Object Lock
Governance or compliance mode — objects cannot be deleted or overwritten before retention expires.
WORM retention
ZeroVault · Cloud Object Storage
Immutable Veeam backups on S3-compatible storage.
ZeroVault is fully managed, Amazon S3-compatible object storage for Veeam. Veeam sets S3 Object Lock on your backups, so locked restore points cannot be deleted or encrypted before retention expires. The storage has its own account and credentials outside your Active Directory domain and runs in 15 regions. No API fees. Pricing and egress terms on request.
11 nines
Durability
15
Regions
$0
API fees
Global coverage
15 regions across North America, Europe and Asia.
Deploy closer to your workloads. Each region has its own dedicated BackupSec S3 endpoint — click a city on the map to zoom in.
Americas
Chicago · Dallas · Los Angeles · Miami · Montreal · Oregon · Phoenix · Virginia
Europe
Frankfurt · Ireland · London · Milan · Paris
Asia-Pacific
Singapore · Tokyo
Immutability
The delete command runs. The data stays put.
Object Lock enforces WORM retention — even if an attacker gains admin rights and compromises your backup console.
Isolated from production
A separate account and credentials, outside your Active Directory domain. Veeam sets the lock, so even admin credentials cannot delete a locked restore point before it expires.
Isolated credentialsLast copy in 3-2-1-1-0
Holds the off-site immutable copy in BackupSec's five-layer approach, alongside ZeroMON, ZeroTAM, ZeroPEN, and Stork365.
Immutable last copy
Use cases
Built for Veeam backup and disaster recovery.
An off-site, immutable copy of your Veeam backups in a region you choose.
Backup & archival
A Veeam repository or SOBR capacity tier with Object Lock, plus NAS offload and long-term retention.
Disaster recovery
An off-site copy isolated from your Active Directory and production. For a copy in a second region, point a Veeam backup copy job at a bucket there.
Geographic separation
If your primary site and your local backups share a city or seismic zone, one event can take out both. A copy in another country avoids that; for companies in Turkey, ZeroVault keeps it outside Turkey.
Compatible clients
Works with the tools you already use.
Standard Amazon S3 API — connect any backup, DR, media, or migration client that supports S3-compatible object storage.
Backup & DR
Veeam · Commvault · Cohesity · Rubrik · NAKIVO · MSP360 · Acronis · Arcserve · Veritas NetBackup · Retrospect · Vembu · HYCU · Actifio · Catalogic · MicroFocus · Quest Rapid Recovery · Zerto · XOPERO ONE · JetBackup · Duplicati · Duplicacy · Restic · Kopia
S3 clients & migration
Rclone · Cyberduck · S3 Browser · CloudBerry · Mountain Duck · WinSCP · s5cmd · S3cmd · Flexify.IO · Couchdrop · MultCloud · Cloudmounter · TNTDrive · WebDrive · ExpanDrive
Media, NAS & platforms
LucidLink · Synology Hyper Backup · QNAP · TrueNAS · Proxmox · Nextcloud · ownCloud · Milestone XProtect · Snowflake · ClickHouse · Apache Spark
Platform
Everything in one S3-compatible platform.
Object Lock
WORM immutability — governance mode, compliance mode, retention, and legal hold.
Encryption
AES-256 at rest and in transit. TLS on every connection.
Versioning
Prior object versions retained per bucket policy — recover from accidental overwrites.
Cross-region replication
Replicates buckets across regions for non-Veeam data. For Veeam backups, use a backup copy job to a second bucket instead.
Event notifications
Triggers on object create, modify, or delete — integrate with your monitoring stack.
Bucket logging
Detailed access logs for audit trails and security monitoring.
MFA
Time-based second factor for console access and MFA-protected bucket deletion.
Cloud migration
Free migration from AWS S3, Azure Blob, Backblaze B2, or Wasabi — no third-party tools.
Web console
Your BackupSec management console.
Access, manage, and restore from anywhere — buckets, users, regions, and security in one place.
Dashboard
Centralized view of storage usage, regions, and account health.
Buckets
Create buckets, configure Object Lock, versioning, and access policies.
Users & access
IAM-style users, access keys, and per-bucket permission control.
Security
MFA, account settings, and region endpoint management.
Specifications
Technical details.
- Deployment
- Fully managed, with no hardware to run. BackupSec sets up the account, buckets and access with you.
- API
- Amazon S3 compatible — standard SDKs, CLIs, and backup tools.
- Isolation
- Separate account, credentials and IAM, outside your Active Directory domain. Object Lock is set by Veeam.
- Durability
- Eleven nines (99.999999999%) durability.
- Pricing model
- No API fees. Pricing and egress terms on request.
- Endpoints
- Region-specific BackupSec S3 URLs and access keys per bucket.
Also used for
Other workloads on the same storage.
Media workflows
Petabyte-scale object storage for active and archived media — S3-compatible with your existing tools.
AI & data lakes
Affordable hot storage for large structured and unstructured datasets — no API-call charges at scale.
Cloud migration
Move from AWS S3, Azure Blob, Backblaze B2, or Wasabi — BackupSec handles migration at no extra tool cost.
Data location
Regulation and data location.
Your data stays in the region you choose. Some regulated institutions in Turkey must keep their backups in the country, and ZeroVault has no region there.
Region
You choose one of 15 regions in North America, Europe and Asia. None of them is in Turkey.
Who cannot use it
Banks, leasing, factoring and finance companies, payment and e-money institutions, SPK-regulated entities, insurers and pension companies, and public bodies in Turkey. The rules they operate under require backups to be kept in Turkey.
