"We built EndLock Vault because the standard cloud backup model was broken. It was too easy for ransomware to delete backups, and too hard for businesses to know exactly where their data lived — or who could access it."
Traditional backups are copies of data sitting on a server somewhere. If an attacker gains your credentials, they can delete your live data and your backups at the same time. In minutes, years of work can be gone.
EndLock Vault was engineered to make that impossible. Using WORM object lock and AES-256 encryption applied on your device, a backup written to your vault cannot be altered or deleted until its retention period expires — not by ransomware, not by a stolen credential, and not by an administrator.
You choose the region. Your data is encrypted before it leaves your machine. You recover whenever you need to. We handle everything else.
Your data stays in the jurisdiction you choose. We do not move it, replicate it or process it outside that region.
Your data is encrypted on your own device with your Vault Key before a single byte is uploaded. What reaches our storage is ciphertext, and the key is never stored alongside it.
We do not measure success by how much data we store. We measure it by how fast you can recover when everything goes wrong.
Everything Included
Most businesses spend months procuring storage hardware, negotiating licensing agreements and managing infrastructure before a single byte is protected. With EndLock Vault, you need nothing except an internet connection.
No NAS devices, no tape libraries, no on-site servers. Your vault infrastructure is fully managed — enterprise-grade storage without the enterprise hardware bill.
Backup software and per-device protection licenses are included in every plan. No separate vendor agreements, no per-seat negotiations — one subscription covers everything.
No capacity planning, no storage vendor relationships, no provisioning delays. Your vault is provisioned automatically the moment your order is confirmed.
Upgrade your plan any time. Add devices, increase storage or add a geo-redundant vault in another region — all without touching any hardware or waiting on procurement.
Install the agent, connect to the internet and your vault starts protecting your data immediately. That is the entire prerequisite. No on-site IT. No infrastructure team. No setup fees.
No firmware updates, no storage management, no backup job monitoring. EndLock Vault runs automatically in the background — you get protected without lifting a finger after setup.
Immutable · Encrypted · Resilient
Every backup is written with a 30-day object lock. Once stored, it cannot be modified or deleted before that period expires — by anyone, including us. Ransomware that reaches your machine cannot reach into your vault.
AES-256-GCM encryption with SHA-256 integrity verification is applied on your device before data leaves it. Your Vault Key is never stored alongside your data.
Each region is a separate, isolated storage vault holding only that region's data. 10 regions today across AU, CA, EU, JP, SG and US, with more added as data sovereignty requirements evolve.
Built for the Worst Case
No hardware. No licensing. No procurement. Just an internet connection and a vault that cannot be overwritten.