Platform

Push, pull, verify, forget

Agents push. The vault pulls. Nothing that can reach your production network can reach the air-gapped copy.

Design decisions

One full, then changed blocks forever. Synthetic fulls are assembled in the vault, not on your network.

Variable-block deduplication before the data leaves the machine. Typical fleet ratio is 6.4:1, so 41 TB of change becomes 6.4 TB on the wire.

Agents can create objects and never modify or delete them. Compromising an agent gives an attacker the ability to add garbage, not to remove history.

File-level search across every recovery point, so 'find the version of this file from before March' is one query.

Per-site schedules and ceilings. Backup windows that respect the fact that people also work here.

Every copy, verification and restore is recorded in an append-only log you can export for an audit.