And why does it matter for protecting your data from ransomware?
Immutable means it cannot be changed or deleted — by anyone, for any reason, until a set period of time has passed. Not by ransomware. Not by a hacker who has stolen your password. Not even by us.
Once your backup is saved, it is immediately locked. It sits in its vault, untouchable, for the full length of your retention window. When something goes wrong — and statistically, something eventually will — that clean, locked copy is what you restore from.
Most backup systems store your data in a place that can be reached, written to, and deleted. That seems fine — until ransomware arrives. Modern ransomware doesn't just encrypt your computer. It hunts for your backups and destroys them first, so you have no choice but to pay.
An immutable backup vault cannot be reached that way. The lock is enforced at the storage infrastructure level — it isn't a software setting that can be turned off, and it isn't a password that can be stolen. The data is physically write-protected for the duration of the retention period.
Think of it like a safety deposit box at a bank — but better.
You can open it and take things out whenever you want. But someone who steals your key can too.
Once sealed, nobody can open it — not even the bank — until the time lock expires. The key doesn't matter.
VaultShield uses a technology called S3 Object Lock — the same standard required by HIPAA for medical records and by the SEC and FINRA for financial data. It's been protecting regulated industries for years. We've made it available for home users and small businesses at a price that makes sense.
When your backup runs each night, the resulting snapshot is immediately stamped with an immutability lock at the storage infrastructure level. The lock has an expiration date equal to your retention window. Until that date arrives, the snapshot cannot be modified, overwritten, or deleted by any means — including administrative override.
Immutability and encryption work together but do different jobs:
Prevents your backup from being deleted or altered. Makes sure it's still there when you need it.
Prevents anyone from reading your data. Even if someone accessed the storage, they'd see only scrambled data.
With VaultShield, your data is encrypted on your own device before it leaves your machine. We never hold your encryption keys — which means we could never read your files even if we wanted to.