Backup and Restore

The Backup tab is the canonical surface for all backup, restore, and data protection operations.

Creating a Backup

Manual Backup

1. Navigate to the Backup tab
2. Click Create backup now
3. A full manifest-based ZIP restore point is created
4. The backup appears in the Saved Backups list

Automatic Backups

Configure scheduled backups in the Automatic Backups section:

Setting	Description
Enable/Disable	Toggle automatic backups on or off
Frequency	How often to run backups
Time of Day	When to run (UTC)
Retention	How many recent backups to keep

Storage targets:

• Local storage — Backups saved to a configured path on the server
• pCloud — Cloud storage (coming soon)

Click Run automatic backup now to trigger the pipeline immediately using current settings.

Restoring from a Backup

From a File

1. Click Restore from file
2. Select a local ZIP backup file
3. Review the Preview — shows what the backup contains with counts and scope summary
4. Check the confirmation checkbox
5. (Optional) Enable URL rewrite if restoring to a different site
6. Click Apply to restore

From Saved Backups

1. Scroll to the Saved Backups list
2. Find the backup you want (shows file size and date)
3. Click Restore next to the backup

Scoped Backups

In addition to full backups, you can export and import specific sections:

Scope	What's included	Typical use
Master export	All settings, all tabs, all modules, all user data, all roles	Full-site transfer or full-fidelity snapshot
Scoped export	A single tab's data (General, Users, Integrations, System / API, etc.)	Migrate just the CRM setup, or just the integration toggles
Per-module export	One module's data only	Move Notes or Estimates data between sites without dragging the rest
Single user export	One user card with all fields, role assignments, per-user notes and estimates	Onboard a single user onto another site; clone a template user

Scoped imports remap data to the target site automatically and only touch the scope you imported. Other tabs, modules, and users on the destination site are untouched.

Related

• Licensing — the Product License that post-restore re-check validates
• Modules — module data is included in full backups; per-module export is available for portability

Cross-Site Restore

When restoring a backup from a different site:

1. Enable the URL rewrite option during restore
2. SyteOps maps URLs from the source site to the current site — values that contained the source site URL (webhook endpoints, dashboard links, documentation URLs) are updated to match the destination
3. Profile pictures remain as links (not transferred as files) — if they're hosted externally they still work; if they were uploaded to the source site's media library they need to be re-uploaded on the destination
4. Secrets (API keys, tokens, signing keys) are not included in the backup — after restore, open each integration card on the destination site and re-enter the credentials

Before a cross-site restore

• Confirm the destination site has a valid SyteOps license (cross-site restore does not move the license — see "Post-Restore License Re-Check" below).
• If your automations fire on user or CRM changes, consider pausing the relevant FlowMattic workflows during restore so the mass of change events doesn't trigger downstream side effects.
• Take a safety backup of the destination site first (Backup → Create backup now) so you have a known rollback point.

Post-Restore License Re-Check

After any full restore, SyteOps locks certain operations until the Product License is re-validated. This prevents a restored backup from bringing in stale license state that no longer matches your current site.

1. A banner appears on the Admin tab prompting you to re-check the license.
2. Open Admin → Product License → Recheck.
3. On success, the lock releases and encrypted-package operations (module updates, workflow-template imports) resume.

This is expected behavior — the re-check completes in a few seconds and only needs to happen once per restore.

Backup Contents

Full backups include:

• All plugin settings and module data
• Licensing records (issued connections + blacklist)
• Variable set tab configurations
• User data and role assignments

Full backups exclude secrets (API keys, tokens) for security.

Audit Log

The Backup Audit Log records all backup and restore operations:

• View recent exports and restores
• Filter by type (exports, restores, automatic)
• Tracks up to 50 entries

Security

• All backup operations require SyteOps Admin capability
• Operations use a unified config nonce for CSRF protection
• Post-restore lock requires license re-check
• File validation ensures backup integrity (manifest schema, checksums, path traversal prevention)