This tool opens your encrypted backup locally in your browser. It makes no network requests with the backup or passphrase. It does not change live portal records.
A successful check confirms the archive decrypts, every included document matches its saved SHA-256 checksum, and every record-linked file is present.
The recovery download is an unencrypted TAR archive containing snapshot.json, restore-missing-data.sql, instructions and the original document files. Extract it only on a trusted device and protect/remove the decrypted copies when finished.
The database owner must review and apply recovery. The SQL only adds missing rows; it cannot undo an incorrect edit or replace an existing row. Original account UUIDs and the portal schema must still exist. It does not recover passwords, sessions, provider configuration or historical audit rows into the live audit log. Original history remains in snapshot.json; recovered inserts create fresh audit events. A new-project recovery requires separate account recreation/remapping and security configuration.
There are no automatic backups. Keep the encrypted original and its passphrase separately.