YouPilot Cloud Administration

Cloud overview

Essential capacity, service access and operational health in one place.

Cloud control plane

Accounts–

Files–

Stored–

Service clients–

Providers–

Active sessions–

Physical bytes–

Server retained–

Plans and payments are intentionally not managed here

YouPilot.me owns plan catalog, pricing, purchases, subscriptions and payment history. Cloud Administration remains focused on storage operations.

YouPilot.me authority

Platform status

Live API, database, Redis and storage verification.

Loading…

Public status page: status.youpilot.cloud

Cloud storage control

User-visible usage, physical provider usage, server-retained removals and API readiness.

Checking API…

Visible files–

Visible bytes–

Retained files–

Retained bytes–

Physical bytes–

Visible folders–

Retained folders–

Provider capacity

Physical use includes server-retained files. Capacity is configured per provider.

Usage by YouPilot application

Application / category	Visible files	Visible bytes	Retained files	Retained bytes

Usage by Cloud account

Account IDs are shown for storage operations. User management remains outside YouPilot Cloud.

Account	Visible files	Visible bytes	Retained files	Retained bytes

Server-retained user removals

Users cannot physically delete objects. Administrators can restore them or explicitly purge the storage object.

File	Account / app	Size / provider	Removed	Admin action

Server-retained folders

Folder trees removed by users remain recoverable. Restoring a folder also restores its retained files to Active or Trash.

Folder	Account	Physical contents	Removed	Admin action

Lifecycle safety

Automation is disabled and preview-only by default. Destructive automation requires an explicit confirmation.

Enable scheduled lifecycle runsPreview-only modePending upload TTL (minutes)Worker interval (seconds)Batch sizeDeleted metadata retention (days)

Account quota override

Set a permanent administrative storage override. The commercial plan allowance remains managed by YouPilot.me. Bytes are used to avoid hidden unit conversion.

Account IDHard quota bytesSoft quota bytesWarning percent

Account	Active	Reserved	Hard quota	Objects

Scoped quota rules

Account IDApplication IDCategoryHard limit bytesSoft limit bytesWarning percent

Account	Scope	Soft	Hard

Retention policies

NameApplicationCategoryObject statusRetention daysAction

Policy	Scope	Retention	Action

Lifecycle preview and runs

Preview never deletes data. A dry-run records exactly what a real run would do.

Run	Status	Candidates	Results

Storage provider control plane

Add Cloudflare R2, AWS S3, Bladez2 / Backblaze B2, CDN endpoints or another HTTPS S3-compatible provider. Credentials remain encrypted.

Provider IDProvider typeDisplay nameRegionInternal S3 endpointSigned upload endpointSigned download endpointBucketPriorityMaximum object bytesProvider classConfigured capacity (bytes)CDN public base URLProvider notesAccess key IDSecret access keyOptional session token

mailfilestransfersstudio

Force path-style S3 URLsEnable for new writes

Configured providers

Lower priority numbers receive new writes first. Existing objects always remain bound to the provider that created them.

Provider	Routing	Health	Usage	Actions

Recent provider checks

Provider	Status	Latency	Result	Date

Provider migration control

Move active objects between providers explicitly. Copies are streamed, verified and switched atomically before source cleanup.

Source providerTarget providerAccount filterApplication filterCreated beforeMaximum objectsBatch sizeMaximum attempts

mailfilestransfersstudio

Put source provider into drain modeDelete source object after verified switchVerify SHA-256 when a checksum existsStart immediately

Existing file IDs and public shares remain stable during migration.

Migration jobs

Jobs are resumable. Failed copies never change the live object provider binding.

Route	Status	Progress	Filters	Actions

Provider drain state

A drained provider receives no new writes. Release drain mode only after active migration jobs finish.

Provider	State	Target	Objects	Action

Connected applications

Create isolated service credentials for YouPilot Studio, YouPilot.dev, Mail, and future products. Existing clients can be granted or denied individual scopes without rotating their secret.

Application IDDisplay name

Each secret is displayed once.

Application	Client ID	Scopes	Last used	Actions

Product connection registry

Account connections, preserved product storage, user disconnect controls and latest service access.

Product	Accounts	Storage	Disconnect	Last access

Service file lifecycle

Idempotent, account-bound and application-isolated deletion for connected YouPilot products.

Application	File	Reason	Completed

Email delivery

Send secure file links through YouPilot.me email API or a compatible endpoint.

Provider adapterAPI URLService tokenFrom

Enable email sending

Send a test

Integrity and recovery safety

Integrity scans and recovery drills are non-destructive. Damaged objects are never deleted automatically.

