Data is encrypted on your own machine before it moves, backups can be locked so nothing can delete them inside the period you set, and every action is written to a trail you can hand to a reviewer.
| WHEN | ACTION | USER | TENANT | SUMMARY | |
|---|---|---|---|---|---|
| › | 2m ago | RESTORE | admin@serverstock.co | Serverstock | Status: SUCCESS · Hostname: WIN-SRV-DC01 · Target Path: D:\... |
| › | 2m ago | CREATE_RESTORE | admin@serverstock.co | Serverstock | Target Path: D:\ · Cross Device: no · Restore Onto: WIN-SRV-DC01... |
| › | 18m ago | CREATE_POLICY | admin@serverstock.co | Serverstock | Policy: Linux Infrastructure Policy · Daily 01:00 AM · S3 Mumbai |
| › | 2h ago | LOGIN | admin@serverstock.co | Serverstock | Email: admin@serverstock.co · Method: Microsoft 365 SSO |
| › | 6h ago | DEVICE_ENROLL | admin@serverstock.co | Serverstock | Hostname: WIN-SRV-DC01 · Platform: Windows Server 2022 |
Included across every protected machine without premium tier upgrades.
Data is encrypted directly on your machine before moving and stays encrypted in transit and at rest. You choose who holds the encryption password: we can manage it for you, or in zero-knowledge mode you hold it alone and we cannot read your backups.
Lock backup copies for a retention period you define. During that period, backups cannot be modified, overwritten or deleted by ransomware, by someone holding stolen credentials, or by us. That we cannot delete it either is what makes this a control rather than a promise.
You decide where data physically resides: your own local disk, or your own cloud bucket with any S3-compatible provider, in India or anywhere else you choose. We do not move it elsewhere.
Built to fulfill statutory personal data protection obligations with tenant isolation, documented retention schedules, and exportable audit evidence.
Authenticator app MFA with emergency recovery codes, brute-force rate limiting, and instant session termination on password resets.
Detailed machine-by-machine logging of all backup jobs, restores, logins, and credential modifications, exportable for compliance reviews and security questionnaires.
India's Digital Personal Data Protection framework distinguishes between fiduciary control and processing execution.
You decide what data is collected, define backup schedules, set retention policies, and choose where your storage repository resides.
We process backup instructions on your behalf. When you bring your own storage bucket or local drive, file contents never pass through or rest on our servers.
| NAME | DESIGNATION | ROLE | MFA | ACTIONS | |
|---|---|---|---|---|---|
| Serverstock Admin | admin@serverstock.co | Director | ● TENANT ADMIN | ● ENABLED | Edit |
| IT Operations Lead | infra@serverstock.co | Infrastructure Lead | ● OPERATOR | ● ENABLED | EditDelete |
| Compliance Auditor | audit@serverstock.co | Compliance Officer | ● VIEWER | ● ENABLED | EditDelete |
| Disaster Recovery Engineer | dr-ops@serverstock.co | DR Specialist | ● OPERATOR | ● ENABLED | EditDelete |
Our standard Data Processing Agreement (DPA) defines complete contractual terms. We can review custom enterprise procurement requirements during onboarding.
Direct, plain-language answers for your infosec and compliance reviewers.
No. Everything is encrypted on the machine before it moves. When using zero-knowledge encryption, you hold the key alone, and our systems have no mechanism to decrypt your content.
We do not scan for it or block it on your machines. That is antivirus, a different product, and we will not pretend otherwise. What we do is make sure ransomware cannot destroy the copy you recover from. Once a backup is locked, no user, compromised credential or system process can delete or overwrite it until the retention window expires, and you restore from the last clean copy.
Wherever you configure it. You can write directly to local on-premise storage, your own Indian cloud bucket (AWS S3, Azure Blob, Wasabi), or storage purchased from Satkosh hosted in India.
Yes. We offer a standard Data Processing Agreement aligned with the Digital Personal Data Protection (DPDP) Act to support your vendor compliance requirements.
Updates are cryptographically signed and install only when an administrator triggers them from the console. Endpoints verify the digital signature before applying any update.
We are in our pilot stage and operate under strict documented security controls and DPDP-aligned technical standards. We provide complete architectural transparency and technical questionnaire responses for procurement reviews.
We can walk your IT and compliance team through our technical architecture, provide questionnaire responses, and conduct a live restore verification.
No spam, just a reply from our team. Managed backup by Serverstock. Made in India.
