security
A tape on a shelf is not connected to the internet. It can't be hacked, ransomwared, or accidentally deleted by a misconfigured script.
air-gapped by design
Once your data is written to tape, the tape goes on a shelf. The shelf is not connected to anything. No network. No power. No software updates. No attack surface.
This is intentional. Online storage can be compromised by malware, ransomware, or a sufficiently motivated attacker. Offline storage cannot. The only way to access your tape is physical access to the building.
encryption
- in transit
- All uploads and downloads use TLS encryption.
- at rest
- Your data is encrypted before it's written to tape.
- key protection
- Tape data encryption keys are protected using post-quantum cryptography.
- your key
- Give us a post-quantum age public key and new archives are encrypted to it. We keep only the public key. We can't decrypt them, and we can't recover them if you lose your key.
- bring your own
- You can encrypt data before uploading. We store it as is and can't read it.
physical security
Tapes are stored in climate-controlled facilities with restricted access. Copies can go to two buildings, in different cities.
When you buy a tape, you own it. You can request it be mailed to you at any time. It's your property.