History somebody else cannot edit.
The audience for this site understands immutable history better than most buyers of backup software, so the pitch is short. A copy that lives inside the system it protects is not a copy. An administrator who has been taken over, or an operator with a destructive quarter of an hour, can reach anything inside the tenant, including the very retention policy you leaned on, plus the audit log that would have exposed the whole thing.
What you are buying here is a second record, encrypted, held outside the credential set that governs the original, retained on a schedule you selected rather than one a platform vendor chose for you.
Endpoints, servers, and virtual machines.
Machine level protection ranges from working file history on Windows workstations through to full system images with bare metal recovery. Storage pools, so an allowance is measured estate wide rather than fenced per device, and AES 256 covers all of it, stored or moving. Server and virtual server lines carry application aware support for the common database and collaboration platforms.
Restore verification is the line most people skip and later regret. It performs an automated restore weekly or monthly and produces documented proof that it worked. Skip it and your recovery time is an assumption, and assumptions are what turn a bad morning into a bad quarter.
Mail, files, accounting, and the directory.
Cloud platform coverage is where the shared responsibility model bites. The provider guarantees the service stays up. Guarding the contents against deletion, malice, and error sits on your side of that line, and it is written into the agreement whether or not anyone read it.
For a treasury or a fund, the directory line deserves particular attention. After an identity takeover the expensive part is not the mailbox, it is reconstructing groups, role assignments, application registrations, and conditional access policy from memory while everyone is shouting. Retention without a cap, changes surfaced as they happen against the last values known to be good, and rollback, turn that from a week into an afternoon.
Working File History
Version history for the documents people actually work in, on Windows workstations.
- Two backup passes per day of working office files.
- The last 28 days of versions, any of them, back in seconds.
- Managed centrally with everything else you run.
| Platform | Windows workstations |
|---|---|
| Scope | Files and folders, not a full system image |
| Cadence | Two passes per day |
| Retention | 28 days of version history |
| Restore unit | A single file, at a chosen version |
| Priced by | Windows workstation, monthly |
monthly rate, taken up front QTY
Workstation Image Backup
Whole system imaging for workstations, with a local vault available in addition to the cloud one.
- Whole system image, with selection and schedule yours to set.
- Two vaults if you want them: cloud, and a local one alongside it.
- Bare metal recovery on Windows.
- AES 256 while stored and while moving.
| Platforms | Windows, Linux, and macOS workstations |
|---|---|
| Scope | Whole system image, selection and schedule yours to set |
| Vaults | Cloud, with a local one available alongside it |
| Bare metal | Supported on Windows |
| Storage | 500 GB, pooled estate wide |
| Encryption | AES 256 while stored and while moving |
| Priced by | Workstation, monthly |
monthly rate, taken up front QTY
Physical Server Imaging
Full server protection with application aware support for the databases and collaboration platforms most estates run.
- Whole system image with bare metal recovery.
- Application aware for Exchange, SharePoint, SQL Server, Oracle, and MySQL.
- Pull back one file, or the entire server.
| Platforms | Windows and Linux servers |
|---|---|
| Scope | Whole system image, selection and schedule yours to set |
| Application aware | Exchange, SharePoint, SQL Server, Oracle, and MySQL |
| Bare metal | Supported |
| Locations | Cloud vault, with optional local storage |
| Storage | 2000 GB, pooled estate wide |
| Priced by | Physical server, monthly |
monthly rate, taken up front QTY
Virtual Server Image Backup
The same protection model applied to virtual servers, priced per guest.
- Whole system image with bare metal recovery.
- Application aware for Exchange, SharePoint, SQL Server, Oracle, and MySQL.
- Granularity from one file up to the entire guest.
| Platforms | Windows and Linux virtual servers |
|---|---|
| Scope | Full system backup, customizable selection and schedule |
| Application aware | Exchange, SharePoint, SQL Server, Oracle, and MySQL |
| Bare metal | Supported |
| Storage | 2000 GB, pooled |
| Encryption | AES 256 while stored and while moving |
| Priced by | Virtual server, monthly |
monthly rate, taken up front QTY
Restore Verification
Automated restore testing with documented proof, which is what separates a recovery time you assumed from one you actually measured.
