Immutable backup
Backups that no one can modify or erase
A conventional backup protects your data only as long as the backup itself remains intact. Yet ransomware or a handling error can delete it. Immutable backup locks each version for a period you set: it remains readable and restorable, but can no longer be changed.
The principle
Write once, read as often as needed
Immutable backup relies on WORM technology (Write Once, Read Many). Data is written only once, then locked. Throughout the retention period, it can be viewed and restored, but neither modified nor deleted.
Single write
Each backup is recorded as a new version. Previous versions are never overwritten.
Unrestricted reading and restore
You view and restore any locked version, as often as needed.
Time-limited lock
You choose the retention period, up to 10 years. While it runs, no version can be modified or erased, even by an administrator: every action is logged and backed up.
Good to know: a deletion is itself a recorded event. It erases neither the history nor the document: the backup remains viewable and restorable during the retention period, but its files cannot be modified.
Why immutability
Three situations where it makes the difference
A backup is only useful if it is still there on the day you need it. Locking protects this last resort.
Cyberattack
Ransomware
Attackers first try to destroy backups to force you to pay. Even with stolen credentials, for example on a stolen computer, they can neither encrypt nor erase locked versions.
Human factor
Errors and insider threats
An accidental or deliberate deletion from inside the company does not reach protected versions. You restore the files to their original state.
Compliance
Regulatory archiving
Some documents must be retained for several years without alteration. WORM mode helps you demonstrate that documents have remained in their original state.
Setup
How immutable backup works
1
You choose the volume
You reserve the immutable storage space suited to the data to be protected, in 100 GB blocks.
2
You schedule
The agent installed on each machine backs up the selected data, at the times and frequency you define.
3
Each version is locked
Data is encrypted on your machine, with a key that only you hold, then written and locked. Versions are added without overwriting each other.
4
The lock expires at the end of the term
Each version remains protected until the end of the chosen retention period, up to 10 years. To go beyond that, you renew your contract and obtain a new 10-year storage.
In your backup strategy
With or without a WeDoBack subscription
Immutability does not replace a daily backup: it secures the versions you cannot afford to lose. You can use it in two ways.
On its own
For your most sensitive data
You do not have a backup subscription with us? Immutable storage can be subscribed to on its own, with one agent per machine concerned.
Where is your locked data kept?
Hosting, encryption, retention period: find out how our immutable storage works.
Put your backups out of reach
Tell us which data to protect and for how long: we will propose the right volume and configuration.
Phone and email support, 9 am to 1 pm and 2 pm to 5:30 pm (Paris time).
