MB size limit, making it easier to integrate image workflows with external tools.
• Fixed item zoom for templates — Templates can now specify an explicit itemZoom value so items render at a consistent size regardless of canvas dimensions. Templates without the setting continue to use automatic zoom calculation, so existing templates are unaffected.
• Training Partner subscription plans — Two new sales-managed plans, Training Partner and Training Partner PSP, are now available for partner organizations. Both are annual Team plans with flexible seat counts and pricing handled outside the system.

Improvements

• Configurable CORS for API endpoints — Administrators can now enable and configure CORS for /api/* endpoints through a properties file or environment variables, making it easier to call the API from approved external origins. CORS remains disabled by default.
• Safer IP geolocation configuration — The IPStack geolocation integration now reads its API key from configuration rather than source code. When no key is set the service stays dormant, so deployments without geolocation configured run cleanly without errors.