Immutable Storage
Object Lock makes your backups fixed, unchangeable and impossible to delete for a period you choose — even by someone with admin credentials.
What immutable storage actually means
Immutable storage is data that is fixed, unchangeable, and can never be deleted for as long as its retention period holds. It works through Object Lock, a control that prevents any alteration to a stored object — making backups impervious to new ransomware infections.
Cybercriminals increasingly target backup and secondary systems directly, not just live production data, specifically to remove an organisation's ability to recover without paying. Keeping an archive of immutable backups guarantees you can recover from an attack without paying a ransom, and protects against malware, malicious or accidental deletion, and data corruption.
Protected by design
Once locked, an object cannot be overwritten or deleted by anyone — including an attacker who has compromised admin credentials.
Retention periods you control
Bucket-level defaults
Apply a uniform retention policy — for example, 30 days — to every object added to a bucket automatically, with no manual step per file.
Custom, longer holds
Need to retain data for years, not weeks? Set immutability for whatever period your policy requires — including retention windows as long as seven years.
Compliance mode vs. Governance mode
Compliance mode
The strictest setting. Locked files cannot be overwritten or deleted by any user, and retention dates cannot be shortened by anyone — not even an administrator.
Governance mode
A more flexible setting where specially authorised users, such as a root account holder, can reduce retention settings when there's a legitimate business reason to.
Built for regulated industries
Object Lock supports the record-keeping controls required by regulated sectors, including HIPAA, FINRA and CJIS, for securing and preserving electronic records, transaction data and activity logs.
- Guarantees accurate, uncompromised copies of historical data are kept
- Meets regulatory requirements for tamper-proof records
- Supports legal proceedings that require a verifiable chain of custody
Works with your existing backup software
Our storage is 100% Amazon S3-compliant, including support for VEEAM backups written straight into immutable, object-locked storage.
See Cloud Backup solutions →