Backups

Your data's insurance policy: database backups — manual or on an automatic schedule — keeping the last several copies, with download, restore, and cloud storage connection (Dropbox/Google Drive/WebDAV). The worst working day you can have is one where you don't have a backup.

Connecting Google Drive and Dropbox is now one-click: pick the service, save, press Connect and grant access on the page that opens — no keys or technical setup (backups go to a dedicated Nexto Backup folder). The Advanced section remains if you prefer your own app.

Fields

Notes

• Warning: restoring replaces all current data with the selected copy and cannot be undone; take a fresh backup first.
• Keep a copy of the backup file somewhere off the server too (download or a cloud destination).

Backup encryption and raw data

Backup files (since September 2026) are created encrypted (XChaCha20-Poly1305); their content cannot be read without this server's key, so a file that ends up in Dropbox/Google Drive, an email or a laptop does not expose customer data. As before, restoring is only possible on this same installation (the file is signed). Older unencrypted files can still be restored. The key is never stored; it is derived from the application key — for self-hosted installations keep APP_KEY somewhere safe as well.

Your data stays unlocked: the “Raw data (JSON)” card gives the same data readable and unencrypted inside a ZIP — for Excel, migration or keeping a copy independent of Nexto, with no permission from us. Because all customer data leaves unencrypted, your own password (and your 2FA code, if enabled) is required — an unattended, unlocked computer is not enough — and the download is recorded in the activity log. The “Include the database in the ZIP” option of the all-files download also adds both: the raw JSON and the restore file.

Connecting cloud storage — step by step

All files are stored in a nexto backup folder in your cloud storage (created automatically) and only the configured number of recent copies is kept. After each setup, verify with Test cloud connection.

Dropbox

1. Go to dropbox.com/developers/apps → Create app: choose Scoped access, then App folder (sufficient and safer), pick any name.
2. On the Permissions tab tick files.content.write and files.content.read, then Submit.
3. On the Settings tab, under OAuth 2 → Redirect URIs, add the address shown on this page.
4. Put the App key and App secret into the form here and save.
5. Click Connect to Dropbox and approve in the Dropbox window — done.

Google Drive

1. Go to console.cloud.google.com and create a new project.
2. In APIs & Services → Library, enable the Google Drive API.
3. In OAuth consent screen: type External, fill in name and email; while in Testing mode add your own email to Test users.
4. In Credentials → Create credentials → OAuth client ID: type Web application, and add the address shown on this page to Authorized redirect URIs.
5. Put the Client ID and Client secret into the form, save, click Connect to Google Drive and approve.

WebDAV (Nextcloud / ownCloud / …)

1. Copy the WebDAV address from your service — Nextcloud: Files → bottom corner, Files settings → WebDAV (general form: https://host/remote.php/dav/files/USERNAME/).
2. Enter username and password — prefer an App password (Nextcloud: Settings → Security) over your main password.
3. Save and run "Test cloud connection".

Troubleshooting

• redirect_uri_mismatch: the registered redirect URI does not match this page's address character for character.
• Google says "app not verified": you did not add your email to Test users.
• WebDAV 401: wrong username/password (or app password); 404: wrong base address.
• Connection dropped after a while: click the connect button again to refresh the token.

Who owns the cloud files?

You do. Backups are created inside your own Google Drive or Dropbox account, use your storage and belong to your account — Nexto has no access to them. In Google the Nexto app can only see files it created itself, and in Dropbox only the Apps/Nexto Backup folder; the rest of your files are invisible to it. Even if the Nexto service were ever unavailable, the copies already in your cloud remain untouched. Cloud files are only pruned per your own retention setting (or by you, manually).

Download all files (ZIP)

All receipt attachments and KYC documents, foldered per customer ("account no - name") with transactions (file names: gregorian date + doc code) and kyc folders inside. The zip is built in the background, its link is valid for 3 hours, and it is cleaned from the server automatically after expiry. The checkbox can include the latest database backup inside the zip.

Raw-data file password (ZIP)

The raw-data ZIP is created with a password (AES-256) so it cannot be opened without it if the file falls into the wrong hands. The password is shown in the "Raw data" card, can be copied, and can be changed (8–64 Latin characters). A random default is generated the first time. It only secures the file itself, it is not a lock on your data: the data is yours and opens with any ZIP tool (Windows, macOS, 7-Zip) and this password.