Security Built
for Recovery.
EndLock Vault is architected around one principle — your backups must survive any attack, any failure and any event, and remain recoverable when you need them most.
Immutable Storage
Object lock (WORM) is activated the moment your data arrives in the vault. It cannot be modified, overwritten or deleted by anyone — including ransomware, insiders or EndLock Vault itself — for the full retention period.
Nothing to Destroy
Your vault sits outside your production environment and is enforced at the storage layer, not the network layer. An attacker who takes your network — and your credentials with it — still cannot encrypt, overwrite or delete a single stored backup.
Encrypted at Source
Your data is encrypted on your own device with AES-256 before it leaves. What travels the wire and what is written to storage is ciphertext — file names, folder structures and contents are not readable from it.
Full Visibility
Every backup job, restore and vault operation is recorded and visible to you. You can see what ran, when it ran, what it protected and whether it succeeded — without having to ask us.
Global Residency & Sovereignty
Choose your vault region at signup. Your data is stored exclusively in that region — never replicated, never moved and never processed outside it. Meet your local data residency obligations with certainty.
10 Vault Regions · AU Sydney · CA Toronto · EU Frankfurt · EU London · EU Paris · JP Osaka · JP Tokyo · SG Singapore · US Oregon · US Virginia
The Security Matrix
| Requirement | The EndLock Vault Solution |
|---|---|
| Ransomware Immunity | Immutable object lock (WORM) storage ensures backups cannot be encrypted, deleted or modified — even if an attacker has valid credentials. Recovery from before the attack is always possible. |
| Encryption Standards | AES-256-GCM encryption with SHA-256 integrity verification, applied on your device before data leaves it. Transmitted over TLS and written to storage in encrypted form only. |
| Data Residency | 10 vault regions across AU, CA, EU, JP, SG and US. Your data is stored exclusively in your chosen region and is never replicated, moved or processed outside it. |
| Geo-Redundancy | Add a second independently immutable vault in any other region. Both vaults operate with separate object locks — neither can affect the other. True resilience against regional failure. |
| Operational Visibility | Backup jobs, restores and vault operations are logged and available to you through your console and the backup agent, so you can verify what has run and what is protected. |
| Recovery Assurance | Restore from any device on your plan, or from any browser through the web portal — without reinstalling anything. A lost or stolen machine never stands between you and your data. |
Zero Compromise
Your Backups Should Be
Untouchable. Ours Are.
Immutable storage. Encryption at source. Guaranteed data residency. Deploy your vault today.