← Resources

Where Backups Are Stored & How They're Protected

An overview of where Triumphant stores your backups, how they're encrypted, and how they're protected from deletion using Backblaze B2.

Created August 25, 2026

Where Backups Are Stored & How They're Protected

Triumphant stores backups in Backblaze B2, a cloud object storage platform built for exactly this kind of long-term, durable storage. This covers where your data actually lives, how it's protected in transit and at rest, and why a backup can't just be deleted out from under you. For the backup schedule itself, see How Backups Work.

Per-Tenant Isolation

Your backups are stored in logically isolated storage, separate from every other client's. One client's backup data is never mixed with, or accessible from, another's.

Encryption in Transit

When a backup runs, data is encrypted before it ever leaves your device and sent to Backblaze B2 over an encrypted connection. It's not readable in transit, even if it were somehow intercepted along the way.

Encryption at Rest

Once in Backblaze B2, your backups stay encrypted in cold storage. Data sitting on disk in the storage provider's datacenter is encrypted the same way it was in transit, there's no point where your backup data is stored in the clear.

Write-Locks & Ransomware Protection

This is the part that protects your backups even if your systems, or your credentials, are compromised. Backups are stored with write-locks enabled for the length of your retention policy, 30 days by default.

  • Once a backup is written, it cannot be modified or deleted, by anyone, including us, until its retention period expires.
  • This is what stops ransomware (or an attacker with valid credentials) from being able to reach into your backups and destroy them to remove your fallback option.
  • If you need a longer retention window for compliance or peace of mind, that's configurable, ask your account manager.

Need Help?

If you run into any issues, reach out to the Triumphant support team: