Help · Settings and people
Backups
A backup is a full copy of your shop: its records and its documents. Ordryx makes one every day by itself, checks that it works, and can send an encrypted copy away from the building, so a dead disk, a fire or a theft doesn't take the shop with it.
Who can do this
People whose role lets them run backups can open Settings › Backups, see the list and press Back up now. Only an owner can change the settings: when backups run, how many are kept, where off-site copies go and the passphrase. They decide where the whole shop's data goes. Everyone else sees them read-only.
The Backups screen
The banner at the top says in one sentence how safe the shop is, for example Everything's safe. with the time of the last backup and the last off-site copy. If something needs a look, it says so.

Back up now
Press Back up now in the banner, for example before a big change. Ordryx makes a backup, checks it, and lists it under Copies. If off-site copies are on, that copy is sent and checked too.
On this server
These settings are for the backups kept on the computer that runs Ordryx. Change them, then press Save at the top.
- When: Daily or Off.
- At: the time, in the shop's time zone.
- Keep: how many of the newest backups to keep. Older ones are deleted after each new backup.
- Lock them: encrypt these backups with the backup passphrase too (set the passphrase first). Then a disk or network drive they sit on can't be read without it.
The tag at the top of the card says where the backups sit: Another disk is best. Same disk or Same folder comes with a warning, because one failure could take both the shop and its backups.
Copies
The list shows each backup with when it was made, its size, and whether it is Locked. If off-site copies are on, it also shows whether each one was Verified off-site. An owner can Download any of them.
A shipping label's file and its customs form are never in a backup. Ordryx keeps those only until the carrier has the parcel.
Off-site copies
A fire or a theft takes the server and every backup in the building. An off-site copy is what's left. After each backup, Ordryx encrypts a copy and sends it somewhere else.
A copy only counts once Ordryx has fetched it back and restored it as a test. If any step fails, it doesn't count, and the Off-site card says where it stopped.
Setting it up (owners)
- First set the passphrase (below).
- In the Off-site card, pick Where:
- Ordryx off-site: storage kept by Ordryx, away from the server. Only for shops hosted by Ordryx.
- To a folder: another disk or a network drive. Only for shops you run yourself. Type the Folder where it is mounted.
- To S3-compatible storage: Backblaze B2, Cloudflare R2, Amazon S3, Wasabi and others. Press Change next to Bucket and fill in the storage's details.
- Set Keep: how many copies to keep off-site.
- Press Save at the top.
- Press Test on the Off-site card. Each step shows a tick or a cross.
Press Send next to Send the newest now to send a copy straight away.
The passphrase
Every off-site copy, and every backup you lock here, is encrypted with the backup passphrase before it leaves. The storage can't read it.
- In the Passphrase card, press Set… (or Change…).
- Type a passphrase of at least 16 characters. A few words together is easy to remember and hard to guess.
- Type it again and press Save it.
It is never shown again. Copies already made keep the passphrase they were sealed with, so if you change it, keep the old one too until those copies have aged out.
Sending the keys
Send the keys with off-site copies sends two keys along with each copy, sealed with your passphrase: the one that signs receipts and the one that protects stored passwords and customers' addresses. These keys are never in the backups themselves. Without them, a new computer can't check receipts already issued or read those addresses. Leave it on. Ordryx off-site always sends them.
Restoring a backup
A restore replaces the whole shop with a copy. Anything done since that copy is lost. That's why it isn't a button in the app.
Press How to restore → on the Copies card for the steps:
- On a shop you run yourself: download the copy you want (or use one in the backup folder), stop Ordryx, run the restore command shown, then start Ordryx again and check the Overview and a recent work order. A locked copy asks for the backup passphrase.
- On a shop hosted by Ordryx: ask Ordryx to restore it for you (see Getting help). A locked copy needs your passphrase.
Hosted and self-hosted
| Hosted by Ordryx | Run yourself | |
|---|---|---|
| Backups kept | Up to the plan's limit | As many as you choose |
| Off-site to Ordryx off-site | Yes | No |
| Off-site to a folder | No: it would be on the same server | Yes |
| Off-site to S3 storage | Yes | Yes |
| Restoring | Ordryx does it for you | You run it on your server |