Your data is encrypted on your own devices, with keys only you hold. Everything we store is ciphertext (data scrambled by encryption, unreadable without the key), so not even we can read your backups. There is no server-side decryption and no key escrow: nothing useful for an attacker to steal.
Backups are append-only: your devices can add new snapshots, but nothing, not even a fully compromised device, can alter or delete the ones already stored. If ransomware strikes, your history is still intact and ready to restore from.
Deduplication means unchanged data is never stored twice, no matter how many snapshots reference it. Keep months of history without your storage bill scaling with it.
Everything is compressed before upload, shrinking both your storage footprint and your transfer times, which makes a real difference on large datasets and constrained networks.
Backing up and restoring are free. You pay only for the space your deduplicated, compressed data actually occupies: no ingress fees, and no egress surprises at the moment you need a restore most.
Create as many independent repositories as you need: per server, per application, per client. Each one is isolated, with its own encryption, history and retention.
Linux, macOS and Windows are all first-class citizens. One backup strategy for your whole fleet, from servers to laptops.
BackUpScale is built from best-in-class open-source tools, Restic and Rclone, managed for you: hardened, maintained and monitored. Because backups live in Restic’s standard format, you are never locked in; your data stays restorable with stock open-source tooling, with or without us. We give back, too: our public projects live at gitlab.com/backupscale, and we contribute to the open-source projects we build on.
Pruning old snapshots normally requires delete permission, exactly what append-only exists to deny. On our roadmap: per-key access control, so maintenance runs from a dedicated, well-secured client while your everyday devices keep their append-only credentials.
Security isn’t a feature we added; it’s the reason BackUpScale exists. A few of the ways that shows:
Backup access is over SSH (Secure Shell, the encrypted protocol administrators use to log in to servers), with key authentication only; passwords don’t exist here. Every connection is locked to a single forced command, so a session can push backup data and do nothing else.
Append-only storage is the default, and the switch for maintenance operations lives in our dashboard, not on the devices being backed up, which is exactly where an attacker would go looking for it.
Every customer gets their own storage credentials, scoped so they can only ever see their own data. Isolation is enforced by the storage layer itself, not by our code remembering to check.
Inside our platform, every workload starts with zero network access and gets only the specific connections it needs, and traffic between our servers is transparently encrypted. The environment where customer sessions run can reach exactly one internal service: the request log.
We don’t just trust our configuration; we test our behaviour. Our automated suite runs real backups over real SSH and, just as importantly, proves that the paths which must fail actually do.
The software that touches your data is open source and auditable, and your backups live in a standard open format you could restore without us. You don’t have to take our word for how the important parts work.
The full picture, in depth: Security at BackUpScale
Everything is covered, step by step, in our documentation.
Backups exist for the restore. Every snapshot you’ve ever pushed stays browsable: open the snapshot browser, pick a point in time, drill down to the file or folder you need, and restore it to wherever you want. Bring back one file from last Tuesday, or a whole server from last month.
You’re never dependent on us for it, either. Repositories use Restic’s standard open format, so your data is always restorable with stock open-source tools as well.
And because a restore you’ve never rehearsed is just a hope, our automated test suite continuously performs real restores against the live service, so the path is proven before you ever need it. When you do, the restore guide walks you through it.
Learn more on the About, Technical Background, and Restic as a Service pages, or dive into the documentation.
BackUpScale is launching soon. Sign up for our newsletter to be first in line, or join the community and tell us what you need from a backup service; we’re building it for you.