- Cadence set by you, weekly or monthly.
- Evidence of a restore that worked, retained for the file.
- Written for regulatory and counterparty due diligence requirements.
| Cadence | Weekly or monthly |
|---|---|
| Output | Documented proof of a successful restore |
| Applies to | Machine backup lines under this layer |
| Use | Compliance evidence and an honest recovery time figure |
| Priced by | Protected system, monthly |
monthly rate, taken up front QTY
Microsoft 365 Protection
Independent protection for the Microsoft 365 workloads, held outside the tenant and its credentials.
- Shared mailboxes carry no extra charge.
- Mail kept for seven years.
- Teams, SharePoint, and OneDrive kept for one.
- Pooled storage at 1 TB for every licensed user.
| Workloads | Exchange, Teams, SharePoint, and OneDrive |
|---|---|
| Shared mailboxes | Carry no extra charge |
| Mail retained | 7 years |
| Files and Teams retained | 1 year |
| Storage | Pooled, at 1 TB for every licensed user |
| Custody | Held outside your Microsoft 365 tenant |
| Priced by | Licensed user, monthly |
monthly rate, taken up front QTY
Google Workspace Protection
Granular protection across the Google Workspace estate, with cadence set per workload.
- Drives picked up three times daily, both My Drive and Shared Drive.
- Mail picked up twelve times daily.
- Calendars, contacts, and tasks picked up once.
- Pull back one message, one mailbox, or the lot.
| Workloads | Mail, My Drive, Shared Drive, calendars, contacts, and tasks |
|---|---|
| Twelve passes daily | |
| Drives | Three passes daily |
| Calendars, contacts, tasks | One pass daily |
| Granularity | One message, one mailbox, or the lot |
| Encryption | AES 256 on disk, TLS on the wire |
| Priced by | Licensed user, monthly |
monthly rate, taken up front QTY
QuickBooks Online Protection
Continuous protection for QuickBooks Online, because the platform makes no promise about getting your data back, and a fund's books are not a thing to improvise.
- Backup that is automatic and continuous.
- Download, restore, and replicate in a single click.
- Storage without a cap, reachable from any device.
| Covers | QuickBooks Online company data |
|---|---|
| Cadence | Continuous, no schedule to set |
| Restore | Download, restore, and replicate in a single click |
| Storage | No cap |
| Availability | Better than 99.99 percent, per the platform |
| Encryption | AES 256 while stored and while moving |
| Priced by | Company file, monthly |
monthly rate, taken up front QTY
Entra ID Configuration Backup
The line that matters most after an account takeover, because rebuilding a directory from memory is where the days go.
- Retention without a cap, well past the platform's own 30 day window.
- Rollback of unwanted changes without reconstructing them by hand.
- Changes surfaced as they happen, with the last values known to be good searchable.
- Open standard export, so the record is portable.
| Scope | Entra ID configuration and directory objects |
|---|---|
| Retention | No cap, with open standard export |
| Rollback | Unwanted changes reverted to the last values known to be good |
| Monitoring | Change detection on named attributes, as it happens |
| Recovery | Configuration restored in seconds rather than rebuilt |
| Priced by | Tenant, monthly |
monthly rate, taken up front QTY
Where this layer stops
Backup restores data and configuration. It has no relationship whatsoever to on-chain state, and we want that understood before you buy rather than after.
- A signed transfer is not a file. Nothing here rolls one back, and no combination of these lines produces a claim on assets that have moved.
- We hold no keys and no seed material, so a backup with us is not a key escrow arrangement and cannot be used as one.
- Retention and storage figures are those published per line above. Storage allowances pool estate wide rather than being fenced per device.
- Restore verification proves that a restore completed. It does not certify that the data inside it was correct at the moment it was captured.