An infected device can’t touch its backups.

The agent can add copies. It has no key to read, change or delete them.

What the agent on a device can do
Agent uploads a new backup	Allowed
Agent lists other backups	Not possible
Agent deletes a backup	Not possible
Clean-up removes a locked copy	Never

For your security review

Short answers. Ask us for anything not here.

Where is data stored?: In the EU, on Backblaze B2 in its EU Central region.
Encryption in transit: HTTPS between the agent, the console and storage.
Encryption at rest: Yes, by the storage provider.
Credentials on the device: None for storage. Each upload uses a short-lived link for one piece of data.
Locked copies: Set per plan in days. They cannot be changed or deleted until the lock ends.
Upload checks: Every upload is checked against its fingerprint before it is kept. Data that does not match is discarded.
Unusual changes: A backup that changes far more files than usual raises an alert and keeps every earlier copy until you look.
Who can change things: Super admins and admins. Staff and viewers can only look.
Sign-in: Two-step sign-in, or your company SSO.
Audit trail: Every change and restore, with who did it and from where.
Subprocessors: Listed on the subprocessors page.
Company: Dalysie AS, Norway.

Send it over and we’ll fill it in.