Skip to main content
Datatrek
LAYER 2.1 // S3 BACKUP
Managed Cloud Backup & Secure Sharing

A digital vault
for your data.

Encrypted, immutable backups on cloud object storage — with automatic endpoint backup via the Datatrek Backup Agent and managed file sharing directly from the platform. Resilient to ransomware, hardware failure, and accidental deletion.

Immutable
Object Lock against ransomware
Client-side
End-to-end encryption
S3 API
Full compatibility

Object immutability

Locked objects — cannot be modified or deleted for a defined period. Strong protection against ransomware.

Object versioning

Multiple versions per object — easy rollback to a known-good state.

Snapshot history

Backup Agent installed from the platform. Set folders, frequency, browse history, restore from any point in time.

Secure file sharing

Folder Share buckets with time-limited download links for external partners — one-click revocation if shared by mistake.

Two bucket types for two distinct needs

Backup Buckets — automated, scheduled backups from servers and workstations via the Backup Agent. Deduplicated and client-side encrypted. Folder Share Buckets — managed file-sharing space with browser upload, folder structure, and time-limited links for external partners (no Datatrek account required).
Client-side encryption, object immutability (Object Lock), and a complete snapshot history — documented proof of appropriate technical measures against ransomware, natural disasters, and human error.

What's included

  • Client-side Encryption
  • Object Immutability (Lock)
  • Object Versioning
  • Backup Agent (managed)
  • Snapshot Browser & Restore
  • Deduplicated Storage
  • Time-limited Share Links
  • Full S3 API Compatibility

Objectives

  • Data availability & integrity
  • Recovery from ransomware / disasters
  • Secure external file sharing
  • Reduced management complexity
  • Strong data encryption
NIS2 alignment

The service is fully aligned with NIS2 requirements for risk management, business continuity, and data availability/integrity. Client-side encryption, object immutability, and full snapshot history serve as documented proof of appropriate technical data-protection measures.

Start your first Datatrek bucket

Request a demo +30 2810 391352 soc@datatrek.io

Explore the other layers

LAYER 0.1

Managed Next-Gen SIEM

Every log, every event, every cloud and endpoint signal — ingested, correlated, and watched 24/7.

Learn more →
LAYER 0.2

Managed Extended EDR

Dual EDR stacks on critical servers. If one falls, the other takes the host offline.

Learn more →
LAYER 0.3

Managed Extended Endpoint Protection

ML pre-execution detection + ransomware, memory, credential & USB protection — parallel to any existing AV.

Learn more →
LAYER 1.1

Managed XNDR + Network Scanner

We see what EDRs don't — IoT, printers, cameras, and the lateral movement paths between them.

Learn more →
LAYER 2.2

Vulnerability & Patch Management

Continuous CVE/NVD scans across your estate. Reports by severity. Full audit trail.

Learn more →
LAYER 3.1

Managed Identity Threat Detection & Response

24/7 M365 + Google Workspace identity monitoring — session hijacking, credential theft, BEC, and inbox-rule abuse.

Learn more →
LAYER 3.2

Managed Security Awareness Training

Quarterly live seminars, simulated phishing, and NIS2-documented certifications — turning your team into the last line of defense.

Learn more →
LAYER 3.3

Managed 1Password — Password Management

End-to-end encrypted vault, Watchtower breach alerts, vault-scoped sharing — one Business license + one free Families license per user.

Learn more →