Cloud storage, immutability & backup
Immutable storage is how a business keeps one copy that a stolen administrator login cannot erase. Our team designs write-once storage and backup vaults on the four large clouds: Amazon S3 Object Lock and AWS Backup on Amazon Web Services (AWS), Cloud Storage bucket lock and the Backup and DR Service on Google Cloud, immutable storage for Azure Blob Storage and Azure Backup on Microsoft Azure, and Object Storage retention rules and Block Volume backups on Oracle Cloud Infrastructure (OCI).
What we do
- Write-once object storage with retention locks
- Backup vaults isolated from production accounts
- Cross-region copies for hurricane and flood risk
- Restore tests with timed results
- Encrypted backups with keys kept apart
- Backup policy design to meet recovery targets
The details differ by provider: retention modes, who can shorten a period, whether versioning is required, and what happens when a policy is locked. We read each provider's documentation against the client's retention rule, then test the restore.
This group supports Managed IT backup work, Cybersecurity ransomware readiness and Cloud Management. Product names are experience, not partnerships.
Leading platforms we work with
- Amazon S3 Object Lock
- AWS Backup
- Google Cloud Storage bucket lock
- Google Cloud Backup and DR Service
- Azure Blob Storage immutable storage
- Azure Backup
- OCI Object Storage retention rules
- OCI Block Volume backups
Platforms and practices
- Retention modes and legal holds
- Logically air-gapped and isolated backup vaults
- Restore testing and clean-room recovery
- Encryption keys held apart from the data
References
- AWS: Locking objects with S3 Object Lock
- AWS: AWS Backup
- Google Cloud: Bucket Lock and retention
- Google Cloud: Backup and DR Service
- Microsoft Learn: Immutable storage for Azure Blob Storage
- Microsoft Learn: Azure Backup
- Oracle: OCI Object Storage data retention rules
- Oracle: OCI Block Volume backups
Sources last checked .
Product names are trademarks of their owners and are listed to describe our experience; they do not imply endorsement or partnership.
How we use Cloud storage, immutability & backup for clients
Frequently asked questions
Direct answers to the questions we hear most. Something else on your mind?
Send us a messageWhat is immutable storage?
Write-once storage that keeps one copy a stolen administrator login cannot erase. It is how a business protects backups from ransomware and from deletion by mistake.
Which immutable storage options do you design on the large clouds?
Amazon S3 Object Lock and AWS Backup on Amazon Web Services (AWS); Cloud Storage bucket lock and the Backup and DR Service on Google Cloud; immutable storage for Azure Blob Storage and Azure Backup on Microsoft Azure; and Object Storage retention rules and Block Volume backups on Oracle Cloud Infrastructure (OCI).
Do all providers behave the same way?
No. Retention modes, who can shorten a period, whether versioning is required and what happens when a policy is locked all differ. We read each provider's documentation against your retention rule.
Do you test restores?
Yes. We test the restore, including clean-room recovery, because a backup that has never been restored is an assumption.
Where are the encryption keys kept?
Apart from the data, so one stolen login cannot reach both the backups and their keys.
Which of our services use immutable storage?
Managed IT backup work, Cybersecurity ransomware readiness and Cloud Management. Product names are experience, not partnerships.