Automation settings

Enable scheduled integrity scans Enable scheduled encrypted backups Verify SHA-256 when stored Include provider orphan previewIntegrity interval hoursIntegrity batch sizeMaximum objects per scanBackup interval hoursRetained backups

Backup archives are encrypted on the Cloud host. The encryption key is never exposed through this page.

Integrity scans

Checks bound provider objects for presence, size and optional SHA-256 mismatch. Orphans are reported only.

Provider filterAccount filter Verify checksums for this run Detect provider orphans

Run	Status	Checked	Findings

Integrity findings

Orphans are report-only. Quarantine is available only for active metadata with an unresolved missing, size, checksum or provider error finding.

Object	Provider	Finding	Details

Encrypted backups

Includes PostgreSQL plus application source and encrypted configuration. Plaintext staging files are removed after encryption.

Backup	Status	Encrypted size	Counts	Action

Non-destructive recovery drills

A drill decrypts one backup into a temporary PostgreSQL database, verifies the schema and counts, then drops the temporary database. Production is not modified.

Drill	Backup	Status	Verification

Operational control

Persistent request metrics, health history, alert rules and incident timelines.

Requests · 60m–

Errors · 60m–

Average latency–

Active alerts–

Collection and status settings

Enable health collection Publish sanitized statusCollection interval secondsSnapshot retention daysMetric retention days

Open public status

Alert rules

NameMetricThresholdSeverity

System rules can be tuned or disabled without deleting their history.

Rule	Metric	Threshold	Severity	Enabled

Active and recent alerts

Alert	Status	Observed	Last seen	Action

Incident control

TitleSeverityVisibilitySummary

Public incidents appear on status.youpilot.cloud.

Incident	Severity	Status	Visibility	Action

Health history

Collected	Status	Core	Providers	API errors

Owner identity

Bind the stable YouPilot.me subject to the permanent Cloud owner role.

Checking authenticated identity…

Bootstrap retirement readiness

Bootstrap stays available until owner login, recovery administration and global logout are verified.

A second user with ADMIN role is required before retirement.

Active and recent sessions

Host-only Cloud sessions, product-session registration state, login address and revocation controls.

User	Roles	SSO	Last seen	State	Action

Security events

Recent login, role, owner, refresh and global-logout activity.

Event	User	Severity	Date

Native application control

Secure server configuration for real Windows, Android and iOS clients. YouPilot.me remains the identity authority.

OAuth 2.0 + PKCE

Enabled clients–

Published releases–

Active devices–

Restricted devices–

Identity boundary: create each public Windows, Android and iOS OIDC client in YouPilot.me, then place only its public client ID and redirect URIs here. Client secrets must never be embedded in native applications.

Application clients

Configure package identifiers, public OIDC clients, redirect URIs, minimum versions and store links.

Client IDPlatformDisplay namePackage / bundle identifierYouPilot.me public OIDC client IDDefault channelMinimum supported app versionMinimum OS versionDeep-link schemeStore or download URL

Redirect URIs, one per lineOIDC scopes, separated by spaces

Support URLPrivacy URLTerms URLEnable this native client

Windows may use a loopback HTTP callback. Android and iOS should use claimed HTTPS or application deep links.

Application	Identity	Policy	Status	Action

Release channels and updates

Create draft releases, upload native artifacts directly to Cloud storage, verify SHA-256 server-side, then publish update metadata. Rollout is deterministic per installation; mandatory releases and minimum-version policy override staged rollout.

ApplicationChannelVersionBuild numberRollout percentageMinimum OSDirect artifact URLStore URLArtifact SHA-256Artifact bytes

Release notes

Mandatory update

Hosted artifact delivery: create the draft first, select it below, then upload the built installer/APK/IPA. Cloud stores the artifact in private object storage and verifies its SHA-256 before publishing.

Draft releaseArtifact fileTauri updater signature (Windows hosted updates)

No artifact upload in progress.

Application	Version	Delivery	Policy	Actions

Remote feature flags

Deliver JSON configuration by application, channel and version without shipping a new build.

ApplicationFlag keyChannelMinimum versionMaximum versionEnabled

JSON value

Examples: true, 25, or {"mode":"safe"}.

Application	Flag	Value	Version range	Actions

Registered application devices

Devices are linked to YouPilot.me users. Blocking or revoking a device affects only that app installation, not the global account.

Device	User	Application	Version	Last seen	Actions

YouPilot.me OIDC

Standard authorization-code login with PKCE and host-only sessions.

IssuerDiscovery URLClient IDClient secretAudienceToken authenticationAccount claimRoles claimScopesCallback URL to register in YouPilot.me

Enable YouPilot.me login immediately after saving

Direct endpoints may remain empty when discovery works.