FAQ

Can my server read my clients' backups?

Not in normal operation. The server never receives the passphrase or your files' contents. A compromised server could still serve a malicious page or agent build, so protect it like any other admin system. Each device's key is derived from its backup passphrase on the device, and the server stores restore-point records and storage credentials, not keys. See Encryption and key recovery.

What happens if a client loses their passphrase?

While the device still runs, its agent holds the passphrase and keeps working. If the passphrase is lost and the device is gone too, that device's backups cannot be decrypted by anyone. Record every passphrase in your password manager when you set it.

Can ransomware delete the backups?

Not on S3 storage with Object Lock. Objects are written in compliance mode and cannot be deleted or overwritten until their lock ends, even with the bucket's keys. SMB and NFS shares do not have that protection. See Immutability and ransomware.

Do backups pass through the server?

No. Agents write encrypted chunks straight to the storage target. The server reads from storage only to serve file restores in the browser.

Which platforms are supported?

Windows, macOS (Intel), Linux and Proxmox VE, all 64-bit. Windows also gets a desktop app. Disk-image backups work on Windows and Linux. See the agent pages under Agents.

Can each client have their own storage?

Yes. Assign a target per tenant, or let a tenant add its own storage in Storage Vaults. See Storage targets and replication.

Is there a limit on devices, tenants or data?

The licence has none. The limits are your server and your storage. You can set a storage cap per tenant.

Can I bill my clients from it?

Yes, per seat and per GB-month, with card payments through your own Square account. See Billing tenants.

Does it work with CVN PSA?

Yes. The PSA shows each device's latest backup result and opens tickets for failed or stale backups. See CVN PSA.

Does it depend on our servers?

No. Backups, restores, agent updates and sign-ins all run between your server, your agents and your storage. The daily licence check-in (from version 1.0) never affects a running server if it fails.

What does the licence cover?

One production domain and one staging domain, every feature, and a year of updates and support. See Licences, domains and renewals.