Author: chris.stewart

We are happy to announce custom cloud storage options to meet your compliance and business needs. We can bullet-proof your backup solution against ransomware with immutable storage buckets.

Storage Locations

Canada Central (Coming Soon)

• United States West, East, Central
• EU London, Paris
• Japan Tokyo, Osaka

Storage Features

Our Wasabi storage backend utilises top tier data centers certified for SOC 2, ISO 27001 and PCI-DSS.

• Storage Providers AWS S3, Wasabi, Local, Network and MinIO S3 compatible storage services.
• Data Locations North America and Europe locations are online with more coming shortly.
• Double Data Encryption: Local AES 256 Encryption applied by backup agent plus cloud storage bucket level encryption.
• Data Protection Data center redundancy, 11x9s data durability, Immutable storage

Immutability Retention Modes

The Immutability feature is available upon request and prevents data from being modified or deleted within a period defined in GFS retention settings. It enhances security, protects data integrity and ensures compliance requirements.

Generally, there are two retention modes for Immutability:

• Governance mode. In this mode, users must obtain special permissions to modify or delete data. Objects in storage are protected against being deleted, but you can still delete them in the AWS console.
• Compliance mode. In compliance mode, a protected object version can’t be overwritten or deleted by any user, including the root user in your AWS account.

Compliant Cloud Storage Providers

Amazon S3 – Documentation

Microsoft Azure – Documentation

Google Cloud – Documentation

Wasabi – Documentation

Data Flow

Shield53 agent encrypts data on the workstation ensuring all data leaving the workstation is encrypted with AES 256 Bit Encryption. The diagram also illustrates that we backup directly to cloud storage increasing backup and restoration speed.

Our web portal is protected with Multi-Factor authentication ensuring all administrative staff have dedicated logins and MFA to protect against brute force and unauthorized access.

Data Segmentation

Shield53 uses separate storage locations and separate encryption keys for each end user’s Storage Vault. If you request a new storage locations, they are provisioned with separate access credentials. This ensures no end user can read or decrypt another end user’s data.

Agent Features

• Client-side data deduplication: Shield53 Backup detects duplicate blocks of files on a source machine and uploads only unique blocks to the storage in order to reduce backup time and bandwidth consumption.
• Immutability: data is protected from being modified or deleted within a period defined in your data retention settings.
• Increased object size limits: object size is increased from 5 TB to 256 TB, regardless of the storage provider’s limitations.
• Synthetic full backup support: get faster backups, since only the changed data is uploaded to the cloud to build the full backup based on the data uploaded previously.
• Accelerated incremental backups: using full synthetic back up technology we can ensure you always have full backup.