Object Lock
Governance or compliance mode — objects cannot be deleted or overwritten before retention expires.
WORM retention
ZeroVault · Cloud Object Storage
S3-compatible immutable storage.
ZeroVault is fully managed, Amazon S3-compatible cloud object storage — eleven nines durability, Object Lock, 14 regions, and zero egress or API fees from one platform. Logically air-gapped with WORM retention for backup and long-term archival — provisioned by BackupSec, ready in minutes.
11 nines
Durability
14
Regions
$0
Egress & API
Global coverage
14 regions across four continents.
Deploy closer to your workloads. Each region has its own dedicated BackupSec S3 endpoint — click a city on the map to zoom in.
Americas
Chicago · Dallas · Los Angeles · Miami · Montreal · Oregon · Phoenix · Virginia
Europe
Frankfurt · Ireland · London · Paris
Asia-Pacific
Singapore · Tokyo
Immutability
The delete command runs. The data stays put.
Object Lock enforces WORM retention — even if an attacker gains admin rights and compromises your backup console.
Use cases
Storage that meets every workload.
From backup targets to AI data lakes — one S3-compatible platform, fully managed by BackupSec.
Backup & archival
Immutable cloud repository, NAS offload, and long-term retention — with zero egress fees on restore.
Disaster recovery
Logical air-gap copy isolated from AD and production. Cross-region replication for geographic redundancy.
Media workflows
Petabyte-scale object storage for active and archived media — S3-compatible with your existing tools.
AI & data lakes
Affordable hot storage for large structured and unstructured datasets — no API-call charges at scale.
Cloud migration
Move from AWS S3, Azure Blob, Backblaze B2, or Wasabi — BackupSec handles migration at no extra tool cost.
Compatible clients
Works with the tools you already use.
Standard Amazon S3 API — connect any backup, DR, media, or migration client that supports S3-compatible object storage.
Backup & DR
Veeam · Commvault · Cohesity · Rubrik · NAKIVO · MSP360 · Acronis · Arcserve · Veritas NetBackup · Retrospect · Vembu · HYCU · Actifio · Catalogic · MicroFocus · Quest Rapid Recovery · Zerto · XOPERO ONE · JetBackup · Duplicati · Duplicacy · Restic · Kopia
S3 clients & migration
Rclone · Cyberduck · S3 Browser · CloudBerry · Mountain Duck · WinSCP · s5cmd · S3cmd · Flexify.IO · Couchdrop · MultCloud · Cloudmounter · TNTDrive · WebDrive · ExpanDrive
Media, NAS & platforms
LucidLink · Synology Hyper Backup · QNAP · TrueNAS · Proxmox · Nextcloud · ownCloud · Milestone XProtect · Snowflake · ClickHouse · Apache Spark
Platform
Everything in one S3-compatible platform.
Object Lock
WORM immutability — governance mode, compliance mode, retention, and legal hold.
Encryption
AES-256 at rest and in transit. TLS on every connection.
Versioning
Prior object versions retained per bucket policy — recover from accidental overwrites.
Cross-region replication
Replicate buckets across regions for redundancy and faster local access.
Event notifications
Triggers on object create, modify, or delete — integrate with your monitoring stack.
Bucket logging
Detailed access logs for audit trails and security monitoring.
MFA
Time-based second factor for console access and MFA-protected bucket deletion.
Cloud migration
Free migration from AWS S3, Azure Blob, Backblaze B2, or Wasabi — no third-party tools.
Web console
Your BackupSec management console.
Access, manage, and restore from anywhere — buckets, users, regions, and security in one place.
Dashboard
Centralized view of storage usage, regions, and account health.
Buckets
Create buckets, configure Object Lock, versioning, and access policies.
Users & access
IAM-style users, access keys, and per-bucket permission control.
Security
MFA, account settings, and region endpoint management.
Specifications
Technical details.
- Deployment
- Fully managed — no hardware. Provisioned in minutes via BackupSec console.
- API
- Amazon S3 compatible — standard SDKs, CLIs, and backup tools.
- Isolation
- Logical air-gap with separate credentials, IAM, and WORM enforcement.
- Durability
- Eleven nines (99.999999999%) with multi-AZ replication.
- Pricing model
- No egress fees. No per-API-call fees. Contact sales for capacity.
- Endpoints
- Region-specific BackupSec S3 URLs and access keys per bucket.
Regulatory coverage
Built for regulated industries.
Immutable, encrypted storage aligned with financial-sector and data-protection requirements — mapped to what auditors ask for.
ISO / NIST
ISO 27001 A.12.3 · NIST SP 800-209 — storage security controls
GDPR
Art. 32 security of processing — encryption and integrity controls
DORA
Art. 11–12 backup policy — air-gapped immutable copy
KVKK
Art. 12 technical measures — encrypted, tamper-proof storage
BDDK
Art. 45 backup · BT.31 ransomware — immutable last copy in 3-2-1-1-0
SPK
III-35.1 retention — WORM-protected archive
- HIPAA
- GDPR
- PCI-DSS
- SOC 2 II
- ISO 27001
Provision immutable cloud storage.
BackupSec plans region, retention, and access — then provisions ZeroVault as your immutable S3 target.
FAQ
ZeroVault questions, answered.
Is it Amazon S3 compatible?
Yes — standard SDKs, CLIs, and backup tools work with region-specific endpoint URLs and access keys from the BackupSec console.
Are there egress or API charges?
No. Free ingress and egress, no per-API-call fees.
How does the logical air-gap work?
ZeroVault credentials are separate from Active Directory and your backup management plane. Object Lock prevents deletion before retention expires.
Can I migrate from AWS S3 or Wasabi?
Yes. BackupSec migrates data from AWS S3, Azure Blob, Backblaze B2, and Wasabi at no additional tool cost — standard S3 clients and Rclone also work.
Does it meet DORA, KVKK, BDDK, and SPK requirements?
Yes. Immutable, encrypted storage aligned with ISO 27001 / NIST SP 800-209, GDPR Art. 32, DORA Art. 11–12, KVKK Art. 12, BDDK Art. 45, and SPK III-35.1.
Contact
Let's talk backup
Talk to our team about backup security, Veeam backup monitoring, ransomware recovery validation, technical advisory, backup penetration testing, pricing, or a live demo of BackupSec.
Prefer to browse first? Read the FAQ