> For the complete documentation index, see [llms.txt](https://newdocs.keeper.io/en/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://newdocs.keeper.io/en/release-notes/backend/backend-api/backend-api-18.1.8.md).

# Backend API 18.1.8

Released August 17, 2026

### New Features

* Classic-to-Nested Shared Folder Migration: Introduced seamless migration capabilities converting legacy records to the Nested Shared Folder architecture.
* Concealed Field Audit Logging: Added dedicated audit tracking (`copied_hidden_field`) that logs an audit event whenever a user copies hidden or masked field values to their clipboard.
* SIEM & Alert Governance: Added enterprise policy controls allowing administrators to lock SIEM and alert configurations against unauthorized modification or deletion.
* Nested Shared Folders Off-boarding Support: Expanded enterprise account transfer workflows to fully inventory, re-encrypt, and migrate Nest Shared Folders folders and records during user off-boarding.

### Improvements

* **KA-8739:** Expanded enterprise account transfer capabilities to include Nested Shared Folders resources. Ensures all owned nested shared folders and root records are properly inventoried during user transfer preparation.
* **KA-8740:** Enhanced user off-boarding workflows to securely transfer Nested Shared Folders assets to replacement accounts. Validates and reassigns encrypted nested shared folder and record access permissions during account removal.
* **KA-8741:** Improved account cleanup processes when off-boarding enterprise users. Ensures associated nested shared folder resources and policy configurations are properly managed while preserving audit history.
* **KA-8929:** Added comprehensive pre-conversion validation checks for record migrations. Verifies enterprise eligibility, record ownership, and permission states before converting records to the new folder structure.
* **KA-8930:** Implemented automated legacy permission cleanup following record conversion. Ensures outdated access associations are safely removed once a record has migrated to the new sharing model.
* **KA-8931:** Enabled end-to-end transactional migration for record conversion. Seamlessly converts record placements, permissions, linked items, and attachments in a single atomic operation.
* **KA-8932:** Integrated audit event logging for record conversion workflows. Provides full administrative visibility into record migration events within enterprise audit reports.
* **KA-8933:** Introduced batch processing support for record conversion requests. Allows client applications to convert multiple records efficiently with detailed per-item status feedback.
* **KA-8934:** Expanded automated end-to-end test coverage for record migration pipelines. Ensures reliable performance and data integrity across all record conversion scenarios.
* **KA-9006:** Added validation safeguards for converting records with cross-user record links. Blocks conversion if linked parent or child records are owned by other users, protecting shared link integrity.
* **KA-9010:** Added real-time removal signals when records transition to the new folder architecture. Notifies legacy client applications to update their views and prune converted items automatically.
* **KA-9034:** Preserved direct user-to-user record shares during record conversion. Retains existing user access permissions and sharing roles seamlessly without requiring re-sharing.
* **KA-9058:** Carried over Time-Limited Access expirations during record conversion. Ensures temporary access restrictions and scheduled expiration dates remain active after migration.
* **KA-9162:** Hardened encryption key management for automated device and team approval endpoints. Ensures all communication with automator services remains fully encrypted across all request retries.
* **KA-9285:** Introduced a new audit event for tracking clipboard copies of concealed fields. Generates an audit log entry whenever a user copies a hidden or masked field value on a record.
* **KA-9474:** Added automatic sync notifications following record conversion. Prompts connected client applications to synchronize immediately when records are converted.
* **KA-9515:** Added enterprise setting to prevent modification of alert and SIEM configurations. Restricts editing, pausing, or deleting active monitoring integrations to authorized support workflows.
* **KA-9532:** Added support for disaster recovery regions, enabling services to continue operating reliably when the primary region is unavailable.
* **KA-9560:** Updated health checks to remain available during temporary Redshift audit data interruptions, while still recording the service issue for follow-up.

### Bugs

* **KA-8760:** Added additional hardening around Nested Shared Folder APIs based on 3rd party penetration testing.
* **KA-8889:** Resolved an issue where folder creation and move operations did not consistently enforce maximum folder depth. Ensures folder hierarchy limits are strictly maintained across all folder management actions.
* **KA-8944:** Fixed an issue where record sharing states were missing during subfolder synchronization. Ensures consistent permission visibility across deeply nested folder structures.
* **KA-9019:** Resolved an issue where record sharing states persisted after permissions were updated. Ensures record sharing status accurately reflects current access permissions.
* **KA-9024:** Fixed a database query error during folder access expiration processing. Ensures expired temporary folder permissions and rotations are processed cleanly without errors.
* **KA-9037:** Fixed an issue where deleting a nested child record failed to remove its associated link. Ensures record deletion completely removes record references and associated data.
* **KA-9062:** Fixed an issue where users restricted from creating shared folders were incorrectly blocked from creating personal folders. Ensures folder creation enforcement policies only restrict shared folder creation as intended.
* **KA-9089:** Fixed an unexpected permission error when record owners modified file attachments on drive records. Allows owners to add or remove files without encountering sharing restriction errors.
* **KA-9093:** Resolved an issue preventing immediate deletion of newly created linked records.\
  Allows users to delete newly created linked records without waiting for a full vault synchronization.
* **KA-9153:** Fixed record classification errors during record conversion. Ensures records located within shared folders are correctly identified and converted to the new folder structure.
* **KA-9214:** Fixed credential validation logic for external security logging connections. Ensures connection tests properly fail when invalid authentication credentials are provided.
* **KA-9277:** Fixed an access control issue where explicitly denied users could perform record removal actions. Enforces strict denial checks on record management operations to prevent unauthorized record deletion.
* **KA-9278:** Updated conversion validation to exclude application records. Prevents application records from being converted, preserving access management capabilities.
* **KA-9528:** Fixed an issue where shared record status was lost during record conversion. Ensures shared record states and permissions remain intact throughout the conversion process.
* **KA-9404** Improved Managed Company Transfer support across international regions, allowing authorized support operations to work consistently in US, EU, AU, JP, and CA environments.
* **KA-9513:** Fixed an issue where direct record shares could disappear or become inaccessible to sharees after a V3 record was converted to NSF. Shared records and permission details now remain available after conversion and synchronization.

<br>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://newdocs.keeper.io/en/release-notes/backend/backend-api/backend-api-18.1.8.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.