KVKK
For backups that contain personal data of Turkish data subjects, we work through KVKK's cross-border transfer rules with you at contract stage.
DORA
Art. 9(3) and 12: one control that supports your backup policy; not a compliance determination.
GDPR
Art. 32 security of processing — encryption and integrity controls
ISO / NIST
ISO 27001 A.12.3 · NIST SP 800-209 — storage security controls
- Infrastructure SOC 2 Type 2 certified
- Infrastructure ISO/IEC 27001:2022 certified
- Supports GDPR
- Supports HIPAA
- Supports PCI DSS
Support and billing
One team for your storage and your Veeam estate.
Support
24/7, in Turkish and English.
Invoicing
BackupSec Software, our Turkish company, invoices customers in Turkey and can issue invoices in TL. International customers can be invoiced from the UK.
Get a quote for ZeroVault.
Tell us your data volume, region and retention. We send a quote and plan the Veeam repository setup with you.
Comparison
How ZeroVault compares for Veeam backups.
Published terms from each provider's own pages, for its standard storage class. AWS prices are for us-east-1. List prices are in USD and change often.
| ZeroVault | AWS S3 | Backblaze B2 | Wasabi | Cloudflare R2 | |
|---|---|---|---|---|---|
| S3 Object Lock (Veeam immutability) | Yes: governance, compliance, legal hold | Yes: governance, compliance, legal hold | Yes: governance, compliance, legal hold | Yes: governance, compliance, legal hold (enable at bucket creation) | No S3 Object Lock API; R2 bucket locks are separate, prefix-based retention rules |
| Egress (download) fees | On request | $0.09/GB for the first 10 TB a month, less above that; first 100 GB a month free | Free up to 3x your average monthly stored data, then $0.01/GB | Free while monthly egress stays within your active storage (fair-use policy) | Free, no cap stated |
| API and request fees | None | PUT, COPY, POST, LIST $0.005 per 1,000; GET $0.0004 per 1,000 | Free (Class A, B, C); event notifications $0.004 per 10,000 after 2,500 a day | Free, under a fair-use policy | Class A $4.50 per million; Class B $0.36 per million |
| Minimum storage duration | On request | None (S3 Standard) | None | 90 days (Pay as You Go); 30 days on request | None (Standard) |
| Regions (Turkey region?) | 15; none in Turkey | 34 commercial; none in Turkey | 4, one per account; none in Turkey | 16; none in Turkey | Location hints and EU, FedRAMP and US jurisdictions; no Turkey option |
| 24/7 support in Turkish | Yes: 24/7 in Turkish and English | No. 24/7 on paid plans; Chinese, English, Japanese, Korean | Languages not stated. Email 9:00 to 17:00 Pacific; 24/7 on paid premium tiers | Languages not stated. Basic: business days, best effort; 24/7 and phone on paid Premium | No. English only; 24/7 on Enterprise |
| List price, storage | On request | About $23/TB-month ($0.023/GB, first 50 TB) | From $6.95/TB-month | $7.99/TB-month; 1 TB minimum monthly charge | About $15/TB-month ($0.015/GB) |
MinIO (now AIStor) is the self-hosted alternative. It supports S3 Object Lock and can run in Turkey, but you buy and run the hardware, so bandwidth and operating costs are your own.
Checked 26 September 2026. ZeroVault figures are BackupSec's own terms. Sources: AWS (S3 pricing, Object Lock, regions, support), Backblaze (B2 pricing, Object Lock, regions, support), Wasabi (pricing FAQ, Object Lock, regions, support), Cloudflare (R2 pricing, S3 API, data location, support), MinIO (pricing, Object Lock).
FAQ
ZeroVault questions, answered.
Is it Amazon S3 compatible?
Yes — standard SDKs, CLIs, and backup tools work with region-specific endpoint URLs and access keys from the BackupSec console.
Are there egress or API charges?
There are no API fees, and uploads are free. Egress (download) terms are part of your quote, so contact us for details.
Is it air-gapped?
No. ZeroVault is object storage reachable over the internet, so it is isolated, not air-gapped. It uses a separate account and credentials outside your Active Directory domain, and when immutability is enabled on the Veeam repository, Veeam sets Object Lock on your backups: even admin credentials cannot delete a locked restore point before its retention expires. If you need a true air gap, pair ZeroVault with offline media such as tape.
Can BackupSec staff delete my locked backups?
No, not while the lock is in compliance mode, which is what Veeam writes by default: in compliance mode nobody, including our own staff, can modify or delete a locked restore point until its retention ends.
Can I migrate from AWS S3 or Wasabi?
Yes. BackupSec migrates data from AWS S3, Azure Blob, Backblaze B2, and Wasabi at no additional tool cost — standard S3 clients and Rclone also work.
Where is my data stored?
In the region you choose. ZeroVault has 15 regions in North America, Europe and Asia, and none in Turkey. For backups that contain personal data of Turkish data subjects, we work through KVKK's cross-border transfer rules with you at contract stage.
Does it make us DORA or KVKK compliant?
No storage service makes an institution compliant on its own. ZeroVault gives Veeam S3-compatible storage with Object Lock support; how it fits your DORA or KVKK obligations is your assessment, and we can help you map it. Banks, SPK-regulated entities and other institutions that must keep backups in Turkey cannot use ZeroVault.
Further reading
From the knowledge base.
Contact
Let's talk backup
Talk to our team about backup security, Veeam backup monitoring, ransomware recovery validation, technical advisory, backup penetration testing, pricing, or a live demo of BackupSec.
Prefer to browse first? Read the FAQ