Managing a bustling self-hosted server usually involves two things: keeping geospatial data running smoothly, and trying to figure out which ghost in the machine revoked a colleague's writing permissions at 4:58 PM on a Friday. With Enterprise Edition 2026.10.1, the phantom has an identity. Our new Audit Logs feature brings complete accountability to your admin panel, tracking permission changes, user logins, and project moves in plain sight. Rounding out the update, we’ve also introduced native Webmaps, robust OGC API feeds, and vital security improvements to keep your GIS infrastructure shipshape.
Audit Logs
Managing multi-user Enterprise environments gets messy fast. Until now, self-hosted Mergin Maps admins lacked a central place to track workspace moves, permission tweaks, and logins. The new Audit Logs page solves this, giving administrators complete visibility to troubleshoot faster and strengthen server security.
How it Works
The main product of the new audit logs feature is a page in the admin panel with a detailed view on who changed what on the server and when. Whenever an incident happens that requires well-informed troubleshooting by the administrator, they can open the page to acquire that information.
A typical example is when an administrator receives a support ticket from one of the users that their role of writer was changed to reader in a project. The administrator can open the audit logs page, filter by the project.member.updated event and find the user whose role changed. By pressing on the entry, they can also see the user who performed the change, and act accordingly. In another case, the administrator is contacted by a user about trouble logging into their account. From the audit logs page, the admin can filter by the user who issued the ticket, see if indeed there is trouble with the login and the reason why.
.png)
Audit logs record changes across three areas:
- Projects, and more specifically creation, settings changes, deletion and restore, members, transfers, access requests, new versions, and map sharing and OGC API links.
- Users, including logins, password changes and resets, account changes, locked accounts and admin panel access.
- Workspaces, such as creation, settings changes, deletion and restore, members and invitations.
Browsing and downloading data is not logged. The full list of supported changes can be found in the documentation.
It is also possible to filter entries by date, event type, who performed the action, the affected user, workspace or project.
Availability
The new Audit logs feature is included at no extra cost for self-hosted Mergin Maps Enterprise edition servers. The Audit logs contain all the logged history of their server from the moment the server is updated and the admins can adjust the retention period. More info on that can be found in the documentation. Logs are stored in the server’s PostgreSQL database, in a separate schema. For other storage options, contact sales.
Other updates
Web maps updates
We consider web maps to be a core part of Mergin Maps, and we are excited to introduce them in the Enterprise Edition! With web maps enabled, you now have access to features such as:
- Share via URL: Anyone with the link can view the map, even without a Mergin Maps account.
- Embedding: You can incorporate your maps in other websites or apps, using HTML embedding.
- Web map applications: You can build custom apps with JavaScript.
All those features come in a redesigned interface, which also includes a fullscreen map with QGIS map themes, layer tree, custom basemaps and auto-refresh.
Find out more about Web maps.
OGC API
Enterprise Edition now supports OGC API. Once you enable it, you can serve your project data directly to external GIS software, with no extra server hosting or setup needed. Both WMS and WFS services are read-only, so your original data stays safe while it is shared.
Find out more about OGC API.
Other improvements
Other improvements include:
- Security enhancements: Upgraded packages to fix security audit errors, preventing uploading invalid paths to the server, and more.
- Other fixes and enhancements: Allowed resending workspace invitations, added “Last Signed In” information to the Members table in the dashboard, and more.
Find out more about all the changes in our release note.
Next steps
If you’re ready to bring order to your server and put Audit Logs to work, it’s time to update. Enterprise Edition 2026.10.1 is available now, complete with early-access Webmap sharing, OGC API endpoints, and fresh Docker Hub images (give our support team a shout if you need access).
Head over to our 2026.10.x Migration Guide for everything you need to know about upgrading your self-hosted instance without the headache.