Protection starts with the basics
MFA, encryption and provider-side service protection are planned across all four plans. Key-management options depend on the selected plan.
Security
Keep control.
Plan for recovery.
Understand the planned protections, the recovery model and the limits of each plan.
Planned — not yet available
Different ways back
Basic Free and Basic include a planned seven-day trash period, without file versions. Standard adds versions. Trash, versions and independent service-data recovery points serve different purposes.
Independent recovery points
The design targets seven successful daily recovery points for Basic, and 30 daily plus 12 weekly points for Standard and Advanced. These targets are not a recovery-time guarantee or a published SLA.
More control as needs grow
Standard adds antivirus and quarantine. Advanced adds automated responses to unusual changes, tailored retention, key options and more detailed reporting. Practical acceptance is still pending.
Explore the planned capabilities.
Trash and file versions
Recover deleted items and, in eligible plans, earlier file versions.
Planned — not yet available
- Basic Free
- Seven-day trash; no version history
- Basic
- Seven-day trash; no version history
- Standard
- Versions; history and trash limits within permitted bounds
- Advanced
- Includes the Standard capability described above
Basic Free/Basic: seven-day trash, no versions. Standard history/trash limits remain open. Do not silently delete current files or unresolved conflicts during cleanup.
Encryption and key management
Protect data in transit, at rest and in backups.
Planned — not yet available
- Basic Free
- Required encryption; provider-managed keys
- Basic
- Required encryption; provider-managed keys (same access scope)
- Standard
- Required encryption; provider-managed keys (same access scope) (same access scope)
- Advanced
- Customer-managed key option after validation
Customer-managed keys require validated recovery and compatibility; do not claim zero knowledge.
Retention and deletion policies
Apply defined retention and deletion rules.
Planned — not yet available
- Basic Free
- One period from upload
- Basic
- One period from upload
- Standard
- One period from upload (same access scope)
- Advanced
- Folder-specific rules; retention from last modification
Current-file retention differs from version history. No inherited fixed D+30/D+21/D+24h deletion promise.
MFA and security keys
Protect account access with supported MFA methods.
Planned — not yet available
- Basic Free
- Ordinary sign-in MFA in approved scope; mandatory sensitive flows
- Basic
- Ordinary sign-in MFA in approved scope; mandatory sensitive flows (same access scope)
- Standard
- Ordinary sign-in MFA in approved scope; mandatory sensitive flows (same access scope) (same access scope)
- Advanced
- Ordinary sign-in MFA in approved scope; mandatory sensitive flows (same access scope) (same access scope) (same access scope)
Ordinary sign-in MFA belongs to all four target plans. Methods/hardware keys require acceptance; mandatory sensitive flows remain.
Antivirus and quarantine
Check supported files and isolate detected threats.
Planned — not yet available
- Basic Free
- Not included in Basic scope
- Basic
- Not included in Basic scope
- Standard
- Included in approved Standard scope
- Advanced
- Includes the Standard capability described above
Customer-visible antivirus/quarantine starts at Standard; shared platform protection remains common.
Independent service-data copies
Protect service data with independent recovery copies.
Planned — not yet available
- Basic Free
- Required independent backup; seven daily points
- Basic
- Required independent backup; seven daily points (same access scope)
- Standard
- Approved profile: 30 daily and 12 weekly points
- Advanced
- Standard profile plus supported copy/topology choices
Seven successful daily points for Basic; 30 daily +12 weekly for Standard/Advanced. Points are not independent copies or SLA/RPO/RTO guarantees. Basic protection is not removed.
Service protection
Use a service designed around controlled access and narrow interfaces.
Planned — not yet available
- Basic Free
- Common platform requirement
- Basic
- Common platform requirement (same access scope)
- Standard
- Common platform requirement (same access scope) (same access scope)
- Advanced
- Common platform requirement (same access scope) (same access scope) (same access scope)
Provider security requirements are not a certification or proof of an invulnerable service.
Recovery testing
Verify that stored service data can be recovered.
Planned — not yet available
- Basic Free
- Regular provider recovery tests
- Basic
- Regular provider recovery tests (same access scope)
- Standard
- Regular provider recovery tests (same access scope) (same access scope)
- Advanced
- Optional higher cadence and agreed targets after validation
Regular tests are a requirement; frequency and contractual targets remain open. Historic synthetic tests are not product acceptance.
Unusual change protection
Detect unusual changes and stop writes when appropriate.
Planned — not yet available
- Basic Free
- Detection, alerts, manual emergency stop
- Basic
- Detection, alerts, manual emergency stop (same access scope)
- Standard
- Detection, alerts, manual emergency stop (same access scope) (same access scope)
- Advanced
- Policy-based automatic write suspension
Basic detection/alerts/manual stop; policy-based automatic suspension is Advanced. No ransomware-proof claim.
Event audit
Understand who did what and when.
Planned — not yet available
- Basic Free
- Core who/what/when records
- Basic
- Core who/what/when records (same access scope)
- Standard
- More detailed activity records
- Advanced
- Advanced relationships, reporting and export
Event records are not file versions. Exact exports, visibility and retention require implementation acceptance.
Service and security reports
Understand service status and eligible security reporting.
Planned — not yet available
- Basic Free
- Truthful service status
- Basic
- Truthful service status (same access scope)
- Standard
- Truthful service status (same access scope) (same access scope)
- Advanced
- Monthly exportable report
No live status destination until it exists; monthly exportable report is Advanced target scope.
Storage and backup regions
Choose from confirmed region options where supported.
Planned — not yet available
- Basic Free
- Assigned service region
- Basic
- Assigned service region
- Standard
- Assigned service region
- Advanced
- Choice from confirmed supported data and backup regions
Confirmed supported regions only; no residency guarantee or performance claim from a logical volume.